Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa
File: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (raw, json)
Hash identifier: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=
Subject key identifier: 51:DB:41:59:ED:F7:8F:DF:75:48:FA:0B:3C:BF:94:41:94:EE:48:D6
Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial: 4FA0E2D665767F7D6B35777942177D56B0964613
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa
Signing time: Thu 26 Dec 2024 11:26:42 +0000
ROA not before: Thu 26 Dec 2024 11:21:42 +0000
ROA not after: Thu 25 Dec 2025 11:26:42 +0000
asID: 214513
IP address blocks: 2a11:f2c0:ffa0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a0:e2:d6:65:76:7f:7d:6b:35:77:79:42:17:7d:56:b0:96:46:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Validity
Not Before: Dec 26 11:21:42 2024 GMT
Not After : Dec 25 11:26:42 2025 GMT
Subject: CN=51DB4159EDF78FDF7548FA0B3CBF944194EE48D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:a1:36:e3:6a:ab:26:d3:9b:d4:31:c7:75:
b8:80:f5:77:28:50:d7:37:a0:f2:46:98:9e:ae:b4:
0b:d3:3e:5f:dd:73:4b:a7:cb:5f:5d:75:3e:f8:58:
74:5f:15:2d:60:2c:46:19:cf:f3:da:04:98:23:ae:
9d:4c:d4:7f:aa:a5:fc:ad:f3:d3:4d:24:f4:0f:02:
51:2f:b3:9f:37:9f:59:a4:3b:6f:b0:7f:05:42:ea:
d7:f4:08:8d:ef:77:1b:94:17:93:1b:81:c5:90:30:
ea:70:fe:21:be:e6:c6:b7:60:55:e5:77:ec:4c:e4:
bf:71:71:68:e9:4e:5a:7c:a1:16:27:f7:8c:6b:07:
6a:6d:ab:8a:25:eb:0a:c4:be:98:e9:cc:1e:b4:c7:
46:3e:14:74:0f:c3:d0:83:fc:ea:89:52:2f:c3:b1:
65:3c:eb:3d:a5:2f:36:8e:b3:89:84:b8:38:7b:b1:
77:72:5b:d3:d6:b8:7c:a7:14:13:0f:bb:b5:c4:ab:
69:60:ec:26:42:4e:c5:c3:1a:05:fc:d9:0d:1b:99:
15:6c:04:bf:b0:e4:dd:c3:dd:0b:ea:ee:a4:fd:06:
d6:7e:dc:ee:e5:12:bd:5b:d2:ce:a4:fb:89:2a:85:
49:4d:bc:9b:9f:4d:bc:d7:4b:6d:90:c8:50:d4:4d:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:41:59:ED:F7:8F:DF:75:48:FA:0B:3C:BF:94:41:94:EE:48:D6
X509v3 Authority Key Identifier:
keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffa0::/44
Signature Algorithm: sha256WithRSAEncryption
60:ed:06:25:d9:98:d4:ec:c5:7c:95:f3:e7:b5:41:7a:09:08:
a2:4e:fc:0b:fe:70:58:5d:18:8d:d1:61:72:c7:ea:28:6b:de:
3e:04:1b:e7:cc:c8:bc:48:e7:67:85:e9:f3:52:ec:d7:f8:d2:
44:4e:5c:5a:91:81:46:b2:05:2d:02:dc:b0:ea:8a:76:ab:0b:
5a:73:16:1b:d9:f4:ed:f7:92:f7:82:90:67:c8:01:bd:79:f4:
74:d1:aa:e1:5c:71:19:18:1b:cb:e5:f0:fe:80:1a:2e:28:5d:
3e:04:33:3f:67:3b:43:e1:86:ad:9b:a0:31:80:d7:65:b1:1e:
ab:05:2e:85:fd:54:f1:f6:6a:d7:ff:28:77:a6:83:ff:33:74:
ee:ea:f9:6a:2e:74:e5:25:4c:fd:d6:77:3d:99:dc:73:2e:b1:
17:5a:06:a4:a6:7a:8d:25:47:7e:5b:0a:fe:9b:d9:dd:7f:dd:
1e:df:b2:6f:89:7e:6a:eb:c7:86:5d:41:6b:83:f9:d3:cd:1d:
97:28:fc:a1:2d:02:a8:23:31:50:b0:bc:4a:10:c7:18:c3:a5:
6f:70:b5:39:76:89:a8:6d:ee:b3:7f:61:10:64:7c:50:fe:ee:
33:dc:33:87:a5:d9:90:28:ea:6c:22:f8:ea:a4:2d:df:00:08:
12:5e:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:14:37 2025 by rpki-client