Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
File:                     326131313a663263303a3a2f32392d3438203d3e20323037393630.roa (raw, json)
Hash identifier:          oO2BaSJ3x3A3chrIVqj01rIv+4lbSLCzSuvIA0Ua8tY=
Subject key identifier:   01:38:5F:AF:6A:3E:FF:6D:31:5D:3F:45:33:96:AA:43:13:ED:3E:20
Certificate issuer:       /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial:       0B451235DEA7DC78E06214DBE6FAE43749C9FC89
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
Signing time:             Tue 06 Dec 2022 14:47:15 +0000
ROA not before:           Tue 06 Dec 2022 14:42:15 +0000
ROA not after:            Tue 05 Dec 2023 14:47:15 +0000
asID:                     207960
IP address blocks:        2a11:f2c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:12:35:de:a7:dc:78:e0:62:14:db:e6:fa:e4:37:49:c9:fc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
        Validity
            Not Before: Dec  6 14:42:15 2022 GMT
            Not After : Dec  5 14:47:15 2023 GMT
        Subject: CN=01385FAF6A3EFF6D315D3F453396AA4313ED3E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:1d:ad:99:de:f0:a6:e3:02:bc:b2:45:b5:
                    5b:f2:3e:e9:b2:57:57:76:54:5a:5e:d2:94:c5:c3:
                    cf:43:42:71:38:7e:51:30:af:21:87:86:92:34:e1:
                    fa:c0:db:6a:f9:f4:30:e5:a4:b6:db:c9:a3:74:4c:
                    ce:ba:f9:e8:bb:4c:af:9d:93:c9:39:65:ae:4a:52:
                    25:3e:ee:ef:c6:87:5a:59:28:f9:a8:15:20:21:aa:
                    83:16:60:24:15:48:7e:40:27:5b:3a:c7:16:07:03:
                    17:37:27:71:5f:ed:64:ef:8e:76:b4:f2:9f:d9:3e:
                    3e:4b:36:6b:8b:c1:c1:0b:c6:04:5d:13:ec:10:58:
                    8c:65:dd:1d:5f:4e:51:16:11:fd:b9:ef:11:a9:6d:
                    e6:1f:fd:3e:99:21:67:07:0e:bd:f2:c4:1b:74:b5:
                    9e:64:92:42:38:78:66:5f:71:7d:eb:33:f7:23:2f:
                    76:43:f0:8c:d2:46:50:ec:31:96:f6:9b:c5:36:d2:
                    5c:8c:07:c3:ba:c9:36:f8:b8:69:2d:92:3a:fb:a1:
                    df:62:07:10:b9:d0:46:7f:06:af:1e:42:7b:c0:e2:
                    d1:63:e9:f1:ad:6f:f1:50:e2:67:ec:7e:77:a1:41:
                    bb:ad:e6:d1:00:ab:68:21:d9:f5:2c:02:4b:50:60:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:5F:AF:6A:3E:FF:6D:31:5D:3F:45:33:96:AA:43:13:ED:3E:20
            X509v3 Authority Key Identifier:
                keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:a6:8d:15:88:5c:ec:f3:b5:0e:8f:b9:41:8e:ed:d7:3b:
         9c:ea:67:c2:1c:fe:01:6f:6c:b5:46:8c:04:76:5a:a7:ac:b7:
         c0:78:20:d9:3d:67:05:de:8d:44:52:7d:b9:37:4e:e7:9e:e5:
         1a:00:07:73:37:bb:53:c9:2d:3d:e7:5f:f9:dc:65:f9:4d:fd:
         75:ac:ea:7d:34:44:0a:a2:2b:42:51:54:72:67:68:9d:79:10:
         b6:9d:c5:3b:ef:b1:f8:f6:ce:85:b8:ee:33:df:0a:4d:d5:2c:
         db:f0:16:e3:59:8d:89:85:0c:37:4d:c3:b8:ad:62:9f:02:f7:
         07:33:e7:1e:30:83:da:86:06:5a:99:3b:34:af:b8:ef:ea:d0:
         bb:ca:40:bc:a6:1f:7c:6c:61:8d:51:8f:57:3a:9b:f7:be:99:
         d7:47:d4:b6:5e:c1:81:c8:d0:27:4e:bc:9d:39:ee:5a:88:47:
         58:63:51:c0:41:2f:e2:7e:c4:03:30:58:fe:14:95:bf:d0:98:
         10:63:ab:d0:ce:db:06:21:ac:99:72:9f:05:92:93:31:48:4a:
         a7:d4:60:ee:07:be:2e:86:22:2b:d9:9f:fa:fe:86:d4:23:15:
         12:a6:57:fd:90:8e:d3:91:6a:ef:b8:50:6a:4c:ef:6b:c8:06:
         17:e4:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org