Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa
File:                     326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          vAolBsDDwuYBM/zP7gxkdmJ/QKD0M3lcYhE1eLWGYaU=
Subject key identifier:   BA:0B:A3:6B:15:0B:BE:D6:13:A6:E5:4C:D0:BB:48:80:62:D7:19:A1
Certificate issuer:       /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial:       27A75B5CA8FFF734977ABDF6825F54A22702A041
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa
Signing time:             Thu 26 Oct 2023 12:02:29 +0000
ROA not before:           Thu 26 Oct 2023 11:57:29 +0000
ROA not after:            Thu 24 Oct 2024 12:02:29 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c421::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a7:5b:5c:a8:ff:f7:34:97:7a:bd:f6:82:5f:54:a2:27:02:a0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
        Validity
            Not Before: Oct 26 11:57:29 2023 GMT
            Not After : Oct 24 12:02:29 2024 GMT
        Subject: CN=BA0BA36B150BBED613A6E54CD0BB488062D719A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:01:ff:2a:7a:91:39:fa:f5:d1:c7:c8:94:
                    c5:ab:b3:25:a1:a4:2a:2c:7c:02:6e:4c:14:c2:5b:
                    a6:ff:c8:90:ff:3e:fb:38:f9:4b:4d:fc:31:64:04:
                    45:d2:e4:5c:8d:2f:23:ac:28:24:10:62:00:ad:0b:
                    fd:2a:a5:09:da:23:22:c4:0d:ae:05:38:49:f6:14:
                    13:74:36:ef:8a:57:c4:90:91:43:e5:9c:5c:56:42:
                    61:c3:e8:0c:e0:0a:f1:90:bd:9e:50:a9:3d:8f:99:
                    fe:0e:0f:b6:9f:5a:1d:96:d4:2d:37:06:94:c7:e4:
                    19:be:c0:7d:bf:60:4c:af:46:f0:2d:40:52:e4:8e:
                    1b:99:30:db:1c:04:b7:d9:69:bd:2a:87:1e:de:a0:
                    16:b0:b8:a8:5b:f9:7b:42:05:c0:d2:ac:c1:15:41:
                    70:b8:72:b5:80:33:ba:6f:e6:ff:2a:71:ff:c1:0c:
                    21:53:bf:d8:7d:ab:4a:86:39:34:be:f8:69:3d:57:
                    6b:40:87:ca:69:6f:5d:59:87:cb:5e:d3:36:41:f5:
                    30:35:e1:2d:ff:14:99:6b:b2:06:be:35:59:71:eb:
                    b1:eb:a0:d9:36:3a:17:02:07:6f:1d:59:46:5c:bb:
                    52:cf:18:5c:02:48:15:c2:29:6e:d7:4f:8a:5b:d7:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0B:A3:6B:15:0B:BE:D6:13:A6:E5:4C:D0:BB:48:80:62:D7:19:A1
            X509v3 Authority Key Identifier:
                keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c421::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:f4:6a:01:c4:7d:52:a6:0c:49:95:0a:d9:41:95:0a:6d:
         bf:92:4c:b8:05:17:3b:5b:f6:66:20:a3:4c:5b:1d:cb:ff:93:
         10:f6:cf:aa:e4:23:37:25:de:61:d4:42:59:ce:d9:c2:de:df:
         93:00:4c:80:e9:47:fd:22:3d:af:3b:3b:cd:52:26:2e:f7:cb:
         c0:f2:69:ef:01:ad:9f:e8:c1:b1:dc:ec:fb:63:a8:77:14:95:
         92:bb:b7:73:a3:b1:4d:d5:63:35:37:5c:64:4b:07:d2:83:42:
         56:f4:c3:4f:ff:eb:ca:0a:14:0e:91:b5:7e:cc:9c:da:d7:41:
         e8:2a:85:c5:26:a6:21:d8:41:8e:ce:36:26:69:03:fc:cd:46:
         81:d9:a5:ce:53:82:e8:3a:ca:37:0b:89:41:59:7d:a3:bb:23:
         04:a6:ea:46:3f:e9:c8:44:f7:46:42:7b:be:11:07:28:50:46:
         e0:aa:5c:3d:61:0f:a1:d6:4c:84:01:de:c9:7a:7e:5f:5b:0f:
         5e:df:22:51:cd:89:93:7c:d8:a9:7f:19:a4:c1:5a:3d:57:84:
         52:f0:a6:33:e6:83:c6:c0:15:7a:b2:18:78:f2:0f:e3:1a:88:
         5e:18:ab:d2:9c:59:fd:31:72:2c:11:1f:5e:ad:b1:ac:d3:f0:
         d1:19:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:33 2025 by rpki-client