Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a626230303a3a2f34302d3438203d3e20323030373931.roa
File:                     326130613a363034303a626230303a3a2f34302d3438203d3e20323030373931.roa (raw, json)
Hash identifier:          2L2KtnLjWigOYzXfghSaG9+WhFYcPalO+i09Hm8aUlk=
Subject key identifier:   1B:A3:D6:F7:25:6E:49:BA:ED:D7:58:E4:9A:FA:E6:37:17:1B:83:7A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1508E6F7AD5AF4E09055074F4F792F3EE5B36E39
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a626230303a3a2f34302d3438203d3e20323030373931.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200791
IP address blocks:        2a0a:6040:bb00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:e6:f7:ad:5a:f4:e0:90:55:07:4f:4f:79:2f:3e:e5:b3:6e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=1BA3D6F7256E49BAEDD758E49AFAE637171B837A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:fd:55:53:df:05:03:31:36:d1:cb:c4:ab:
                    be:42:92:31:7f:d8:a8:05:bf:8a:59:e5:f1:34:72:
                    b6:b0:c0:e8:16:25:73:4d:37:a9:6e:f6:fa:85:6e:
                    1f:5c:6c:f0:d9:03:34:e8:f7:99:98:d2:81:ab:c1:
                    54:ca:d7:6f:60:f8:91:43:50:a8:7a:36:47:c6:43:
                    00:9f:4e:a2:35:38:fa:00:87:8f:df:c3:bf:75:ad:
                    44:6d:fe:17:97:cb:9a:e0:a3:e2:83:b8:e0:43:f0:
                    97:e5:28:ca:ca:22:25:4a:36:3c:4d:df:01:37:3b:
                    f9:56:fe:14:ab:b4:98:25:16:7f:73:ec:68:ab:e8:
                    e3:9f:c7:fe:cb:75:ce:08:90:47:6d:a8:9f:a6:f1:
                    d8:38:7b:d2:a6:52:ba:e1:2f:f7:3a:73:77:e9:7e:
                    c3:57:f7:9d:a8:0f:fb:24:f4:c9:0c:85:5f:3f:3a:
                    0f:03:17:43:51:a6:90:b7:49:b8:0c:92:fe:bf:19:
                    74:fd:c0:c5:aa:1a:1c:89:0c:f8:ce:74:a7:e8:ca:
                    cb:1d:29:20:f8:24:09:03:3d:03:99:56:8b:0a:63:
                    57:1d:fa:53:0a:e9:2e:41:f8:e6:9f:02:38:1c:31:
                    25:c8:de:f5:ce:13:65:9a:fb:f8:38:89:bd:93:54:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:D6:F7:25:6E:49:BA:ED:D7:58:E4:9A:FA:E6:37:17:1B:83:7A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a626230303a3a2f34302d3438203d3e20323030373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:d6:d2:9a:8e:37:b2:06:a5:35:88:87:c4:b6:f3:d7:dc:
         9a:40:fa:a0:d1:66:53:1d:47:c5:bc:5d:50:c7:60:6f:28:df:
         2c:ed:c8:25:28:58:b6:f0:72:1d:53:d8:e4:e1:46:ac:bf:0b:
         ce:84:8d:7d:c4:f2:af:f5:45:13:d5:02:23:83:4d:fd:90:49:
         d9:43:83:1d:55:de:a7:c5:3b:fc:dc:17:ec:e6:f2:6d:21:f8:
         57:96:10:3b:ca:79:2d:dc:62:9f:32:15:e4:39:10:d8:e5:de:
         b2:e3:aa:0e:db:73:be:c9:df:f7:88:44:3f:f1:18:a0:ea:3d:
         2e:32:dd:87:d4:a0:e3:80:be:fa:86:ae:c7:e4:15:1e:88:10:
         3b:9d:cc:e2:08:9a:e9:6c:34:24:66:b1:e0:4c:5d:9a:d1:b1:
         ea:06:b6:46:f2:2a:fa:a4:c8:e2:e8:c7:10:1f:96:7d:04:f2:
         e8:5e:c8:00:4b:27:2a:2b:36:2a:57:ff:7d:fd:76:22:45:ee:
         91:23:65:7b:b1:75:2a:27:96:e4:bc:f1:f2:21:15:4c:ef:14:
         e7:0d:47:e1:9c:85:6e:3d:49:48:55:0b:a6:5d:31:07:db:c3:
         e7:07:68:8e:14:db:d9:74:38:17:81:2e:43:cf:d1:16:bf:52:
         b0:b7:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org