Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa
File:                     326130613a363034303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          wuB0qWNMcq3vWnnOuMe2ZE2uF5cEdNRGJDdQSLHwruU=
Subject key identifier:   0B:F8:F7:72:38:DF:1D:36:43:10:63:C7:36:82:A0:F8:0A:D1:5E:2E
Certificate issuer:       /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial:       451D2E49079C47355D8AA39E1166B03F79E946EC
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Fri 21 Apr 2023 03:29:20 +0000
ROA not before:           Fri 21 Apr 2023 03:24:20 +0000
ROA not after:            Fri 19 Apr 2024 03:29:20 +0000
asID:                     48581
IP address blocks:        2a0a:6040::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1d:2e:49:07:9c:47:35:5d:8a:a3:9e:11:66:b0:3f:79:e9:46:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
        Validity
            Not Before: Apr 21 03:24:20 2023 GMT
            Not After : Apr 19 03:29:20 2024 GMT
        Subject: CN=0BF8F77238DF1D36431063C73682A0F80AD15E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:73:c6:99:e5:35:c0:20:89:30:a3:b1:02:
                    c1:f4:3a:4f:74:69:de:a4:a3:4a:4a:14:a9:38:a0:
                    7c:32:cf:77:18:38:d4:bd:d8:35:d8:d2:e2:8e:d6:
                    a8:12:d8:20:f7:52:93:87:90:ce:23:1f:bc:b4:5c:
                    ea:1b:16:85:6e:44:87:3b:74:6f:4b:68:c1:6e:de:
                    b6:55:98:c9:b1:b2:05:71:fc:97:2b:c3:a6:3e:5c:
                    a1:2e:37:be:6f:ac:9c:89:34:34:01:04:a7:e6:bb:
                    9f:c6:d5:f2:58:04:b9:0b:83:83:15:2d:32:20:2b:
                    78:eb:7c:96:73:e7:7d:da:9d:f7:92:b5:0d:57:13:
                    98:ed:42:50:c3:d5:7e:14:0a:c5:04:50:bc:46:04:
                    b1:2a:f5:4b:36:cf:dc:e5:07:40:1f:21:a6:a2:21:
                    24:33:c1:7f:69:15:55:3c:79:1f:1c:64:f6:a5:f5:
                    0f:c5:6d:9e:8c:61:4a:51:53:5e:c5:6f:da:5b:8d:
                    c1:f8:78:f4:71:2d:d5:bc:ea:84:e9:73:ae:41:c6:
                    2b:5a:ef:3c:59:ae:49:a7:81:53:f6:2b:c9:eb:17:
                    b3:69:0b:b8:46:7a:c7:8d:82:5b:1a:16:fe:24:db:
                    3c:a1:89:5f:a4:26:43:8f:43:5a:8a:d1:00:08:5a:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F8:F7:72:38:DF:1D:36:43:10:63:C7:36:82:A0:F8:0A:D1:5E:2E
            X509v3 Authority Key Identifier:
                keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:c7:ba:eb:81:56:5c:87:de:8f:be:62:87:b0:b7:d5:84:
         a0:8a:72:2b:4a:73:97:a3:56:31:11:9a:7d:c2:e5:33:e9:20:
         47:2a:4a:36:fc:b0:00:8e:2d:74:bc:86:34:fa:5b:dc:18:57:
         6b:e9:1d:0a:52:0b:c4:50:d7:07:47:06:a1:9b:9c:08:7f:10:
         4f:f7:37:27:9f:a1:6c:80:8f:b3:92:50:23:be:33:e2:e2:59:
         97:5f:02:96:d1:dc:c5:41:c7:ac:df:a1:43:4f:61:c9:d9:a9:
         ff:c6:ca:38:ee:34:77:16:21:b3:1f:1c:15:4f:ba:0e:07:33:
         1f:3c:13:01:9d:b3:dc:a4:8a:d5:c0:7e:8f:52:75:6f:39:39:
         b6:b8:61:2b:b1:6f:58:7f:c5:d6:16:78:5e:ee:39:5e:e3:23:
         e0:e2:0e:3d:7e:50:8c:1b:21:9f:06:ff:22:ab:78:ab:8f:dd:
         71:37:d3:45:b7:de:72:93:63:6b:d5:45:00:fe:71:44:19:d7:
         fa:e0:27:04:e8:3d:69:d6:9b:a1:42:6f:b7:d7:4e:74:43:76:
         f0:2a:7d:da:7d:49:22:67:36:9c:b2:94:51:14:7b:66:0e:72:
         5e:55:39:9d:d9:b8:4a:2b:2a:0e:5c:41:cd:64:2e:8b:6c:2b:
         dd:e8:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:31 2025 by rpki-client