Route Origin Authorization

$ rpki-client -vvf rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa
File:                     326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (raw, json)
Hash identifier:          vzz8HbXQycIZzt8IpHCNUM96L5G7QS/02ga5So2wKMs=
Subject key identifier:   46:63:2B:8B:66:64:71:F3:3D:B7:6C:FC:A8:D2:07:E6:C2:1D:5D:76
Certificate issuer:       /CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Certificate serial:       71AC096E01BC07BA39BEC609C7CA583D43BD422F
Authority key identifier: 17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
Subject info access:      rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa
Signing time:             Fri 20 Sep 2024 17:50:28 +0000
ROA not before:           Fri 20 Sep 2024 17:45:28 +0000
ROA not after:            Fri 19 Sep 2025 17:50:28 +0000
asID:                     214344
IP address blocks:        2a14:7581:9999::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ac:09:6e:01:bc:07:ba:39:be:c6:09:c7:ca:58:3d:43:bd:42:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
        Validity
            Not Before: Sep 20 17:45:28 2024 GMT
            Not After : Sep 19 17:50:28 2025 GMT
        Subject: CN=46632B8B666471F33DB76CFCA8D207E6C21D5D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:52:7d:32:5f:be:27:37:bb:d6:83:a5:78:
                    58:b7:6b:e5:58:93:62:85:b3:e5:fc:a3:28:04:6c:
                    eb:b6:e4:fb:02:ba:9a:74:3b:41:fc:bc:44:67:c3:
                    7d:e4:a7:9d:6a:5d:61:2c:eb:41:2d:79:d5:39:5d:
                    cb:fc:81:04:12:f4:4f:fc:e7:7f:cb:77:dc:d5:13:
                    f8:a0:59:ab:79:ca:a4:6d:77:e0:26:f3:36:05:a6:
                    81:35:00:87:98:17:7d:90:de:f6:fd:c1:c6:60:b3:
                    3a:b3:de:9d:36:60:4e:70:92:54:63:7c:8a:f7:f9:
                    d9:ac:1b:3f:3f:39:11:77:22:1b:92:33:b6:8b:5b:
                    ed:04:91:a0:0a:eb:64:3d:d5:f5:0a:28:ea:ba:4f:
                    90:95:af:85:1d:a9:37:96:fd:bb:23:06:95:bc:4d:
                    6f:aa:cf:83:15:6e:73:7e:ae:d7:00:d3:70:b1:cf:
                    6b:8d:ac:35:54:4a:81:62:bb:34:8f:34:06:e6:92:
                    1d:ca:aa:39:b8:51:92:6c:16:8f:d3:d7:e0:d8:f8:
                    bf:38:3a:fa:6e:3f:24:be:44:16:0f:f5:04:f2:cb:
                    ad:81:32:2b:01:f5:7b:f3:13:02:97:63:a0:c3:ef:
                    4c:c1:27:07:08:42:f0:0e:de:28:f3:be:09:4f:7f:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:63:2B:8B:66:64:71:F3:3D:B7:6C:FC:A8:D2:07:E6:C2:1D:5D:76
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9999::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:4a:a6:a4:00:d9:50:bb:ba:e3:14:0b:5c:98:db:50:b7:
         6f:c5:6c:50:21:2d:69:20:cf:2a:9e:28:c4:c6:f6:0b:9b:6a:
         0d:78:d2:3d:de:3d:a2:12:2d:cd:bb:3a:19:36:99:22:42:2d:
         4b:16:39:61:fa:a4:91:ea:68:9f:4e:88:cc:90:3a:d4:78:b1:
         44:28:8e:2d:b2:15:d6:08:ac:5d:e2:c4:64:5a:de:ae:d1:82:
         27:e6:aa:80:c7:47:69:3a:75:9f:e0:e1:70:ae:88:44:73:ab:
         9d:b1:bb:69:d0:ba:05:29:49:7c:17:ea:49:9d:aa:ea:bb:d7:
         cd:e5:65:6d:a7:1b:67:f2:c1:33:24:83:1b:b6:c8:30:b4:c7:
         e4:0d:c8:53:81:de:e9:54:9d:cd:10:05:9d:4a:52:20:4d:90:
         b7:9a:3b:8b:fd:d6:85:66:19:c6:56:ec:05:f5:95:e6:e6:60:
         71:a9:95:92:7a:cf:4a:43:c2:32:2a:70:0d:de:80:18:90:0a:
         80:a9:cd:5a:50:5a:e9:ac:f2:57:8c:16:3b:a0:be:95:4e:cf:
         4e:75:9d:09:26:b2:28:8c:46:8d:cf:58:62:80:f1:cc:b1:6b:
         75:55:f8:1f:14:64:6d:d1:82:0a:24:76:c4:75:71:38:bf:ac:
         68:76:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:13:30 2024 by rpki-client on console.sobornost.net