Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
File: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (raw, json)
Hash identifier: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=
Subject key identifier: 99:D6:C0:73:74:8F:09:6C:EE:B7:2A:EB:8B:83:54:EE:24:99:36:37
Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial: 659E3D8BD8C5897128CA92576CEB40030E0EA731
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
Signing time: Sun 07 Jul 2024 19:34:13 +0000
ROA not before: Sun 07 Jul 2024 19:29:13 +0000
ROA not after: Sun 06 Jul 2025 19:34:13 +0000
asID: 203105
IP address blocks: 2a11:f2c0:fffb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9e:3d:8b:d8:c5:89:71:28:ca:92:57:6c:eb:40:03:0e:0e:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Validity
Not Before: Jul 7 19:29:13 2024 GMT
Not After : Jul 6 19:34:13 2025 GMT
Subject: CN=99D6C073748F096CEEB72AEB8B8354EE24993637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:3c:a8:c9:c0:41:2e:e6:3e:07:69:8e:ba:
82:7a:67:de:80:1c:9d:21:b6:fd:dd:18:7b:9e:dc:
5a:02:e3:bb:1b:06:f1:9f:e0:ea:46:c9:67:a0:3d:
d8:80:4f:e5:2f:48:b1:20:6b:2b:b9:5d:af:6e:bb:
45:ea:18:00:59:d2:f5:cc:25:10:1f:cf:78:47:08:
c9:bc:2a:20:da:46:86:5c:4b:65:ec:c7:73:65:5d:
3b:2c:bb:50:cb:5f:26:e4:aa:3f:e8:a3:8e:65:17:
91:63:a0:1d:48:5d:07:3e:bd:98:ad:26:a7:07:d3:
81:b4:9f:26:9b:cb:b9:26:bc:a3:5e:61:d4:ff:58:
05:1d:bb:1c:e3:bb:9b:4b:ea:de:06:92:b8:f7:36:
a1:35:0f:d4:59:ef:7a:6e:de:e3:89:ea:ed:34:e2:
b4:17:7e:ef:ec:cd:46:3d:89:65:ed:a3:f6:78:8b:
87:70:16:8a:47:3a:a1:65:4d:52:44:02:3f:f9:73:
e9:8c:d7:ac:18:5e:89:74:d4:4c:ed:51:51:ef:6d:
7e:c4:b8:71:44:0f:1d:e2:53:f2:a3:43:4d:d5:8a:
b3:2e:46:f5:df:44:82:ed:95:41:e7:ce:53:e3:39:
c5:34:49:47:7b:a0:5f:48:7d:45:e1:27:30:ff:09:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:C0:73:74:8F:09:6C:EE:B7:2A:EB:8B:83:54:EE:24:99:36:37
X509v3 Authority Key Identifier:
keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
22:34:3a:71:9b:9a:da:bb:9f:79:78:26:47:99:75:1a:1b:62:
c8:bf:d2:c7:a7:02:7c:53:74:70:fe:9e:ca:ef:4d:87:c0:4c:
99:89:2c:e3:c4:d7:7d:6a:99:16:62:7e:f2:c0:a4:3c:49:28:
45:52:01:2b:f2:c0:67:f2:2d:cf:da:d0:0b:51:78:b8:be:11:
c3:49:59:34:74:71:cd:ef:ae:ea:bf:da:61:3e:b5:60:be:43:
ef:4f:46:d5:01:14:d8:87:7b:61:6d:2c:ed:b0:08:e5:f9:1d:
19:9f:1e:4c:0b:3d:bd:1a:b3:24:97:b8:74:09:30:57:55:09:
6a:82:29:3b:73:8d:dc:c6:36:4f:20:17:5e:2d:f7:c4:ed:df:
8d:65:91:31:1d:67:75:c4:07:4f:2f:d6:a7:2a:30:03:d6:f8:
9b:e2:56:5c:33:1e:6e:f3:8b:77:62:02:92:a1:70:10:21:8c:
cd:fe:78:5b:ea:07:3c:ff:45:1e:5e:0b:e2:0d:48:c8:e2:74:
1d:d2:17:ba:86:fc:f1:c2:c3:4c:e8:ca:c2:6e:e3:cf:d9:f7:
bc:99:35:27:9c:ea:b0:95:3e:e8:15:d9:f3:a5:30:a9:8c:5c:
71:66:fb:b1:0b:d0:07:82:6b:8b:43:1d:97:d7:d5:79:61:ee:
28:60:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:05 2025 by rpki-client