Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130353a3a2f34382d3438203d3e20323135393738.roa
File:                     326131333a646638373a323130353a3a2f34382d3438203d3e20323135393738.roa (raw, json)
Hash identifier:          y23TyCTduZJJbSkzm12t6l4yASf57vJoYjdvc09dQxE=
Subject key identifier:   2D:E1:7E:84:62:CC:BB:93:15:D0:7B:EC:9B:5C:57:B6:9B:1F:3D:43
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       453C1C21E286AFB7A30828E78999F1AC88CDE742
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130353a3a2f34382d3438203d3e20323135393738.roa
Signing time:             Wed 07 Feb 2024 21:52:37 +0000
ROA not before:           Wed 07 Feb 2024 21:47:37 +0000
ROA not after:            Wed 05 Feb 2025 21:52:37 +0000
asID:                     215978
IP address blocks:        2a13:df87:2105::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3c:1c:21:e2:86:af:b7:a3:08:28:e7:89:99:f1:ac:88:cd:e7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Feb  7 21:47:37 2024 GMT
            Not After : Feb  5 21:52:37 2025 GMT
        Subject: CN=2DE17E8462CCBB9315D07BEC9B5C57B69B1F3D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:bf:15:aa:cd:59:3c:6e:7c:96:6e:6d:b1:
                    49:89:0b:c7:4c:96:4c:d0:a2:2f:ce:8b:d7:cc:29:
                    51:a7:5a:d3:76:8c:5e:22:51:35:da:04:be:40:9a:
                    3d:3b:48:3c:e8:e9:fd:24:bc:b7:f8:23:d8:b6:f9:
                    9f:29:b1:41:02:0a:11:5c:ba:19:c7:c8:d6:b0:cb:
                    4e:e2:d8:ba:d2:2a:19:19:ed:4d:fb:df:11:57:74:
                    63:fb:78:9e:0a:89:5a:09:6a:79:f5:44:bf:bd:81:
                    a1:1d:7f:14:0e:90:76:83:92:4b:a8:d4:bc:48:9e:
                    d9:dd:74:1d:70:e5:e8:28:b3:56:de:1d:a9:2e:a0:
                    da:1a:bf:61:14:89:1c:00:e4:12:b2:5e:91:90:6d:
                    86:13:5f:44:61:01:fe:b5:89:12:7d:39:c5:bd:60:
                    01:c8:63:76:2b:6b:50:ab:b3:88:51:61:f1:12:b0:
                    e7:86:f2:4e:0b:42:7e:de:af:cb:8f:2e:01:5c:78:
                    ad:77:51:3d:8c:55:6c:06:46:7d:12:63:f1:9c:5e:
                    d2:fb:90:d8:cf:a4:1a:e9:09:2f:66:c7:2a:61:8c:
                    c5:76:70:a2:9e:b3:32:a1:dc:80:47:ad:5c:3b:8b:
                    c3:44:26:bf:50:86:a2:83:ac:93:b9:77:9c:2c:4b:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E1:7E:84:62:CC:BB:93:15:D0:7B:EC:9B:5C:57:B6:9B:1F:3D:43
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130353a3a2f34382d3438203d3e20323135393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2105::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:43:6f:5e:ff:8d:e9:ee:da:20:ed:b6:cd:96:4f:49:e1:b0:
         96:29:2b:32:b0:e5:e4:77:f7:05:78:32:f5:4f:1e:12:20:6b:
         ee:97:f0:4f:db:ea:13:bb:2d:fa:c9:32:7c:60:84:5e:b5:6d:
         dc:6e:34:f7:6f:62:d2:25:d2:7e:51:55:81:a4:47:69:c5:1e:
         33:22:b3:2d:56:22:af:88:26:12:eb:c4:09:1c:20:46:40:23:
         34:e5:b8:e9:a0:00:0b:62:b7:dd:24:4e:83:5f:de:e1:da:e4:
         ab:bb:ad:cd:e7:d9:c4:4b:22:95:2a:2b:56:27:07:07:e9:cd:
         9b:da:13:03:a4:eb:89:2e:73:f7:02:d1:00:47:09:06:f0:20:
         0d:6b:00:cc:9f:16:20:c7:aa:4e:b3:ed:60:05:5b:64:92:7f:
         f2:ba:94:25:df:a7:1f:62:e2:3d:32:2a:4e:0d:8b:fc:6a:e9:
         51:1f:22:8d:d6:02:8f:44:e4:c9:f5:68:05:5d:66:47:f9:26:
         9f:11:90:a3:b6:55:91:38:47:b9:3a:08:ae:41:20:7b:6a:b4:
         5f:86:93:b5:dd:cd:e1:19:1c:89:ea:e6:c5:58:c5:48:d2:5c:
         bf:80:80:02:72:7b:9d:91:61:c3:57:4c:4b:77:6e:26:cf:6e:
         3c:9c:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 07:01:55 2024 by rpki-client on console-fra.rpki-client.org