Route Origin Authorization

$ rpki-client -vvf rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa
File:                     326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (raw, json)
Hash identifier:          UoUvgP/RsM+fe8LwnG/NqqjEcX0evozV/nW/NPn0nOo=
Subject key identifier:   7A:61:41:51:A5:02:67:64:C9:E4:B0:CF:A8:96:27:21:AD:66:90:83
Certificate issuer:       /CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Certificate serial:       655CE64F93EB5411B23AE3FEEF91DDF74E1371A7
Authority key identifier: 17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
Subject info access:      rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa
Signing time:             Wed 25 Sep 2024 16:19:35 +0000
ROA not before:           Wed 25 Sep 2024 16:14:35 +0000
ROA not after:            Wed 24 Sep 2025 16:19:35 +0000
asID:                     214344
IP address blocks:        2a14:7581:9903::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5c:e6:4f:93:eb:54:11:b2:3a:e3:fe:ef:91:dd:f7:4e:13:71:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
        Validity
            Not Before: Sep 25 16:14:35 2024 GMT
            Not After : Sep 24 16:19:35 2025 GMT
        Subject: CN=7A614151A5026764C9E4B0CFA8962721AD669083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:74:96:bc:ba:46:22:a1:ee:df:96:ec:17:
                    81:61:06:c8:d2:0b:04:b5:6b:e6:b5:59:f2:40:c2:
                    68:01:c6:18:83:83:59:d5:6d:a2:36:17:39:aa:16:
                    c9:dd:e4:10:a3:42:ca:38:53:be:3a:91:93:b1:c6:
                    c2:76:a1:54:72:0e:21:e9:09:b9:ff:f6:a8:dd:f6:
                    3b:a1:87:82:79:f7:dd:4f:47:cc:8c:83:7e:c8:61:
                    42:05:84:1e:7a:44:1a:72:2c:1e:89:6f:4a:3b:4d:
                    5b:f9:97:a0:89:09:4a:2b:f2:ec:0f:95:20:31:22:
                    34:cc:f8:7d:06:e2:d1:87:77:e9:d8:57:77:90:b2:
                    b2:1f:cd:73:9b:22:7f:63:98:65:24:d5:9b:85:3f:
                    1a:cf:ba:8c:a4:32:a2:76:66:41:20:81:37:3f:47:
                    c7:db:62:c7:ee:31:0a:5f:d9:18:fb:d8:f4:72:4c:
                    6f:b3:13:29:ab:ed:d0:b4:eb:98:6b:80:6d:15:17:
                    0c:a4:4e:ea:9f:d1:80:1f:94:40:5f:82:0e:b8:ed:
                    18:e6:48:df:f5:e8:0b:32:f7:80:9a:ea:cf:7c:01:
                    cc:41:d3:4c:6a:d3:2e:ae:bf:43:96:f0:9f:8a:f7:
                    92:b3:6d:e0:7d:61:d3:8d:50:36:3e:ac:c4:38:c6:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:41:51:A5:02:67:64:C9:E4:B0:CF:A8:96:27:21:AD:66:90:83
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9903::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:41:7e:28:c9:4b:cf:c1:82:d2:ec:e5:14:07:d9:a1:f2:
