Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
File: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (raw, json)
Hash identifier: mPc2v+EyiPjfik3qz6s2grJsBcZ9W/5PFe3PfZerL68=
Subject key identifier: 1C:CB:9E:9B:E2:4C:D9:CD:47:57:FA:C9:8C:77:57:AA:4F:26:FE:D5
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 4C87B51E0AB04794525D25622D5556095FCC7088
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
Signing time: Tue 06 Dec 2022 14:47:14 +0000
ROA not before: Tue 06 Dec 2022 14:42:14 +0000
ROA not after: Tue 05 Dec 2023 14:47:14 +0000
asID: 210561
IP address blocks: 2a11:f2c0:fe00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:87:b5:1e:0a:b0:47:94:52:5d:25:62:2d:55:56:09:5f:cc:70:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:14 2022 GMT
Not After : Dec 5 14:47:14 2023 GMT
Subject: CN=1CCB9E9BE24CD9CD4757FAC98C7757AA4F26FED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:11:fc:71:7c:cc:aa:ab:07:28:e7:60:e5:
e6:66:7a:1a:5a:45:67:36:59:e9:0e:48:e7:43:41:
7d:4d:99:60:74:ee:b3:69:36:2b:d6:58:96:2b:6a:
80:81:e6:69:4e:e9:82:92:89:47:c5:2e:1f:f4:ec:
d0:24:36:01:29:9a:5c:82:a2:35:5f:09:7d:7c:ba:
38:fd:2d:8f:74:49:7b:c9:60:0a:56:1e:8c:5e:c1:
26:17:4c:b4:e0:27:71:3d:2e:64:75:a2:7b:4f:08:
61:97:24:9f:a0:4f:00:78:fd:f1:43:e8:24:21:4d:
85:3e:28:8a:12:82:22:40:45:41:d1:01:ad:5d:d8:
75:17:b6:4d:3a:b1:12:dc:dc:cb:ad:88:e5:15:f0:
ea:15:bb:21:af:12:f5:67:98:8b:9b:c2:b6:01:b5:
6b:40:af:ee:99:49:c0:ef:26:e7:b5:54:3b:d4:ad:
89:91:4c:df:1c:6a:eb:04:e6:0a:2c:07:45:4e:56:
90:4b:e1:64:45:5c:9a:f3:1b:a6:69:8f:80:3c:ee:
ff:1c:19:3f:20:1b:18:4e:f5:53:8c:3a:b7:72:7b:
58:b3:44:52:83:7a:6f:8c:7b:2a:6e:05:df:c8:ab:
2d:37:3d:83:3a:87:33:f0:52:b7:dc:f7:eb:9d:b0:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:9E:9B:E2:4C:D9:CD:47:57:FA:C9:8C:77:57:AA:4F:26:FE:D5
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
12:f5:b3:9a:e9:5c:df:39:81:46:cb:cb:99:d3:ec:0e:27:85:
de:6e:47:de:36:f5:d4:51:ac:5a:56:16:6a:1b:34:47:43:7e:
af:aa:24:19:07:c7:e1:c9:1a:73:9b:0a:4a:7e:8b:d2:74:c8:
8c:cf:41:4b:57:b7:41:19:dc:22:8c:6b:7f:64:78:15:5f:d1:
3b:f9:72:00:76:64:90:a5:ab:77:a5:1a:68:ba:3f:21:27:73:
95:3b:5f:cd:12:fd:46:09:96:d3:26:b0:c1:d3:e5:21:c9:71:
79:29:d2:9a:92:f9:20:0b:07:0a:ed:44:b1:0b:bc:1b:5a:af:
cb:a7:08:51:6a:5e:0d:ca:7b:d0:e4:d2:ab:41:52:ab:cd:ef:
ca:ae:e9:4b:f6:b9:57:25:2c:e0:95:76:81:dc:37:a0:1a:d7:
19:2b:77:a0:60:67:a7:ce:61:e6:d8:26:d4:89:6d:a3:e4:8e:
db:f2:fa:b2:97:4c:f9:90:4c:9e:73:9f:ae:b4:9b:4f:fe:96:
d5:7c:89:b7:92:79:ec:f9:46:e5:dc:25:94:52:37:fd:99:0f:
32:09:16:da:e8:2c:14:81:59:c7:53:55:3a:85:5a:f6:e0:15:
34:ee:24:cf:aa:9e:e3:6d:e7:1d:a8:36:e8:ac:99:f7:5f:b4:
7e:ff:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org