Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
File: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (raw, json)
Hash identifier: 8IX1kLsCGA4p8LbjhJ3CyESnd3kDLI1PAqcakd//xss=
Subject key identifier: 52:C6:6E:63:BF:E4:69:07:A8:F6:5B:73:3F:B8:59:AB:ED:4F:C4:5B
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 12386B12EDB4D8D912EB6B618ECE04A79BCC73
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
Signing time: Tue 06 Dec 2022 14:47:14 +0000
ROA not before: Tue 06 Dec 2022 14:42:14 +0000
ROA not after: Tue 05 Dec 2023 14:47:14 +0000
asID: 203024
IP address blocks: 2a11:f2c0:fff0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:38:6b:12:ed:b4:d8:d9:12:eb:6b:61:8e:ce:04:a7:9b:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:14 2022 GMT
Not After : Dec 5 14:47:14 2023 GMT
Subject: CN=52C66E63BFE46907A8F65B733FB859ABED4FC45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:43:c2:6c:2a:00:93:df:e6:3c:7b:61:e9:
93:dd:54:a4:af:c0:23:d2:eb:38:43:38:3f:dd:d2:
d1:e8:0f:58:60:17:c2:1b:a6:ca:4d:65:eb:37:c1:
ac:6b:72:32:67:ab:73:9c:d3:d9:ce:44:1a:67:00:
3f:2c:96:cb:35:c5:ff:9f:72:af:28:8a:a7:ed:91:
9d:60:81:3b:ed:df:58:18:77:80:50:a1:a3:bd:12:
0a:81:12:f1:7b:47:0f:f5:c4:e6:74:0b:20:c1:27:
24:63:7a:27:1c:c4:66:d6:35:1d:d2:15:78:05:a1:
19:9b:ca:9b:b4:16:89:87:7d:1b:2a:2d:22:79:30:
9d:83:20:5d:c9:d4:5f:2e:b3:8b:42:8a:f5:06:86:
09:48:8e:01:d3:9c:45:cd:99:f0:30:d7:4e:07:b6:
62:1e:38:68:51:33:2a:ca:97:85:04:3d:e0:b2:94:
a9:4e:f3:de:b3:02:e2:1f:ba:62:3d:23:b5:10:0c:
89:49:38:b1:db:3e:43:ae:7f:dc:1d:0e:fe:f9:54:
9e:75:3f:f1:1b:a1:9e:fd:8b:9f:6e:66:c2:fc:0a:
c2:1a:2b:c6:7a:a9:26:75:d3:4c:3f:51:a2:d6:2a:
f1:a3:5e:24:d0:69:4c:7c:4e:f5:d9:5a:aa:ed:d5:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C6:6E:63:BF:E4:69:07:A8:F6:5B:73:3F:B8:59:AB:ED:4F:C4:5B
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e2:91:4f:92:38:2b:81:fc:a1:00:4a:49:f2:86:76:ed:c6:
33:ca:da:04:30:e9:73:56:c0:3d:35:b2:a4:35:70:2b:bd:11:
bd:0c:01:01:09:94:31:9e:90:46:5f:83:6b:f7:3b:13:0e:03:
ad:5f:64:05:53:42:ac:b9:9e:af:32:f6:7b:57:9c:c4:d0:dd:
1d:ce:ee:fc:35:c5:35:47:03:cc:da:db:40:23:d8:b9:13:98:
aa:3b:a6:7d:71:5f:73:bf:f5:63:ed:bf:1d:46:74:db:31:f0:
08:b4:05:e4:60:7d:99:b4:43:f3:90:37:5e:65:ad:6d:89:0e:
a5:83:36:9c:72:57:51:d5:a8:31:7c:41:ef:4d:c2:2b:fe:29:
00:65:1a:cc:75:e9:a0:83:20:d1:7d:d3:57:99:d7:68:57:e2:
15:8f:e8:9b:e8:20:12:e9:68:b1:69:45:f1:28:d6:60:74:43:
8c:c5:d0:df:fb:db:e6:fb:ba:5d:44:8a:31:59:e8:09:18:a9:
09:16:41:3c:3a:20:1f:0d:4e:fc:df:3c:db:3d:9b:6f:19:ca:
96:6d:76:95:fd:dd:14:a1:29:15:af:b7:ad:ff:bc:a4:bf:d7:
68:84:7d:3a:15:49:5c:cf:6b:3b:5c:7f:56:75:e8:03:aa:91:
a0:55:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:59:35 2025 by rpki-client