Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666630303a3a2f34302d3438203d3e20323032323138.roa
File:                     326130613a363034303a666630303a3a2f34302d3438203d3e20323032323138.roa (raw, json)
Hash identifier:          a6qjBz07FTRHIc4Jfm2jmN1bUGEYjoKaDjXElbVUiGo=
Subject key identifier:   49:5F:08:B2:BA:10:2B:70:83:B0:0C:2B:6E:D0:48:6A:28:01:77:5B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       32533AF8FA3966EB8B5AF760319E6AE956B1B61A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666630303a3a2f34302d3438203d3e20323032323138.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     202218
IP address blocks:        2a0a:6040:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:53:3a:f8:fa:39:66:eb:8b:5a:f7:60:31:9e:6a:e9:56:b1:b6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=495F08B2BA102B7083B00C2B6ED0486A2801775B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:68:ac:85:40:8c:9d:ac:95:c2:c5:e5:e4:
                    2b:49:52:99:3a:e5:87:ad:6d:d0:6c:4b:7b:e8:8f:
                    0e:c6:1c:2f:ff:cd:62:ec:68:61:dc:95:be:89:a8:
                    67:8c:5e:b8:d0:40:8a:02:87:4c:76:cc:28:43:11:
                    35:f0:a3:3f:d1:5d:51:13:6a:45:10:52:5c:d2:5f:
                    03:5c:1c:06:8a:59:6e:f5:0a:3b:ab:f2:12:b6:77:
                    42:35:00:3f:e1:de:95:61:19:a7:f1:93:4c:47:4e:
                    59:0e:c4:70:61:b3:b6:a2:22:65:8e:3e:cc:9b:ff:
                    d1:88:60:bb:3a:75:50:73:90:c7:e5:ca:af:ac:8b:
                    e0:79:57:3e:fc:44:65:b9:1f:81:3d:7a:97:e3:ed:
                    75:c8:94:c2:cf:f6:5e:37:51:30:2c:5c:e7:51:39:
                    ab:fc:d4:70:b3:31:e7:83:df:db:92:69:cf:90:26:
                    7e:d2:58:dd:80:15:c1:f5:9c:2c:1a:e7:40:d4:ea:
                    ea:22:44:4b:85:d3:6c:e9:42:b0:50:e6:8e:04:ae:
                    50:5a:5e:f0:f9:3e:e2:ec:56:2e:63:56:b2:6c:cc:
                    68:d1:a3:5e:df:53:c9:b5:ff:a2:76:1b:da:b7:ad:
                    a9:c6:1e:6d:77:36:78:bc:76:16:ca:06:c4:3f:2d:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:08:B2:BA:10:2B:70:83:B0:0C:2B:6E:D0:48:6A:28:01:77:5B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666630303a3a2f34302d3438203d3e20323032323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:36:02:cf:15:e2:3c:16:f6:3c:2a:3b:7d:20:c3:d6:ec:
         b5:47:14:bd:64:9d:27:04:91:2f:af:c3:d0:f5:e5:21:ff:c3:
         ad:67:52:33:c0:50:63:e7:a5:e4:2f:e9:5b:f6:6d:63:d7:6f:
         8d:c5:a3:89:12:f0:dc:ea:4d:87:13:2a:1d:df:c6:5c:e1:41:
         a8:09:cc:9d:73:cf:32:63:f9:82:27:2d:1e:f0:2b:ab:e5:dc:
         e9:3e:57:fb:8f:cd:3c:a4:d4:b2:e2:ae:96:a0:13:52:83:7d:
         28:7a:0c:56:93:a3:0a:9b:37:57:83:bd:97:5a:dd:f7:ba:68:
         e3:f2:98:df:aa:cf:e2:d7:e7:36:4b:08:eb:0c:ee:42:9d:6e:
         52:b8:a2:fe:cc:7b:47:73:63:56:71:af:59:0e:b8:3d:55:99:
         e0:ee:51:d7:d0:d6:83:98:cf:28:a0:98:0a:79:c8:e4:d4:4d:
         fb:05:10:23:b1:23:3a:61:76:b4:88:92:05:3b:8e:fe:fc:d3:
         73:d4:14:f5:01:80:9b:b0:cf:51:9b:48:13:23:1a:79:f6:a2:
         72:1c:6c:99:86:47:41:c3:bb:7a:42:e1:09:81:6b:92:3f:63:
         6a:fe:83:28:7d:fb:6c:96:8b:12:f0:35:00:92:aa:67:45:fb:
         f3:a5:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org