Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030343a3a2f34382d3438203d3e20323135353830.roa
File:                     326131333a646638373a323030343a3a2f34382d3438203d3e20323135353830.roa (raw, json)
Hash identifier:          qgHvD8TWYfUQOn+sPiWDGnuPlBWvHdtNt//nn2pxCws=
Subject key identifier:   71:D0:BF:A7:2C:07:4D:28:C7:17:01:05:65:3A:AC:09:64:F0:B0:B5
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       6A3CD52493E1A838791E0BD948D8755A7B0C6DAB
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030343a3a2f34382d3438203d3e20323135353830.roa
Signing time:             Fri 02 Feb 2024 22:16:31 +0000
ROA not before:           Fri 02 Feb 2024 22:11:31 +0000
ROA not after:            Fri 31 Jan 2025 22:16:31 +0000
asID:                     215580
IP address blocks:        2a13:df87:2004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3c:d5:24:93:e1:a8:38:79:1e:0b:d9:48:d8:75:5a:7b:0c:6d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Feb  2 22:11:31 2024 GMT
            Not After : Jan 31 22:16:31 2025 GMT
        Subject: CN=71D0BFA72C074D28C7170105653AAC0964F0B0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:94:0f:d6:17:ce:3a:f4:8f:a8:8c:62:39:
                    ed:83:e2:f2:c0:f0:8a:47:8e:4a:32:8b:bf:65:50:
                    29:88:4e:31:fa:f5:5b:0d:a9:2e:2e:cb:cd:b5:a1:
                    90:54:ce:f5:28:4e:dc:7b:9b:7d:f8:ee:c2:87:9c:
                    2b:18:14:53:b3:ef:32:b3:71:da:56:5b:1d:c8:7e:
                    8a:9a:3a:e5:fb:7f:f5:8e:c4:aa:b8:71:33:3d:9e:
                    e5:9d:ac:a5:1f:36:67:87:bd:b8:d5:44:5b:07:18:
                    90:56:c4:9b:44:89:ec:04:00:6d:7e:ae:5b:21:05:
                    e8:9a:a8:04:c6:b3:5d:3e:08:58:76:f0:83:66:8f:
                    d3:74:5d:fd:30:6e:56:e4:ed:95:f3:69:eb:a6:44:
                    5c:a0:ba:a8:93:01:24:23:97:34:43:bd:4c:8b:30:
                    fa:ae:84:dd:af:60:b2:77:af:b1:8b:b7:ac:7f:45:
                    21:5f:c1:b5:29:0c:f4:a2:46:75:2d:e8:8d:c5:47:
                    92:74:08:36:ca:24:c3:ea:0a:9d:fc:49:36:ab:7d:
                    cc:a8:aa:75:c0:de:35:a6:2f:42:95:74:06:69:f7:
                    d1:b4:dc:35:f0:66:41:13:73:47:c7:5d:f4:1a:68:
                    79:a8:fa:8d:6d:ef:23:dd:e6:bf:08:87:47:01:63:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D0:BF:A7:2C:07:4D:28:C7:17:01:05:65:3A:AC:09:64:F0:B0:B5
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030343a3a2f34382d3438203d3e20323135353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2004::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:04:14:fc:14:a8:ba:4c:53:f3:8c:81:9e:f7:18:93:e7:
         76:9a:5a:7e:e5:3d:49:e0:ee:0c:fa:a2:c5:8c:c3:4e:00:4e:
         80:73:ce:82:4f:2c:b1:26:19:64:40:a0:17:e4:89:c7:f4:98:
         d7:69:90:0d:7e:9d:b4:15:b6:45:87:21:04:dd:3d:f5:ff:51:
         9c:07:db:76:08:10:59:d5:f1:c7:fa:06:8d:9b:06:ea:57:36:
         c1:8d:49:56:30:41:a3:06:a1:f8:8f:32:c0:ff:8f:c3:34:ea:
         42:1d:06:41:c6:0b:12:84:d1:73:93:52:d8:ce:ea:a0:cb:bb:
         22:24:55:91:45:75:0b:8e:42:15:55:d9:0b:e2:fb:03:cf:1e:
         38:49:7c:d1:14:45:26:18:6f:fd:48:a4:f6:56:c2:4d:49:62:
         f7:13:97:e6:d0:94:d8:53:99:cf:0d:8b:41:b5:08:a9:eb:4f:
         77:f7:b2:30:7f:d1:1f:81:26:8c:fd:58:af:08:52:d4:76:49:
         a6:3c:3f:79:b8:50:07:46:3c:00:b6:26:2d:83:51:61:8d:53:
         67:65:7e:19:d7:4e:93:b2:db:38:53:db:de:12:64:a6:15:1c:
         f7:3c:ea:09:d4:6a:d6:42:7d:34:9e:e7:a0:91:be:14:56:22:
         b0:45:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org