Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363335303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363335303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          QtOecPosTeYmpvNHEmDpTEiVEHdoYRxiIjLc746197Q=
Subject key identifier:   75:29:5C:6D:D9:82:B7:28:3C:31:43:F8:B4:3B:5D:8D:A2:0C:2D:1E
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       110811FE1DFFEC2901A08F4D2736059059356FC6
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363335303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:43 +0000
ROA not before:           Fri 20 Dec 2024 17:22:43 +0000
ROA not after:            Fri 19 Dec 2025 17:27:43 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6350::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:08:11:fe:1d:ff:ec:29:01:a0:8f:4d:27:36:05:90:59:35:6f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:43 2024 GMT
            Not After : Dec 19 17:27:43 2025 GMT
        Subject: CN=75295C6DD982B7283C3143F8B43B5D8DA20C2D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:62:7d:f5:72:90:4b:c2:cf:f7:55:be:8b:
                    3d:11:b0:68:70:b0:24:e1:dd:52:0d:64:4d:7f:50:
                    54:59:df:a7:92:25:d2:80:85:49:eb:9b:e5:ca:7d:
                    b0:fa:08:4f:f1:55:63:de:8d:56:73:a8:ac:0b:79:
                    1d:fe:ad:4e:fd:e3:6f:30:c3:22:cd:26:60:41:26:
                    17:15:1b:7a:0e:4d:ec:10:26:14:30:61:cb:c5:68:
                    65:e2:ce:3f:ce:ba:ab:f1:fa:46:87:b3:b5:b7:4d:
                    e1:c8:45:35:7e:1f:07:26:89:3a:42:78:83:2c:d4:
                    7f:d3:5c:ee:9e:d6:ff:31:42:4c:a3:43:ce:aa:63:
                    a9:1f:1c:68:6b:ca:14:c4:f3:52:08:28:45:2e:5b:
                    d4:d2:1b:bb:a9:72:f7:9e:90:06:d5:f6:97:57:93:
                    5b:67:ff:bc:14:94:24:0d:8e:3b:97:d5:59:29:37:
                    21:63:91:9c:7d:6f:e9:eb:7e:bb:cc:f4:3f:bc:02:
                    30:5a:c9:6e:16:9a:18:73:39:cf:42:b7:40:53:de:
                    29:d4:94:4c:3e:b7:86:6e:e9:bb:00:3a:29:ce:b9:
                    f8:00:5f:6b:8c:26:a4:b6:a9:e3:f1:12:e3:fd:c2:
                    95:e2:97:9c:0d:bc:ee:db:d7:70:07:89:91:d5:a8:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:5C:6D:D9:82:B7:28:3C:31:43:F8:B4:3B:5D:8D:A2:0C:2D:1E
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363335303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6350::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:e5:b4:d1:e0:57:c3:3d:ad:ed:f0:6b:6e:c7:21:d3:ac:e2:
         23:5c:3c:c2:4a:09:23:18:e7:12:bc:82:f9:8d:50:81:d2:5e:
         12:c2:c5:ef:e0:8b:cd:b7:07:08:f7:10:79:49:1f:79:d0:b3:
         a6:15:6e:ee:39:db:85:8f:b0:58:9e:4e:f2:d5:12:f3:5e:5c:
         80:e5:6b:78:87:b4:b6:8f:06:de:00:c7:6d:e7:08:d7:56:06:
         16:ec:b8:ce:80:b4:e1:93:f2:4b:85:33:ec:e6:be:65:c9:1a:
         8a:82:21:34:56:75:30:30:7c:f5:9c:14:03:7e:45:77:51:95:
         30:4a:dd:87:8f:15:e6:b9:34:9d:d7:22:4d:61:83:d1:00:77:
         8b:9d:67:87:e1:fc:f4:91:cd:bd:01:ab:94:71:db:d4:5a:e4:
         5e:0f:0d:55:c0:ce:a2:8a:fd:0e:6a:b1:e1:0b:89:a2:13:76:
         7b:58:22:17:25:99:8f:d7:49:d3:03:c4:71:a0:6a:ba:f7:f0:
         da:75:95:e2:66:c9:ed:1e:dc:3f:f2:82:2a:77:9f:56:7b:e2:
         c0:6c:86:0f:d0:9e:a7:d7:f6:dc:b8:fd:ad:1f:5f:e7:67:5e:
         7a:66:8d:0c:15:d2:30:dd:21:e2:19:e4:24:bd:11:78:81:04:
         7a:37:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:56 2024 by rpki-client on console.sobornost.net