Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa
File: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (raw, json)
Hash identifier: /G9/fCCESQVkrL1vd7vxQZsGFA0sqEqgBb2R42eCgLc=
Subject key identifier: 4C:40:AF:F3:6C:64:49:62:C4:F0:13:B3:F6:28:6D:41:44:DA:9D:46
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 2804E5494FB9F58D7088067B262CEF88539FCABD
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa
Signing time: Tue 06 Dec 2022 14:47:15 +0000
ROA not before: Tue 06 Dec 2022 14:42:15 +0000
ROA not after: Tue 05 Dec 2023 14:47:15 +0000
asID: 204725
IP address blocks: 2a11:f2c0:fff9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:04:e5:49:4f:b9:f5:8d:70:88:06:7b:26:2c:ef:88:53:9f:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:15 2022 GMT
Not After : Dec 5 14:47:15 2023 GMT
Subject: CN=4C40AFF36C644962C4F013B3F6286D4144DA9D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:dc:a6:c6:28:e5:00:a3:0c:7c:c0:a1:c1:
09:b2:a7:17:8e:48:b8:38:3a:7c:a6:46:cf:ea:35:
c9:c3:4d:b7:57:90:66:84:1e:17:33:8d:33:75:47:
ba:ee:e8:0d:c0:e0:c5:c7:ba:ec:09:42:1f:5d:84:
af:d6:6f:bd:5e:d2:5a:ac:5b:91:c9:96:79:f2:92:
62:5f:1b:96:9a:0d:c1:c2:04:9d:cd:e5:87:fd:e1:
08:dd:78:6e:c9:57:06:88:c7:c4:a6:0d:03:79:dc:
15:17:0d:00:5c:f2:61:a4:59:44:4d:f6:90:09:a5:
1e:fc:bb:66:5b:0e:86:30:34:3b:92:81:a1:bc:a3:
12:b4:e4:89:94:1f:16:6e:00:56:70:f0:be:d6:76:
98:b6:2b:02:84:c9:d7:93:3f:81:e4:9f:4e:80:52:
c9:24:45:62:d6:58:ba:5c:50:49:52:ed:d1:c2:d3:
32:e3:7c:14:b3:53:a0:32:a2:03:8e:ae:ef:76:1a:
29:16:29:10:80:46:57:e9:3b:4f:6c:04:6f:c3:ff:
69:fb:ed:82:8f:9b:c9:67:80:a1:9d:cb:26:3c:58:
45:bb:af:2a:6f:63:84:bf:c7:3c:25:59:3a:9a:7f:
4a:85:5a:83:b5:f4:ef:7b:10:8d:38:15:58:0b:76:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:AF:F3:6C:64:49:62:C4:F0:13:B3:F6:28:6D:41:44:DA:9D:46
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff9::/48
Signature Algorithm: sha256WithRSAEncryption
0a:59:4b:39:7f:9d:b6:a0:3b:f5:64:3c:eb:60:eb:37:aa:af:
fb:0a:bf:c8:9b:41:7f:13:1d:63:00:48:22:ed:b2:74:a8:88:
f8:2e:2d:f1:d9:19:ac:63:fe:3c:b7:dc:e6:a2:8f:63:8b:1f:
5f:1a:b7:f1:0f:e9:87:28:e5:42:e8:18:9c:e9:10:44:a3:bf:
6f:10:a1:73:eb:f9:8d:d0:44:1c:9b:ad:ac:e4:b8:83:e5:8f:
b5:61:b5:51:84:8c:8a:77:d2:ea:cf:48:04:90:45:70:7e:e4:
25:ba:9f:b8:a1:c1:45:c1:bd:77:9a:89:2d:97:a9:c1:05:e4:
6c:5c:68:75:d1:70:d7:3e:92:a3:4d:93:45:6a:f2:f4:ae:83:
91:55:9c:75:c7:0e:9e:bf:96:5d:62:9d:43:db:21:e9:cb:50:
79:a2:88:ae:c2:f4:9a:0a:ef:15:5c:3a:60:6d:c6:ca:19:31:
33:94:4d:b5:ea:8a:e8:c8:db:e1:ee:16:41:14:f1:a9:5c:8a:
a1:c5:ac:26:70:a2:e6:a6:e4:75:9e:46:97:4f:79:ee:a2:96:
62:73:ec:f1:0f:c3:b1:b3:5a:7e:3a:c2:f6:39:45:7c:3a:49:
e6:77:23:38:83:20:c1:37:ec:08:97:6a:30:91:52:40:86:da:
e0:a7:88:d3
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUKATlSU+59Y1wiAZ7JizviFOfyr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlmNTg2MTBiYTEzMWJhYWRkZjIwNmYxMTQ0NzE2NDIw
NWIyM2JlNDAeFw0yMjEyMDYxNDQyMTVaFw0yMzEyMDUxNDQ3MTVaMDMxMTAvBgNV
BAMTKDRDNDBBRkYzNkM2NDQ5NjJDNEYwMTNCM0Y2Mjg2RDQxNDREQTlENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0NymxijlAKMMfMChwQmypxeO
SLg4OnymRs/qNcnDTbdXkGaEHhczjTN1R7ru6A3A4MXHuuwJQh9dhK/Wb71e0lqs
W5HJlnnykmJfG5aaDcHCBJ3N5Yf94QjdeG7JVwaIx8SmDQN53BUXDQBc8mGkWURN
9pAJpR78u2ZbDoYwNDuSgaG8oxK05ImUHxZuAFZw8L7Wdpi2KwKEydeTP4Hkn06A
UskkRWLWWLpcUElS7dHC0zLjfBSzU6AyogOOru92GikWKRCARlfpO09sBG/D/2n7
7YKPm8lngKGdyyY8WEW7rypvY4S/xzwlWTqaf0qFWoO19O97EI04FVgLdpt/AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUTECv82xkSWLE8BOz9ihtQUTanUYwHwYDVR0j
BBgwFoAUmfWGELoTG6rd8gbxFEcWQgWyO+QwDgYDVR0PAQH/BAQDAgeAMHQGA1Ud
HwRtMGswaaBnoGWGY3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L2FzMjA3OTYwLXJwa2ktY2EvNy85OUY1ODYxMEJBMTMxQkFBRERGMjA2RjExNDQ3
MTY0MjA1QjIzQkU0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbWZXR0VMb1RH
NnJkOGdieEZFY1dRZ1d5Ty1RLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsG
AQUFBzALhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9hczIw
Nzk2MC1ycGtpLWNhLzcvMzI2MTMxMzEzYTY2MzI2MzMwM2E2NjY2NjYzOTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoR8sD/
+TANBgkqhkiG9w0BAQsFAAOCAQEACllLOX+dtqA79WQ862DrN6qv+wq/yJtBfxMd
YwBIIu2ydKiI+C4t8dkZrGP+PLfc5qKPY4sfXxq38Q/phyjlQugYnOkQRKO/bxCh
c+v5jdBEHJutrOS4g+WPtWG1UYSMinfS6s9IBJBFcH7kJbqfuKHBRcG9d5qJLZep
wQXkbFxoddFw1z6So02TRWry9K6DkVWcdccOnr+WXWKdQ9sh6ctQeaKIrsL0mgrv
FVw6YG3GyhkxM5RNteqK6Mjb4e4WQRTxqVyKocWsJnCi5qbkdZ5Gl0957qKWYnPs
8Q/DsbNafjrC9jlFfDpJ5ncjOIMgwTfsCJdqMJFSQIba4KeI0w==
-----END CERTIFICATE-----
Generated at Sat Feb 22 03:58:54 2025 by rpki-client