Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
File: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: 9y00w6cwXJQxOVcC+hWes6m35jsrIAutWCWZ9sJrWuQ=
Subject key identifier: 4C:2F:5E:B2:BA:3E:5F:7D:14:B6:25:96:00:5D:5E:46:40:8A:61:48
Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial: 39EB29A4E0DB0FE50AE302FB98B7037914ABBEFF
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
Signing time: Sun 07 Jul 2024 19:05:34 +0000
ROA not before: Sun 07 Jul 2024 19:00:34 +0000
ROA not after: Sun 06 Jul 2025 19:05:34 +0000
asID: 205789
IP address blocks: 2a11:f2c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:eb:29:a4:e0:db:0f:e5:0a:e3:02:fb:98:b7:03:79:14:ab:be:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Validity
Not Before: Jul 7 19:00:34 2024 GMT
Not After : Jul 6 19:05:34 2025 GMT
Subject: CN=4C2F5EB2BA3E5F7D14B62596005D5E46408A6148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:cf:be:76:14:d3:41:03:31:a8:3a:b8:5b:
98:69:f8:12:4d:bd:58:8c:c0:8b:7e:26:9c:28:4c:
02:3b:10:6e:c1:ea:b8:57:ed:1a:fe:3b:0f:5a:c8:
23:e6:77:0d:ee:7f:f3:99:13:b9:ec:93:b0:3a:2a:
43:42:5b:e7:80:df:03:f2:0d:cc:98:5c:46:09:4c:
eb:83:f1:43:b7:cb:49:bf:b0:72:48:f2:a5:e1:2d:
72:a7:a6:69:66:6f:f6:ee:b9:0b:5c:ed:59:23:c1:
65:04:80:b3:a1:f1:86:cc:40:4d:ec:99:c0:d5:79:
b8:7b:01:a1:38:f5:63:6e:ae:91:74:ad:68:7b:eb:
56:0f:24:25:8d:07:09:30:6a:7b:8a:23:97:ec:91:
86:e9:d8:be:31:5c:ad:21:13:48:6e:94:28:85:36:
6f:34:e1:d7:c7:e7:c1:61:e9:70:a2:a8:34:2a:05:
76:b5:b1:f6:fb:68:0a:27:ac:27:cf:14:68:83:93:
a4:99:2b:34:17:79:bf:bc:5f:9a:98:20:dd:c8:70:
b4:7e:5f:01:5c:08:4c:70:dc:03:c1:bd:90:39:59:
94:e9:7f:62:ad:87:4b:2b:e2:4e:84:b4:3a:12:52:
84:b1:93:f7:6d:ed:2f:3f:48:3c:47:94:13:b8:28:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:5E:B2:BA:3E:5F:7D:14:B6:25:96:00:5D:5E:46:40:8A:61:48
X509v3 Authority Key Identifier:
keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
54:50:1b:52:f1:92:28:4d:3a:8e:e0:42:48:70:e3:89:57:d3:
aa:be:e4:7b:c1:0b:0f:4f:27:b8:8a:c1:c2:1b:d4:d5:98:8e:
9f:e0:08:96:d7:78:82:0e:99:f4:de:47:c6:84:76:5c:8b:65:
08:c7:72:2f:30:14:e1:59:f0:06:16:ab:81:ab:4d:70:b7:f4:
51:1f:ff:df:c4:d3:7d:ff:0d:a2:38:ee:d4:db:13:7a:56:30:
34:a4:4c:af:0a:18:78:61:35:72:4d:28:51:96:85:60:af:d2:
1c:7f:db:54:3b:12:8a:6b:5f:70:20:06:64:a2:a5:e8:30:a2:
b5:56:86:09:e4:38:7a:23:ac:ae:2f:f9:66:d7:65:6d:ac:ff:
59:bf:72:e8:a8:4c:3e:d9:ac:60:5b:97:e9:56:84:71:32:b2:
55:41:96:31:92:3f:a4:45:0a:c5:b6:3e:6d:32:25:37:c7:9d:
f2:8f:83:85:d4:dc:de:0e:36:c3:86:10:05:c6:9c:82:48:13:
03:a5:1d:90:ca:59:82:8b:c0:38:4f:8e:94:f3:26:42:4c:b9:
74:08:73:d7:ca:74:0c:57:c4:84:b8:31:26:55:4e:e6:25:21:
0c:3f:4a:ed:1c:f0:1c:94:b3:83:9e:5c:0f:cf:45:35:cc:39:
6d:48:d5:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUOesppODbD+UK4wL7mLcDeRSrvv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG
MjFFMDUxODAeFw0yNDA3MDcxOTAwMzRaFw0yNTA3MDYxOTA1MzRaMDMxMTAvBgNV
BAMTKDRDMkY1RUIyQkEzRTVGN0QxNEI2MjU5NjAwNUQ1RTQ2NDA4QTYxNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTs++dhTTQQMxqDq4W5hp+BJN
vViMwIt+JpwoTAI7EG7B6rhX7Rr+Ow9ayCPmdw3uf/OZE7nsk7A6KkNCW+eA3wPy
DcyYXEYJTOuD8UO3y0m/sHJI8qXhLXKnpmlmb/buuQtc7VkjwWUEgLOh8YbMQE3s
mcDVebh7AaE49WNurpF0rWh761YPJCWNBwkwanuKI5fskYbp2L4xXK0hE0hulCiF
Nm804dfH58Fh6XCiqDQqBXa1sfb7aAonrCfPFGiDk6SZKzQXeb+8X5qYIN3IcLR+
XwFcCExw3APBvZA5WZTpf2Kth0sr4k6EtDoSUoSxk/dt7S8/SDxHlBO4KAhVAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUTC9esro+X30UtiWWAF1eRkCKYUgwHwYDVR0j
BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv
Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD
OEYyMUUwNTE4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT
cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wYTQ2
MzdkZjViYTc0M2ZlYTFiNDgyYmU4MjM1ODE4Zi8wLzMyNjEzMTMxM2E2NjMyNjMz
MDNhNjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzNzM4Mzku
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLAsAswDQYJKoZIhvcNAQELBQADggEBAFRQG1LxkihNOo7g
Qkhw44lX06q+5HvBCw9PJ7iKwcIb1NWYjp/gCJbXeIIOmfTeR8aEdlyLZQjHci8w
FOFZ8AYWq4GrTXC39FEf/9/E033/DaI47tTbE3pWMDSkTK8KGHhhNXJNKFGWhWCv
0hx/21Q7EoprX3AgBmSipegworVWhgnkOHojrK4v+WbXZW2s/1m/cuioTD7ZrGBb
l+lWhHEyslVBljGSP6RFCsW2Pm0yJTfHnfKPg4XU3N4ONsOGEAXGnIJIEwOlHZDK
WYKLwDhPjpTzJkJMuXQIc9fKdAxXxIS4MSZVTuYlIQw/Su0c8ByUs4OeXA/PRTXM
OW1I1fA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:53 2025 by rpki-client