Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130313a3a2f34382d3438203d3e203630383538.roa
File:                     326131333a646638373a323130313a3a2f34382d3438203d3e203630383538.roa (raw, json)
Hash identifier:          cOcBHLgnqc7JwyefeCqzTTBF4PClE2BQn/mm+x2kTfY=
Subject key identifier:   E8:2D:70:9D:5C:CB:77:EC:C2:14:95:26:03:FD:5E:91:10:C6:32:6C
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       59D6FDE2457E33CA3E79C9B90977A3B02E76B2F4
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130313a3a2f34382d3438203d3e203630383538.roa
Signing time:             Wed 17 Jan 2024 19:24:43 +0000
ROA not before:           Wed 17 Jan 2024 19:19:43 +0000
ROA not after:            Wed 15 Jan 2025 19:24:43 +0000
asID:                     60858
IP address blocks:        2a13:df87:2101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d6:fd:e2:45:7e:33:ca:3e:79:c9:b9:09:77:a3:b0:2e:76:b2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan 17 19:19:43 2024 GMT
            Not After : Jan 15 19:24:43 2025 GMT
        Subject: CN=E82D709D5CCB77ECC214952603FD5E9110C6326C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:36:39:e3:8c:28:d7:c9:c7:aa:38:4d:65:
                    2a:45:3f:06:84:90:50:7b:38:36:48:54:d7:1f:b4:
                    77:74:48:ab:03:4c:9d:e4:e1:3d:bb:3e:86:e3:ab:
                    da:f2:16:9b:7e:c3:84:c5:e9:ae:25:74:43:bd:85:
                    35:c6:bc:ef:fd:4a:2e:6c:10:5f:1c:96:6d:bd:eb:
                    f3:49:da:8f:a5:d1:f0:f2:1c:63:8e:29:a8:1b:ac:
                    30:35:c6:ef:ad:a6:f9:86:8a:98:76:65:b7:dc:7e:
                    9b:1d:36:cf:df:56:77:7f:82:da:89:5e:dc:be:af:
                    16:ce:8b:4d:03:f3:de:95:a4:c1:b3:fa:d7:70:9a:
                    4c:dc:b1:09:2b:44:ff:ef:c3:ee:a8:a6:e0:fd:fc:
                    5c:b6:4e:b5:79:10:8d:0e:af:8d:02:21:03:b9:da:
                    2a:30:9f:45:ed:39:4b:ea:9e:2e:2b:dd:41:09:e9:
                    f7:c2:1c:f5:94:d9:59:86:1d:c6:b8:ae:ef:73:93:
                    71:77:72:48:e4:fe:ca:da:77:58:f0:d9:60:87:a6:
                    78:c2:26:1a:74:97:f3:7a:32:2a:68:a8:aa:5c:98:
                    39:7e:e8:f0:0b:4a:8d:0a:77:e6:11:8e:de:fd:60:
                    ee:24:d6:df:e6:2d:7a:d9:fa:16:2a:60:df:27:8e:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:70:9D:5C:CB:77:EC:C2:14:95:26:03:FD:5E:91:10:C6:32:6C
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130313a3a2f34382d3438203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2101::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:4e:f4:52:3f:65:22:cd:f1:47:09:87:c8:8a:74:19:92:
         6a:90:90:96:29:60:d9:f9:7e:65:02:01:f6:d3:02:e7:51:60:
         79:84:0a:a3:e8:94:ad:65:06:50:14:0d:c7:6a:1a:ff:0d:c0:
         d6:54:b3:2e:c6:fd:17:e8:80:4e:56:93:7d:7f:3b:9c:04:59:
         89:e0:ff:17:1a:9c:36:87:f2:71:17:19:dc:e9:6d:ba:7c:47:
         91:ef:75:f7:78:c2:1c:b1:57:d2:51:50:84:dd:5d:17:90:ab:
         e4:20:31:1c:a2:24:d1:06:d1:93:ce:a7:c0:37:56:41:3b:ef:
         52:24:52:82:b5:97:2f:bc:7e:37:f3:0d:58:84:1a:48:e0:63:
         59:2d:88:11:0d:7a:11:d4:95:04:05:77:7d:0a:d5:de:4c:6e:
         a6:e1:ca:91:3d:9f:9a:0d:5f:37:2d:90:04:a3:10:90:c1:93:
         ba:42:70:5e:a8:54:30:31:d2:fb:a4:91:ed:fa:3c:b2:81:c2:
         a9:e4:a8:93:4d:7f:52:d9:04:ac:10:0a:0a:c2:b8:68:fb:0d:
         83:e5:d5:3f:d7:68:b4:93:21:a9:6e:9f:d8:f3:af:d7:cf:25:
         21:8e:97:58:87:71:a2:ff:a8:50:68:ad:e6:d4:39:09:74:11:
         fa:da:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org