Route Origin Authorization

$ rpki-client -vvf rrdp.taaa.eu/repo/rrdp-taaa-eu/0/326131303a393034303a3a2f32392d3332203d3e20323132373935.roa
File:                     326131303a393034303a3a2f32392d3332203d3e20323132373935.roa (raw, json)
Hash identifier:          iROkmBKpFNq1fur79BZG4bME1bxU+XTETN/LAMuhG/4=
Subject key identifier:   3C:8F:8A:55:CC:CD:9E:DB:FF:13:47:97:A1:6E:3D:71:12:F1:65:5C
Certificate issuer:       /CN=AAFBF9DBE860335648F2AEABA124326B85374C47
Certificate serial:       1656523241B3E1947D20CD23A9C44D14E97C915A
Authority key identifier: AA:FB:F9:DB:E8:60:33:56:48:F2:AE:AB:A1:24:32:6B:85:37:4C:47
Authority info access:    rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/AAFBF9DBE860335648F2AEABA124326B85374C47.cer
Subject info access:      rsync://rrdp.taaa.eu/repo/rrdp-taaa-eu/0/326131303a393034303a3a2f32392d3332203d3e20323132373935.roa
Signing time:             Tue 22 Mar 2022 12:31:35 +0000
ROA not before:           Tue 22 Mar 2022 12:26:35 +0000
ROA not after:            Tue 21 Mar 2023 12:31:35 +0000
asID:                     212795
IP address blocks:        2a10:9040::/29 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:56:52:32:41:b3:e1:94:7d:20:cd:23:a9:c4:4d:14:e9:7c:91:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAFBF9DBE860335648F2AEABA124326B85374C47
        Validity
            Not Before: Mar 22 12:26:35 2022 GMT
            Not After : Mar 21 12:31:35 2023 GMT
        Subject: CN=3C8F8A55CCCD9EDBFF134797A16E3D7112F1655C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:5d:76:e6:f8:1c:4a:b8:6e:f0:1f:71:03:
                    59:a5:5b:a0:83:87:d9:d4:61:cf:67:50:a0:6d:11:
                    d8:4e:75:34:a3:75:47:3a:18:05:f4:e5:5d:e1:9b:
                    a8:e3:05:c5:d0:4c:59:9d:7b:43:d2:6a:4a:81:4a:
                    b5:95:7a:f7:4c:05:3d:fb:5e:96:8d:f9:fc:4d:03:
                    21:ec:74:a4:0d:12:4a:f1:67:35:86:3f:37:39:aa:
                    a5:46:86:c9:b9:50:ea:57:ba:1a:e3:76:01:32:64:
                    b7:82:fd:27:69:e2:42:32:91:c2:32:0c:d7:06:53:
                    62:93:4d:6e:92:f6:75:58:06:22:86:4c:dd:bb:d8:
                    88:f7:55:33:0c:59:62:4b:e5:01:72:7c:09:e7:7b:
                    c1:c6:99:7c:8e:0b:50:dc:c4:25:da:4a:6e:c2:20:
                    d5:ef:d3:ff:58:6b:a6:bd:70:4d:c4:97:fb:16:cb:
                    3f:4a:20:f3:b6:3d:33:e0:22:18:7a:96:b8:20:81:
                    29:4e:64:a3:c6:2e:a0:c0:49:4a:bf:ea:51:4d:a6:
                    c2:8d:0a:9b:ee:d1:55:11:16:b1:7c:cb:6f:87:03:
                    30:92:98:6c:37:b7:2c:7a:5b:03:5a:de:62:51:1f:
                    19:eb:58:74:33:7b:48:c8:2f:98:c1:e0:29:70:75:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8F:8A:55:CC:CD:9E:DB:FF:13:47:97:A1:6E:3D:71:12:F1:65:5C
            X509v3 Authority Key Identifier:
                keyid:AA:FB:F9:DB:E8:60:33:56:48:F2:AE:AB:A1:24:32:6B:85:37:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.taaa.eu/repo/rrdp-taaa-eu/0/AAFBF9DBE860335648F2AEABA124326B85374C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/AAFBF9DBE860335648F2AEABA124326B85374C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.taaa.eu/repo/rrdp-taaa-eu/0/326131303a393034303a3a2f32392d3332203d3e20323132373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9040::/29

    Signature Algorithm: sha256WithRSAEncryption
         1b:7b:49:30:e9:d8:49:a6:93:73:1d:68:38:f3:e6:c0:c7:9d:
         82:89:f7:5b:32:27:b5:0d:92:27:2b:bf:a4:71:7c:d8:7d:2a:
         ed:7d:69:5b:53:05:6d:04:98:91:fe:59:b3:f4:a6:a3:8b:69:
         c4:ad:86:03:04:c8:fa:c4:b4:e8:8b:7e:f0:ec:1d:d0:ba:fa:
         13:0a:a4:45:05:12:7b:95:b0:fe:11:89:9e:02:ea:14:79:d6:
         71:f3:ef:7b:37:08:a7:24:fb:d5:61:c0:7c:b3:27:7c:60:12:
         d3:2f:c8:94:a9:8f:02:a7:69:67:89:03:9f:f0:68:c8:58:fa:
         a7:d9:17:6e:a3:df:df:23:5c:69:fb:e7:cd:03:42:45:c2:4a:
         3e:b5:c6:56:c8:93:95:aa:b5:86:1c:ca:cd:53:79:20:f0:45:
         5a:7e:d9:02:2e:78:87:3e:aa:3c:34:ec:5a:d8:00:e1:b0:f2:
         ee:4e:4f:d3:3d:fe:40:43:fc:e3:00:01:90:c2:ce:47:8d:96:
         44:24:93:de:2d:f7:6e:b5:98:7d:12:e0:67:52:80:88:59:78:
         c4:99:96:aa:4b:ef:27:3e:82:49:df:23:55:09:d6:e0:86:a1:
         ff:f2:06:8c:00:fb:71:ef:aa:b6:bc:ab:9c:6e:59:5b:eb:3e:
         d6:84:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:39:48 2025 by rpki-client