Route Origin Authorization

$ rpki-client -vvf pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266313a3a2f34382d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266313a3a2f34382d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          TJRGWcS5PtNJcvBOjtEhMhptNRME58vrG7B9G58dxNc=
Subject key identifier:   5D:FF:47:71:2E:72:46:B3:A9:DB:C2:E7:50:AA:F4:89:2B:30:BA:AE
Certificate issuer:       /CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
Certificate serial:       6C6F252F39478D3C6B3BAD67D426CC469A8C39B5
Authority key identifier: D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer
Subject info access:      rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266313a3a2f34382d3438203d3e20313937393933.roa
Signing time:             Wed 30 Aug 2023 20:24:37 +0000
ROA not before:           Wed 30 Aug 2023 20:19:37 +0000
ROA not after:            Wed 28 Aug 2024 20:24:37 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbf1::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6f:25:2f:39:47:8d:3c:6b:3b:ad:67:d4:26:cc:46:9a:8c:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
        Validity
            Not Before: Aug 30 20:19:37 2023 GMT
            Not After : Aug 28 20:24:37 2024 GMT
        Subject: CN=5DFF47712E7246B3A9DBC2E750AAF4892B30BAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:22:ae:51:ed:d6:de:1d:f5:5e:c7:b2:d8:
                    f4:2b:37:bc:81:ec:1f:60:f3:65:b7:5b:a3:b3:c7:
                    46:69:c6:48:95:c7:2b:67:b9:ea:40:36:e2:60:d3:
                    64:df:e9:f7:b7:d5:59:f1:c3:16:25:29:07:b3:d1:
                    6d:55:d9:06:2c:3f:bf:d8:87:d3:69:09:8c:f4:24:
                    75:b0:3b:b1:07:3b:62:47:95:97:9a:22:e4:a7:70:
                    7a:e6:fa:c3:17:33:24:b0:5c:9f:f1:cc:84:39:9c:
                    16:0c:17:74:a0:4d:8e:ed:5f:70:ba:78:31:a3:7a:
                    40:5c:0a:f1:75:de:0f:0f:3f:d2:8d:42:48:2d:dd:
                    5f:b7:0a:6c:4c:a4:05:47:75:9d:d2:67:ee:67:03:
                    ac:00:cc:6c:b1:67:03:a6:c8:8d:e5:12:b2:a8:98:
                    50:ab:09:6e:a3:02:23:b4:30:4f:80:8d:10:9c:f3:
                    4d:5b:36:7c:08:d0:d9:ac:cd:1c:0a:40:49:e6:fd:
                    05:54:98:fe:59:3e:bb:da:f4:ac:05:3d:12:27:c1:
                    61:19:c6:a9:42:5f:34:ca:55:34:7d:1e:3f:a6:56:
                    f4:b7:f1:e6:cf:a7:61:f6:07:4c:16:76:52:6e:12:
                    30:b9:53:8a:21:ca:e5:05:9f:27:e6:ea:43:a1:e0:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FF:47:71:2E:72:46:B3:A9:DB:C2:E7:50:AA:F4:89:2B:30:BA:AE
            X509v3 Authority Key Identifier:
                keyid:D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266313a3a2f34382d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:b7:64:02:0f:e9:ac:41:ff:b2:86:4b:96:c8:53:f5:16:
         e9:31:92:b1:14:36:42:f5:91:8c:6f:1e:58:ce:c0:88:e4:40:
         62:e9:c9:f7:ca:18:31:27:d8:99:35:49:5e:5a:b7:c2:40:26:
         5f:b8:df:19:d7:c0:d1:14:e7:f0:37:87:06:e1:95:b3:b7:ec:
         58:6f:56:38:bb:49:eb:79:39:f6:a0:76:d1:ef:c9:6f:76:d9:
         c8:ed:8b:a4:1d:ee:91:23:bf:08:2d:31:1a:3a:92:f6:26:70:
         a7:ad:d1:0c:90:96:41:8e:4f:2d:2c:72:c5:d7:1d:39:1f:74:
         a9:af:9d:86:5b:e2:22:71:69:ec:e3:ba:e7:ee:6f:41:61:8b:
         72:62:48:87:ba:28:e7:10:09:fd:ae:c7:bf:c6:47:7c:0b:0a:
         ea:b8:7d:68:2b:78:ac:64:12:f1:a0:a1:cd:d6:f3:f1:75:95:
         5e:8c:2e:82:0f:2f:12:f7:63:1d:21:0c:68:3b:2a:37:96:37:
         1f:9d:b4:13:a4:0e:c7:6b:00:25:85:66:01:23:03:7a:f8:90:
         83:d6:fb:db:a1:0f:ca:15:98:30:12:48:62:37:76:48:13:1b:
         d0:db:b1:64:c5:a4:be:62:0b:f7:da:c3:a6:24:f0:0b:2d:37:
         c1:40:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:39:55 2024 by rpki-client on console-ams.rpki-client.org