Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/326131323a646434373a383034373a3a2f34382d3438203d3e203331383938.roa
File:                     326131323a646434373a383034373a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          Guq3uqYBboP6nuz7TJUVO2IyQiSUpOmmZ+UHE/GNJAU=
Subject key identifier:   57:EC:E3:92:B9:46:8D:12:58:DB:4D:3B:31:1B:6D:7C:5F:EA:E3:C5
Certificate issuer:       /CN=6D198923E0B9960D744113B139EDF2E1DF3F3200
Certificate serial:       2CC6F43980A2982A39CF247BC8A6CB0288A72BF6
Authority key identifier: 6D:19:89:23:E0:B9:96:0D:74:41:13:B1:39:ED:F2:E1:DF:3F:32:00
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/6D198923E0B9960D744113B139EDF2E1DF3F3200.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/326131323a646434373a383034373a3a2f34382d3438203d3e203331383938.roa
Signing time:             Mon 02 Jan 2023 17:32:41 +0000
ROA not before:           Mon 02 Jan 2023 17:27:41 +0000
ROA not after:            Mon 01 Jan 2024 17:32:41 +0000
asID:                     31898
IP address blocks:        2a12:dd47:8047::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c6:f4:39:80:a2:98:2a:39:cf:24:7b:c8:a6:cb:02:88:a7:2b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D198923E0B9960D744113B139EDF2E1DF3F3200
        Validity
            Not Before: Jan  2 17:27:41 2023 GMT
            Not After : Jan  1 17:32:41 2024 GMT
        Subject: CN=57ECE392B9468D1258DB4D3B311B6D7C5FEAE3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:b8:7e:e6:29:11:a5:2a:21:54:8b:ac:51:
                    ff:53:80:c7:62:69:28:ae:96:5e:25:99:77:87:e5:
                    0d:cb:8b:a7:24:06:20:fd:21:5e:6e:d7:bd:cc:ab:
                    c4:6d:a6:7a:65:cb:03:ac:af:b4:e8:2f:76:4e:37:
                    f9:e4:3e:85:57:32:c9:78:da:22:6e:fd:fc:09:18:
                    5e:07:98:df:71:2e:1e:17:0e:4f:f1:b7:d1:33:1a:
                    0b:10:8c:0b:ad:f4:52:05:36:c2:3d:b8:ba:34:2c:
                    a2:cb:a4:68:cf:4e:dd:ba:ff:da:5f:4c:f9:f9:02:
                    0c:d1:88:c8:78:07:49:03:69:7d:70:3f:f0:8c:f7:
                    0c:c1:df:79:31:16:9e:69:e4:a3:58:a8:53:47:54:
                    dc:67:81:90:e4:44:08:4c:27:3d:7c:cf:a3:7c:df:
                    34:ac:46:01:68:7e:ce:77:f7:5b:b2:e0:83:f9:c7:
                    06:52:1a:77:64:d4:9f:10:e2:07:af:8c:b6:04:5d:
                    f5:62:cb:27:2f:10:b4:a8:ef:11:b9:78:eb:a4:ed:
                    67:34:aa:9d:4b:05:dd:8b:61:19:f4:d7:9f:5d:93:
                    68:d2:2c:ee:87:2f:5f:79:32:d4:e6:b6:4e:04:e9:
                    bb:b1:1f:81:d1:f5:3c:0a:98:5b:92:b9:3f:e5:69:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:E3:92:B9:46:8D:12:58:DB:4D:3B:31:1B:6D:7C:5F:EA:E3:C5
            X509v3 Authority Key Identifier:
                keyid:6D:19:89:23:E0:B9:96:0D:74:41:13:B1:39:ED:F2:E1:DF:3F:32:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/6D198923E0B9960D744113B139EDF2E1DF3F3200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/6D198923E0B9960D744113B139EDF2E1DF3F3200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/326131323a646434373a383034373a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8047::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:66:ca:39:16:20:62:5e:1c:01:8c:d6:6a:bc:24:bf:1c:
         79:f9:23:4e:1a:37:25:eb:a3:ab:70:0e:46:bc:89:1b:c2:18:
         64:4e:49:ed:a9:13:0e:e0:b4:58:18:0b:c0:13:db:ba:3f:22:
         d3:23:1b:f1:4f:96:f0:df:16:42:88:f9:6f:78:3b:34:90:c9:
         56:bc:07:36:b7:6c:91:ec:e1:e6:80:ed:ab:1f:25:06:88:67:
         51:d1:49:98:af:3a:36:3e:33:39:33:b7:b1:31:50:03:1b:de:
         fb:79:aa:c2:a6:c3:5d:2e:de:19:00:1d:9b:31:9b:e4:a5:f6:
         3d:e8:6a:18:89:b5:4c:ba:cc:b6:fe:3c:af:7f:db:aa:ab:63:
         f6:a4:f8:ba:76:a2:59:92:bd:06:9e:35:e1:fe:a8:85:c5:b7:
         f1:f0:13:27:75:03:2c:81:cb:f6:64:65:a7:2b:b1:ee:7a:60:
         c1:de:4f:0f:49:43:01:cb:ed:fc:0e:64:a5:d2:09:b9:8c:f7:
         d4:62:5f:7b:f9:56:a0:48:37:93:48:97:e8:73:a4:b3:57:87:
         7d:57:92:de:29:fb:69:15:bd:10:95:d5:bf:28:11:cb:c9:53:
         dc:0a:95:e4:7c:39:74:60:11:17:26:13:ce:08:8b:4a:dd:d3:
         07:fd:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:31 2025 by rpki-client