Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
File: 326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa (raw, json)
Hash identifier: wKcrK5NMnqFeL40hXGBYFtkfjv+i6/hIvAH+2++uwqQ=
Subject key identifier: 41:47:60:63:7D:CC:2C:89:B0:09:7C:47:BD:E4:39:99:21:70:ED:BF
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 10819B62121714347C96C05F624AA67017CE9D99
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
Signing time: Tue 06 Dec 2022 14:47:15 +0000
ROA not before: Tue 06 Dec 2022 14:42:15 +0000
ROA not after: Tue 05 Dec 2023 14:47:15 +0000
asID: 208051
IP address blocks: 2a11:f2c0:ffe0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:81:9b:62:12:17:14:34:7c:96:c0:5f:62:4a:a6:70:17:ce:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:15 2022 GMT
Not After : Dec 5 14:47:15 2023 GMT
Subject: CN=414760637DCC2C89B0097C47BDE439992170EDBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:62:2c:71:6c:29:ba:e5:1f:a3:de:a2:3f:
3b:86:6b:5f:36:1b:2b:ca:d0:c4:eb:6c:4d:eb:f0:
e0:19:34:06:eb:5b:32:0e:eb:be:30:5d:a6:6d:69:
4c:96:84:5f:e3:5f:64:c6:aa:15:e5:18:d5:f9:68:
9a:40:e1:2f:80:c7:7d:3f:57:ba:50:36:d6:41:ea:
0e:c3:0e:cf:d1:cc:25:f2:5a:41:0f:80:51:ea:74:
2b:b1:69:ca:7d:cd:b2:d1:c6:40:3c:00:3d:35:67:
97:00:a3:bc:48:66:b0:02:56:a5:df:5a:db:22:98:
83:99:5d:5a:79:87:7b:77:ad:fe:e3:46:50:d8:81:
17:29:56:47:f6:d7:d4:08:d2:10:2b:14:22:88:f7:
86:f8:3f:16:1e:f4:52:8c:4b:4b:c9:10:06:3f:6b:
87:d1:3c:c6:3a:63:85:6c:40:80:66:a4:2b:0d:1e:
fc:18:82:6a:67:c6:18:32:06:0e:dd:67:df:48:96:
ef:ce:1f:18:ee:75:28:c2:4c:41:8c:00:65:54:33:
6e:46:3b:6f:4b:de:80:ec:ea:60:e0:e6:2b:e3:cf:
ca:7d:9d:9f:e2:d6:b7:d9:eb:fc:f3:90:49:9f:41:
a7:b1:0e:e1:8c:99:34:92:28:8d:b1:a3:e7:c8:b2:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:60:63:7D:CC:2C:89:B0:09:7C:47:BD:E4:39:99:21:70:ED:BF
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
67:9b:87:de:0b:a3:a7:52:1d:0e:05:b8:17:0c:e9:77:a7:2b:
b9:b2:a9:26:31:72:1a:0c:6a:60:f0:0a:81:6a:98:13:cd:65:
9e:b9:41:cf:f7:5b:3b:e8:7c:d6:76:0e:7b:6a:bf:c1:77:b5:
d4:ca:7a:2b:7a:5b:d5:b5:35:e1:65:d6:09:e3:ad:e9:bc:98:
04:b0:0b:28:4c:8a:75:17:18:ca:45:ff:d1:14:3d:8a:18:c7:
71:a0:64:07:1d:d7:46:97:4b:ce:65:91:a7:7c:b9:be:16:9c:
0e:f5:dd:8c:56:7a:7a:e6:65:3a:44:f0:7a:25:16:33:bf:9f:
57:f3:33:d7:59:34:d1:33:3b:d9:c7:ab:d6:bf:43:dc:cc:d7:
15:19:b1:db:7b:86:68:c7:f9:ce:57:d6:79:e8:61:64:85:aa:
07:57:9e:f4:80:f0:8b:65:27:da:4a:05:29:73:f4:1e:4f:36:
f3:73:45:af:a9:c4:01:f9:fe:d6:f7:f8:c9:49:43:21:67:60:
9b:df:6c:d1:78:3b:3f:6c:5b:1b:b3:d3:f0:f5:36:e8:ec:a1:
a3:f4:ee:db:76:35:83:e3:ab:59:e4:26:c7:e7:b9:bf:23:8e:
17:cc:08:bf:6c:d6:23:56:d4:44:7d:c9:67:d3:ee:96:31:ac:
44:17:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:45:18 2025 by rpki-client