Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
File: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json)
Hash identifier: YD87VuDWl6RzcJHjHlr6R3EBVqte9zlmJHvxRC+hX0w=
Subject key identifier: 7E:13:F5:03:BB:8A:7F:C4:2E:B0:2B:F5:24:73:6E:74:7B:60:B1:E1
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 4DEEB919E9EAE526772BCD683C3DB81C78735457
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
Signing time: Tue 06 Dec 2022 14:47:14 +0000
ROA not before: Tue 06 Dec 2022 14:42:14 +0000
ROA not after: Tue 05 Dec 2023 14:47:14 +0000
asID: 204017
IP address blocks: 2a11:f2c0:fffa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ee:b9:19:e9:ea:e5:26:77:2b:cd:68:3c:3d:b8:1c:78:73:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:14 2022 GMT
Not After : Dec 5 14:47:14 2023 GMT
Subject: CN=7E13F503BB8A7FC42EB02BF524736E747B60B1E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:8d:f5:d0:c9:33:84:35:48:9c:a7:3f:cb:
46:ab:9b:a7:76:c7:8b:c8:dc:73:56:98:a1:d3:cc:
6c:c2:25:dd:cb:9f:f9:91:3f:fd:fd:ba:a5:d5:60:
59:95:1c:5b:6d:3d:c7:40:64:4d:61:84:c5:2a:8d:
35:8d:58:c2:54:b6:54:00:dd:18:b6:f4:6a:30:98:
da:4a:b5:f8:07:7e:94:f0:18:fe:e0:63:1d:98:99:
88:d0:3b:d9:fd:01:87:72:47:6f:b7:12:6a:91:f7:
29:6b:01:96:79:2c:7a:3a:60:7f:13:57:7f:92:a2:
d4:3e:5b:ff:60:63:fd:ff:0d:58:2a:1b:d2:98:a3:
bc:5b:d7:c7:dd:8b:ee:b1:21:2b:a5:56:b3:40:84:
51:ec:4d:0c:76:41:e4:66:62:fd:c3:ca:13:ba:59:
2b:a3:d0:80:b7:5e:1b:76:f5:a2:09:f2:e6:d4:dd:
da:e8:61:4e:5a:0c:00:df:27:37:d7:60:78:32:11:
41:a6:58:1f:ef:cd:92:70:f5:65:aa:1b:e6:27:fa:
31:3a:ab:01:60:04:8d:8f:a5:68:71:19:7a:94:eb:
d0:7b:93:e3:f4:a5:dd:7b:41:66:1b:30:02:f0:a2:
d2:81:bd:40:8b:39:a4:7a:30:ab:24:32:5e:60:8b:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:F5:03:BB:8A:7F:C4:2E:B0:2B:F5:24:73:6E:74:7B:60:B1:E1
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
b2:dd:08:d9:a5:9e:bd:b8:51:0e:64:ae:3b:93:bc:be:1c:dd:
c7:3e:f6:47:24:42:41:f3:34:d1:7f:d0:83:29:03:8e:0a:ce:
d4:f1:6e:4b:ef:45:96:fd:18:ec:28:7e:b9:6b:f3:54:4a:00:
37:1a:79:9c:e0:dc:69:35:23:8a:ea:96:45:5e:79:aa:f5:07:
18:6c:97:53:59:2b:dc:01:a9:1c:f9:2f:4e:8d:ad:8b:08:8c:
e8:7c:cf:aa:2e:8e:88:bb:40:20:54:25:59:55:bd:55:12:db:
fd:b9:a9:fb:f7:e2:5f:c1:b6:af:b2:8d:52:f4:c2:b6:e1:fd:
17:8d:18:19:a0:ec:f1:48:b7:32:26:ad:55:26:82:01:89:8c:
13:20:32:4a:74:86:18:9d:90:d8:38:42:63:a8:17:dd:c3:0f:
63:e2:2e:0d:82:81:6e:02:a9:fb:b3:26:60:8d:ef:17:57:b5:
bc:d2:f5:e5:e2:f5:5f:8d:b2:09:22:91:cc:b7:a9:58:71:5d:
7f:90:63:51:61:1e:75:be:73:af:21:1e:6a:60:6c:db:ba:ec:
6e:0a:b4:d7:19:f5:8d:06:a1:ee:79:fe:56:a1:9f:1b:d1:e9:
18:fc:74:c6:b5:8b:fd:de:10:ca:27:af:23:95:56:c4:29:7a:
7a:d6:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org