         6b:b6:91:50:7a:f6:38:7e:c3:6a:25:f0:ae:dd:7d:f3:23:3e:
         9d:fd:f0:c3:91:ce:8a:ce:30:5c:9c:e5:57:19:03:94:78:03:
         1d:77:23:15:69:11:9c:c7:22:f8:97:76:c3:85:1a:b6:d1:b9:
         6a:92:01:e4:fc:8f:ff:38:58:d7:ef:23:b7:62:1e:ba:a5:9d:
         b1:94:4f:d9:53:e4:3f:48:d9:ee:1d:bc:5a:b6:dc:c0:48:5a:
         e0:04:56:5f:c0:a6:ca:77:43:b5:28:65:0e:0b:45:56:97:6c:
         f2:14:cc:7f:c7:f4:52:34:f5:dc:33:79:4e:86:b2:9f:af:1e:
         77:bd:b8:81:5a:80:2c:2b:2d:13:d6:6b:dd:ce:3b:12:2e:6d:
         81:cf:f3:a7:a2:1d:d7:d6:b2:28:de:b2:2f:1a:b2:50:71:7b:
         a3:ba:90:08:fb:f1:08:48:b5:9e:92:4d:98:9e:a4:ab:57:c3:
         4a:21:a2:a6:9e:6a:e0:7b:41:f6:e4:78:9b:70:b9:13:da:3f:
         e9:48:59:34:30:4d:c6:f3:d6:1f:5e:13:8a:13:36:5a:3d:39:
         46:37:a5:27:b9:bf:8e:24:6b:5b:79:eb:14:a3:5f:7b:44:a1:
         b6:09:b8:fc
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUZVzmT5PrVBGyOuP+75Hd904TcacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxN0FDRDI5NEEyQzk4ODE2N0RGNDJCQkI1QTVFMjBB
MEMyODMxQjAeFw0yNDA5MjUxNjE0MzVaFw0yNTA5MjQxNjE5MzVaMDMxMTAvBgNV
BAMTKDdBNjE0MTUxQTUwMjY3NjRDOUU0QjBDRkE4OTYyNzIxQUQ2NjkwODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93XSWvLpGIqHu35bsF4FhBsjS
CwS1a+a1WfJAwmgBxhiDg1nVbaI2FzmqFsnd5BCjQso4U746kZOxxsJ2oVRyDiHp
Cbn/9qjd9juhh4J5991PR8yMg37IYUIFhB56RBpyLB6Jb0o7TVv5l6CJCUor8uwP
lSAxIjTM+H0G4tGHd+nYV3eQsrIfzXObIn9jmGUk1ZuFPxrPuoykMqJ2ZkEggTc/
R8fbYsfuMQpf2Rj72PRyTG+zEymr7dC065hrgG0VFwykTuqf0YAflEBfgg647Rjm
SN/16Asy94Ca6s98AcxB00xq0y6uv0OW8J+K95KzbeB9YdONUDY+rMQ4xnBLAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUemFBUaUCZ2TJ5LDPqJYnIa1mkIMwHwYDVR0j
BBgwFoAUFxes0pSiyYgWffQru1peIKDCgxswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS54YS53aWtpL3JlcG8vQVhORVRTLUNB
LzAvMTcxN0FDRDI5NEEyQzk4ODE2N0RGNDJCQkI1QTVFMjBBMEMyODMxQi5jcmww
gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt
YjA3OS0zMDllZDk3ZjM4MjQvMC8xNzE3QUNEMjk0QTJDOTg4MTY3REY0MkJCQjVB
NUUyMEEwQzI4MzFCLmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUFBzALhmpy
c3luYzovL3Jwa2kueGEud2lraS9yZXBvL0FYTkVUUy1DQS8wLzMyNjEzMTM0M2Ez
NzM1MzgzMTNhMzkzOTMwMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQz
MzM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqFHWBmQMwDQYJKoZIhvcNAQELBQADggEBAI94QX4o
yUvPwYLS7OUUB9mh8mu2kVB69jh+w2ol8K7dffMjPp398MORzorOMFyc5VcZA5R4
Ax13IxVpEZzHIviXdsOFGrbRuWqSAeT8j/84WNfvI7diHrqlnbGUT9lT5D9I2e4d
vFq23MBIWuAEVl/Apsp3Q7UoZQ4LRVaXbPIUzH/H9FI09dwzeU6Gsp+vHne9uIFa
gCwrLRPWa93OOxIubYHP86eiHdfWsijesi8aslBxe6O6kAj78QhItZ6STZiepKtX
w0ohoqaeauB7QfbkeJtwuRPaP+lIWTQwTcbz1h9eE4oTNlo9OUY3pSe5v44ka1t5
6xSjX3tEobYJuPw=
-----END CERTIFICATE-----
Generated at Fri Sep 27 20:13:30 2024 by rpki-client on console.sobornost.net