Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e20323134303133.roa
File:                     33312e362e35362e302f32342d3234203d3e20323134303133.roa (raw, json)
Hash identifier:          jZKVG4Mn0p8hs1hny2pyDtYOLj0Dx+pIfwxPgSs2aF8=
Subject key identifier:   1D:12:B0:64:DC:70:A9:13:DD:B1:71:F6:FF:36:4B:25:AB:67:7C:A7
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       02C06F095D5EBF588824DAC1CC0D0D12799C8FA1
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e20323134303133.roa
Signing time:             Mon 03 Mar 2025 02:47:52 +0000
ROA not before:           Mon 03 Mar 2025 02:42:52 +0000
ROA not after:            Mon 02 Mar 2026 02:47:52 +0000
asID:                     214013
IP address blocks:        31.6.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c0:6f:09:5d:5e:bf:58:88:24:da:c1:cc:0d:0d:12:79:9c:8f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Mar  3 02:42:52 2025 GMT
            Not After : Mar  2 02:47:52 2026 GMT
        Subject: CN=1D12B064DC70A913DDB171F6FF364B25AB677CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:b7:3b:9c:ab:85:70:21:f3:64:67:c0:0e:
                    45:e7:54:fe:be:c9:f4:ce:a0:83:3d:3d:e7:ed:39:
                    96:6c:8b:d0:98:bc:15:6a:ae:be:1a:83:a9:18:e3:
                    b8:8e:cd:cc:b0:00:6d:0d:03:fa:f9:d6:3e:90:82:
                    08:ff:f3:3f:d3:2e:4b:27:b1:66:b7:f0:da:35:ef:
                    9c:e9:1b:79:4b:f6:ee:4e:77:2f:8d:ea:39:08:77:
                    0a:a5:35:91:70:55:c7:77:2e:7c:b4:95:4d:ba:fd:
                    ff:e7:05:5f:ad:6c:4d:25:09:fb:fb:7a:85:b0:02:
                    59:4e:c7:15:4d:18:88:3b:c8:3f:05:9b:3a:f8:4c:
                    bc:6d:80:38:c9:67:fa:7c:fa:0a:80:12:95:8a:4f:
                    41:11:94:30:a4:7f:76:f1:ca:9b:2e:ff:2f:3c:c6:
                    fc:e7:03:28:45:90:04:e6:e0:6b:15:5f:ca:27:e4:
                    1e:1b:e6:7f:4c:e9:c2:a9:62:34:bd:14:77:fc:c3:
                    ba:5f:83:25:02:3b:fc:d8:75:44:fa:a6:36:d5:6d:
                    ed:a5:ae:ca:7c:c5:89:76:24:fb:25:27:27:7f:f9:
                    4f:96:be:ad:de:fa:7b:7f:80:74:18:e8:ab:be:58:
                    07:07:89:1e:d0:d1:3a:e3:26:22:b2:39:bf:e6:7f:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:12:B0:64:DC:70:A9:13:DD:B1:71:F6:FF:36:4B:25:AB:67:7C:A7
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e20323134303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:37:cf:2c:91:24:bb:aa:ad:80:e4:d4:ea:12:db:d9:01:
         17:46:fe:f9:b7:95:cb:d9:89:b8:ba:47:2c:08:c5:6a:ab:93:
         7e:2e:e5:d4:64:17:e2:63:b1:8f:5c:58:7c:c3:56:1d:03:87:
         67:8f:f2:87:cf:dd:82:bc:bf:a2:5f:f7:17:5f:5e:80:c6:05:
         3a:9a:80:b0:d3:85:3f:e8:cd:2a:8f:25:ae:4f:01:52:38:bd:
         4c:dc:0c:b5:22:96:20:e1:6c:b2:5d:24:f3:4a:98:83:dc:df:
         8a:6f:50:70:66:9a:69:2d:48:8a:39:e0:66:ce:52:7b:bc:91:
         67:a9:8d:2d:61:81:e9:01:3c:8f:c1:b3:72:03:4c:25:24:02:
         95:9a:a4:cd:f3:4c:00:b8:c1:12:fc:60:77:a8:73:0d:b2:25:
         39:0c:5f:4c:b6:33:e9:ca:d3:26:eb:3b:22:b4:68:e5:fd:a6:
         2e:44:0c:35:8e:bb:4b:06:a5:fc:4f:1e:ff:02:2e:b9:00:83:
         69:d5:cb:88:79:9e:be:63:18:a1:9b:6e:32:97:c6:e2:93:92:
         5d:15:c7:8e:7d:d5:e1:e9:8e:15:91:b3:18:c5:4b:e6:64:b1:
         ca:e4:1d:16:bf:8c:d2:d3:60:df:af:07:14:79:f8:15:fe:85:
         55:88:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net