Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/1/323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa
File:                     323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          rNy+gKnjopLlT9iVErc2yFFHrwNJ1W7vRRAW8Dj6zVM=
Subject key identifier:   DD:18:F7:C2:28:43:DE:52:AC:A1:1E:ED:6D:0A:3B:50:D4:15:C9:9D
Certificate issuer:       /CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
Certificate serial:       778C165610E2AC554A1B26848B391AFD9E4C1FC7
Authority key identifier: 27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F
Authority info access:    rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer
Subject info access:      rsync://rpki.co/repo/August/1/323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:08 +0000
ROA not before:           Sat 08 Apr 2023 09:17:08 +0000
ROA not after:            Sat 06 Apr 2024 09:22:08 +0000
asID:                     945
IP address blocks:        2606:b0c0:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8c:16:56:10:e2:ac:55:4a:1b:26:84:8b:39:1a:fd:9e:4c:1f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
        Validity
            Not Before: Apr  8 09:17:08 2023 GMT
            Not After : Apr  6 09:22:08 2024 GMT
        Subject: CN=DD18F7C22843DE52ACA11EED6D0A3B50D415C99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:24:a7:68:d8:a5:62:36:db:82:49:ae:22:
                    57:8c:68:ad:01:2b:f1:f1:47:9d:f9:16:69:71:df:
                    e8:46:86:c5:fe:1a:6e:ce:dd:9c:ce:5d:5c:b5:02:
                    e9:ea:1a:4e:9e:fd:52:b8:fc:35:01:aa:cb:69:21:
                    01:ed:c1:58:d7:a6:ee:ac:b8:f3:58:83:9a:cd:1c:
                    70:9e:b8:44:8b:1b:9d:9e:2e:22:79:68:6b:bc:e0:
                    49:d8:17:a0:16:d2:ae:12:e7:56:a9:74:d3:3d:05:
                    27:b1:3e:ae:77:a3:2f:68:85:6e:4b:6d:46:52:a2:
                    77:66:43:d4:f9:86:5b:29:e8:1b:01:83:7e:29:b4:
                    f8:b2:96:58:1d:03:c7:87:55:71:2b:ee:9f:ad:85:
                    68:f1:ca:7c:21:d8:5b:50:75:27:4a:78:3e:48:b3:
                    bf:14:88:0d:37:f6:8a:9c:2f:e8:82:95:19:9f:d3:
                    9c:9b:aa:5c:0a:8e:cd:d2:68:fe:fb:b7:19:2c:ff:
                    5b:66:29:9c:83:4e:42:ad:79:e4:36:cf:76:0c:98:
                    a5:c9:99:df:c8:78:9a:2e:fd:4d:13:02:b8:b1:1c:
                    2c:6f:75:2a:4b:e2:f0:5d:ab:ea:db:7a:89:5d:3c:
                    92:4f:a6:e1:84:3e:d7:0b:d0:94:34:3b:38:32:cc:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:18:F7:C2:28:43:DE:52:AC:A1:1E:ED:6D:0A:3B:50:D4:15:C9:9D
            X509v3 Authority Key Identifier:
                keyid:27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/1/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/1/323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:89:18:8e:b2:d2:cd:ef:5c:0c:94:36:f8:48:d0:92:7b:8e:
         39:52:67:e5:40:d0:39:60:f5:95:f9:76:fe:08:4a:c9:b8:60:
         10:9a:af:3c:4a:9d:9b:20:ea:0c:76:d2:a4:2a:59:78:6f:77:
         05:9a:44:8e:5b:61:11:4b:07:91:75:02:04:2b:8e:b0:a1:02:
         3e:99:cf:c5:c7:f4:06:ec:12:c0:5f:12:32:05:58:b0:a0:4e:
         43:8c:6c:88:1c:3b:ef:eb:32:2a:06:46:b7:d6:ba:72:26:75:
         33:be:d9:08:23:2a:b3:87:a3:5c:26:68:c2:57:bb:9e:6a:5b:
         fe:da:5d:0b:58:67:c5:a7:4a:84:65:f5:40:0d:0d:b2:69:60:
         75:9b:f4:32:12:1c:65:fc:53:82:24:ad:45:74:be:a1:a1:3e:
         8c:29:f8:63:b6:63:45:22:96:28:c3:f5:3e:9c:cb:ee:39:f4:
         bd:cc:22:5e:e9:d7:99:34:59:63:4b:69:53:c1:42:69:6e:a4:
         3f:c3:86:5f:76:b5:86:6a:9f:0e:38:9e:89:36:8c:c1:38:78:
         05:7e:78:94:0e:97:55:64:ff:28:d6:35:73:a6:9d:58:ef:1d:
         8d:d0:74:8b:93:1f:cd:e3:0e:05:cf:4b:73:55:53:71:81:df:
         13:9b:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:43 2025 by rpki-client