Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/r4SfRp9fbRh4IC67zNq6Wt4Op5c.roa
File:                     r4SfRp9fbRh4IC67zNq6Wt4Op5c.roa (raw, json)
Hash identifier:          ePdEJxXbgWkOryO2YY/Mv8gXqa5FY0CLhcvUd5+MXmU=
Subject key identifier:   AF:84:9F:46:9F:5F:6D:18:78:20:2E:BB:CC:DA:BA:5A:DE:0E:A7:97
Certificate issuer:       /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial:       019396233511408721F7243866F79E79D3E2
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/r4SfRp9fbRh4IC67zNq6Wt4Op5c.roa
Signing time:             Thu 05 Dec 2024 09:25:09 +0000
ROA not before:           Thu 05 Dec 2024 09:25:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44283
IP address blocks:        2a13:7300::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:96:23:35:11:40:87:21:f7:24:38:66:f7:9e:79:d3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
        Validity
            Not Before: Dec  5 09:25:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=af849f469f5f6d1878202ebbccdaba5ade0ea797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:98:15:f4:84:e6:e6:7e:1e:72:ad:60:d2:
                    49:fb:15:11:c9:c8:5e:3b:d5:cb:f4:ba:03:22:7f:
                    3a:86:c4:f1:ba:31:2b:21:6f:a7:31:93:bd:ff:bc:
                    17:45:d6:2e:84:aa:30:dd:31:56:5d:66:91:9b:bc:
                    b0:e9:5c:f1:8b:38:60:34:59:23:75:7e:7d:53:5a:
                    1d:e2:f6:a2:c2:88:a6:06:85:f1:f7:2f:b5:bb:c9:
                    82:c5:ad:0b:30:53:3d:96:45:28:c3:77:0b:3b:05:
                    b9:61:5f:c3:a3:4e:2c:52:ad:7a:1a:21:cf:ee:51:
                    c8:c6:2d:c7:e3:8b:39:f3:e1:14:8a:4b:f6:b4:e8:
                    10:12:3b:ee:04:0f:bb:90:ae:f4:69:f4:79:7b:a2:
                    25:66:42:f6:5d:66:3c:18:ec:04:69:ac:1b:aa:b0:
                    05:6e:49:dd:01:18:a4:e1:57:9c:b5:6d:f9:96:a0:
                    15:40:56:dd:87:97:52:82:05:5b:2f:67:4e:bb:25:
                    c5:1d:a4:de:69:7a:78:b9:6e:5a:d0:06:53:8b:06:
                    73:6f:da:30:04:5d:b6:02:3c:00:c7:a5:df:35:ff:
                    bb:0b:93:bf:2a:16:1b:e2:c7:79:f7:2b:12:19:ee:
                    8d:26:a8:87:80:ef:84:06:54:29:86:f5:b7:b5:7d:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:9F:46:9F:5F:6D:18:78:20:2E:BB:CC:DA:BA:5A:DE:0E:A7:97
            X509v3 Authority Key Identifier:
                keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/r4SfRp9fbRh4IC67zNq6Wt4Op5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7300::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:c2:bb:2c:44:2d:35:dc:f8:14:1a:18:a0:24:82:32:06:
         6a:19:e0:cb:12:0a:1a:3c:ed:54:de:fb:a2:4b:65:f0:8d:dc:
         2f:3b:de:c5:79:ae:1b:78:e1:60:bc:63:ba:c3:b2:b4:30:82:
         05:de:18:c2:5c:7d:77:00:d6:46:86:2f:78:0b:be:4c:15:45:
         87:51:56:0f:12:6a:31:7d:c1:36:86:50:d3:9a:78:88:2d:e0:
         cb:11:c9:17:70:aa:56:3d:b3:80:60:ac:27:8a:32:78:22:ee:
         45:8f:7f:0c:d2:41:50:85:bd:23:b1:37:3f:b0:c2:f2:82:84:
         b2:6e:ff:3a:8c:43:5a:c0:c6:5a:1e:9c:bc:46:c6:34:c6:32:
         3f:fa:75:66:fa:de:13:08:2f:65:a1:3e:ed:2c:5d:44:56:5d:
         fd:3a:ab:6f:08:b4:de:56:37:92:70:fc:38:94:1b:05:03:a7:
         d6:05:33:e7:97:3b:e6:04:5b:50:dc:1b:19:83:29:92:20:55:
         8d:47:e2:d7:f8:20:ca:f6:40:ab:75:b4:be:60:2a:84:14:d2:
         b8:1f:18:c7:37:ff:7d:bd:89:68:65:7b:5c:dd:d9:f6:5d:a0:
         ed:bb:39:12:f4:a8:1a:99:18:b3:ef:a8:d3:58:0e:91:4b:6d:
         b0:9f:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:30 2024 by rpki-client on console.sobornost.net