Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa
File: 326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa (raw, json)
Hash identifier: stD0C415PXs60OBxPqFoAeNJk331o+wgsX90iCX5Uf0=
Subject key identifier: 78:B1:4C:E1:6F:DC:B8:61:37:CC:B6:E6:40:23:D8:A8:49:22:A2:01
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 5D760B8F9CAEE7C36D4A3337814FC5401A7EC3E6
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa
Signing time: Tue 06 Dec 2022 14:47:14 +0000
ROA not before: Tue 06 Dec 2022 14:42:14 +0000
ROA not after: Tue 05 Dec 2023 14:47:14 +0000
asID: 211998
IP address blocks: 2a11:f2c0:fd00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:76:0b:8f:9c:ae:e7:c3:6d:4a:33:37:81:4f:c5:40:1a:7e:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:14 2022 GMT
Not After : Dec 5 14:47:14 2023 GMT
Subject: CN=78B14CE16FDCB86137CCB6E64023D8A84922A201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:1c:0a:ec:8c:9f:3a:2e:bc:2d:ff:ad:db:
0a:e3:24:fe:b6:f4:5d:b3:6d:54:fe:b2:47:12:cd:
01:39:8e:28:52:b0:f4:0d:b7:57:3c:ef:c6:d9:bc:
6f:c4:5e:7b:cf:4c:72:9d:b1:51:5f:6c:cc:02:f4:
00:da:b9:e8:0b:62:21:5a:b2:ca:dc:71:e8:5b:47:
72:4f:ec:6d:71:9a:e6:67:74:db:0d:76:b5:e4:fd:
9e:18:0b:f1:34:f2:0d:49:33:e3:26:eb:52:3d:a6:
a6:11:92:02:41:ad:c9:8f:04:0b:07:4d:e8:02:17:
49:02:85:00:c5:7e:d3:9b:35:a1:58:a0:df:64:7c:
96:73:4e:2a:52:b9:67:bc:f1:9e:2d:69:d4:14:04:
34:9c:e8:53:0d:71:a8:30:c1:3a:89:c3:03:76:a5:
e4:7e:c1:62:a9:1c:4d:0e:50:b3:91:d0:0b:05:49:
a8:07:1d:a0:26:28:72:23:2b:47:b2:69:a5:e5:f6:
db:28:7d:84:78:8d:24:42:06:7b:10:45:fc:93:66:
ac:05:62:7e:15:c6:88:6f:fa:16:5c:44:09:bb:c3:
8b:34:a0:1d:0a:72:fd:f7:84:2e:55:c1:14:7f:25:
70:e1:ab:6e:90:d9:76:dc:8f:d2:c6:03:b3:cc:0a:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:4C:E1:6F:DC:B8:61:37:CC:B6:E6:40:23:D8:A8:49:22:A2:01
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666430303a3a2f34302d3438203d3e20323131393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
8f:96:19:28:0f:1b:14:32:ea:fd:21:64:93:48:be:bb:0d:a3:
bc:2c:b7:c9:16:9e:e5:ae:f2:8d:5f:de:aa:d1:2d:9c:f2:4b:
e2:8e:fc:ad:b4:3d:df:de:7a:22:b6:bc:b0:f2:5d:f7:c7:07:
a4:a7:d6:86:39:c8:6e:4d:3b:af:0b:ae:a0:12:95:60:f2:c6:
33:59:04:b3:d1:f0:b6:84:d7:f3:c3:f0:f2:52:ab:c8:63:74:
58:8b:99:20:44:c8:98:77:f4:cf:a2:84:e2:a7:76:cc:f8:e3:
64:f6:4c:d8:05:0e:a0:d5:8b:9f:7f:cb:47:78:3f:d1:1b:70:
5e:63:fb:72:48:b0:35:f1:14:03:f2:15:96:c1:00:71:bb:91:
26:0d:0e:6d:ab:88:b2:5f:2e:e9:b7:f5:14:7d:e6:83:38:31:
6a:64:5a:c4:94:6e:8d:b5:72:cf:aa:a4:cc:41:57:01:67:16:
0f:2b:10:22:44:22:b0:7b:a0:a6:9c:3d:f9:9d:1f:23:e4:e3:
2d:03:0d:20:51:02:91:dd:f9:06:12:f1:33:da:37:f4:02:48:
14:89:20:ba:b9:b7:ed:4c:d4:3c:1c:c9:18:00:b5:98:a7:cc:
94:3a:ef:1e:a5:1c:33:b5:a7:6b:10:42:92:ac:15:8f:c3:b0:
8e:63:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:13:37 2025 by rpki-client