Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa
File: 326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa (raw, json)
Hash identifier: Ffx6oEeRi6Nzb88mARFBwCZ7ZzHAuyKbF6ttBYf8Vf0=
Subject key identifier: 87:63:54:BC:06:8F:BE:38:BE:62:95:D4:F4:EE:4A:00:DB:AE:47:03
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 688541A23D78A8312E69BF278999DFB7AB3F0EA8
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa
Signing time: Tue 06 Dec 2022 14:47:14 +0000
ROA not before: Tue 06 Dec 2022 14:42:14 +0000
ROA not after: Tue 05 Dec 2023 14:47:14 +0000
asID: 210502
IP address blocks: 2a11:f2c0:fffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:85:41:a2:3d:78:a8:31:2e:69:bf:27:89:99:df:b7:ab:3f:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:14 2022 GMT
Not After : Dec 5 14:47:14 2023 GMT
Subject: CN=876354BC068FBE38BE6295D4F4EE4A00DBAE4703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:4a:25:e3:18:1c:05:53:ad:ac:b0:27:8e:
c6:f4:7c:4d:da:55:a9:e3:7c:a6:82:a7:4f:b8:bc:
01:33:ed:b0:d2:11:4e:8b:0b:21:dc:ab:c8:5b:f9:
64:9a:46:0b:8f:89:14:58:92:b5:b1:1c:9d:bf:16:
84:55:ba:e4:37:3b:1c:24:9d:ab:2c:2e:9a:6d:9f:
58:ab:80:98:56:6f:45:00:fd:8b:13:5e:9d:94:51:
0f:9f:85:3b:34:38:99:c5:21:b8:56:90:20:05:0b:
6a:b1:42:d1:a7:43:60:4e:5c:6a:a7:34:de:2d:6f:
0f:0c:60:69:d2:2d:e9:6e:30:5f:b2:7d:22:2e:07:
6e:c7:07:61:39:ae:1f:5d:4b:dd:7b:d1:f4:69:5b:
5c:22:5a:4a:46:a7:5e:6d:f4:08:03:f3:f8:dc:13:
cb:dc:3d:d2:ff:09:a4:2a:a1:6e:a3:bc:de:9b:34:
a3:e8:d0:3d:65:a0:c0:a1:03:d4:a7:03:bc:1c:97:
6a:3c:03:0a:66:f6:21:2a:ac:eb:0a:3b:44:1f:40:
98:94:57:e2:d0:fe:3c:e7:ba:d4:a5:d4:fa:2e:a8:
d0:5e:e0:b4:af:bb:be:7e:65:4a:53:0c:d9:cc:23:
99:f9:33:2a:7a:ec:91:c3:c9:54:cd:70:78:63:35:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:63:54:BC:06:8F:BE:38:BE:62:95:D4:F4:EE:4A:00:DB:AE:47:03
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666653a3a2f34382d3438203d3e20323130353032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
60:d1:4e:11:6f:3f:4d:79:6e:9e:77:f5:e3:cc:6f:b3:7f:c8:
e7:91:c7:f3:aa:45:02:1c:23:22:0d:3a:b6:6e:e2:96:bd:db:
54:64:04:f8:c4:f7:ae:76:30:ac:c1:c5:b6:f1:3c:50:8c:0f:
eb:79:5c:55:c0:2a:4b:99:29:53:69:9e:78:c0:c8:ee:ba:c6:
f7:84:f2:c0:60:29:86:a9:8b:ff:26:76:8d:ef:08:2c:b5:66:
81:4e:12:82:83:93:74:de:19:27:b0:5a:a8:19:65:e8:81:ee:
1b:36:93:11:16:df:22:ae:df:00:c5:62:d1:79:be:e4:3b:6e:
71:04:4b:3f:8a:2f:79:d7:6c:50:de:5e:36:fe:d6:02:37:b4:
e6:34:66:48:a7:2e:1a:01:0a:d9:e4:24:91:e2:33:90:46:04:
6a:13:1e:32:97:c1:0a:39:4b:2a:59:20:72:c0:af:70:b6:6f:
08:37:c1:10:15:f8:47:98:ef:8a:07:51:a5:a7:07:ee:81:5d:
4b:dd:c7:ad:76:7a:69:c1:e0:8c:79:b7:bf:3f:d0:20:15:9c:
fb:8b:be:13:1b:f3:11:8e:27:86:f3:e5:31:14:d6:27:69:b0:
d9:01:0f:b0:48:27:52:3f:2f:fa:fc:09:cb:13:b9:95:40:f4:
03:83:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:39:19 2025 by rpki-client