Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          0buPnjaxG5LxuKahm4mqJ+WjSjr/wPQdPEvcGzYfmPM=
Subject key identifier:   FB:0C:90:A5:78:8D:61:85:14:FA:7B:3A:BC:93:B8:44:92:A4:D2:D8
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       2D46BA14A346447AAC8FC09E0EAB5094BC2218B3
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:17:01 +0000
ROA not before:           Fri 19 May 2023 23:12:01 +0000
ROA not after:            Fri 17 May 2024 23:17:01 +0000
asID:                     57870
IP address blocks:        2a13:df80:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:46:ba:14:a3:46:44:7a:ac:8f:c0:9e:0e:ab:50:94:bc:22:18:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:12:01 2023 GMT
            Not After : May 17 23:17:01 2024 GMT
        Subject: CN=FB0C90A5788D618514FA7B3ABC93B84492A4D2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:3a:40:6d:b4:87:4f:d6:7d:fb:44:ab:a0:
                    ac:d2:a2:c4:a8:76:fb:f7:2e:25:47:66:8d:d9:6f:
                    f5:1c:a0:56:e1:36:53:8c:4b:86:6c:55:92:e4:fb:
                    45:00:14:12:db:d0:45:7c:1f:e6:70:fa:15:e9:e5:
                    64:e3:85:bd:2e:4e:f3:4b:be:65:31:b4:72:d0:4e:
                    54:e1:67:4e:b7:1c:8d:fd:1c:25:e1:81:57:4c:7a:
                    a9:06:e6:39:1d:ff:38:ff:a0:fa:fc:98:8b:9c:49:
                    ef:6e:3d:33:14:d1:d6:06:ba:0d:96:82:07:a6:23:
                    83:0c:e4:38:8e:ae:dc:c6:69:53:3e:f9:2c:6d:c8:
                    6c:b0:01:86:3c:92:7e:f6:ab:3d:1e:98:7b:3b:4b:
                    77:94:b9:dc:52:52:97:05:7e:b1:5e:d1:e0:68:ab:
                    50:9f:27:f0:b8:e9:df:17:07:13:24:66:18:03:e7:
                    22:41:ec:04:f4:a1:ee:86:9b:ef:1d:b3:55:4b:38:
                    1f:a3:52:be:d0:f2:62:39:2c:db:ea:54:ae:84:0e:
                    11:51:34:d4:94:43:5d:93:6c:a9:ec:ea:25:82:43:
                    e4:b2:47:ae:f6:96:0c:f2:0f:51:2d:86:ec:51:e0:
                    a1:c3:e4:7b:ac:5e:2a:95:32:cc:f3:94:b6:50:15:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0C:90:A5:78:8D:61:85:14:FA:7B:3A:BC:93:B8:44:92:A4:D2:D8
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:5d:d8:b5:e7:ff:1c:dc:20:8d:fc:a4:e4:57:a2:95:bf:
         86:d0:a8:a1:19:a3:1a:ff:fe:84:c2:d3:2c:b2:07:1b:33:c5:
         fa:3f:24:71:d0:a2:89:87:84:b9:5c:92:bf:c0:e2:f5:f7:8c:
         65:3d:88:68:5b:fc:51:34:a5:d7:a4:81:fa:fc:7e:ec:49:3c:
         a3:15:7c:f7:b6:4f:18:de:8e:76:97:0e:4b:a7:fd:2c:96:74:
         70:ba:12:5e:7d:91:32:0c:3c:9f:ba:46:7e:16:75:37:47:d5:
         65:63:fa:6a:bf:18:94:c9:db:2c:4f:2f:12:6b:85:88:b6:5b:
         f7:a1:c7:93:44:ae:e9:e3:68:75:9d:45:d4:8e:f7:64:b5:5d:
         b3:82:9f:ae:10:ac:cc:60:a8:45:3c:6e:97:45:e4:df:57:61:
         76:b7:76:d4:4b:c1:5c:fb:1a:62:6e:45:9b:ba:81:ae:3e:cd:
         d6:ce:92:95:ba:06:d8:9d:d8:fe:aa:49:61:e8:e7:38:7e:54:
         dd:11:b9:58:3f:27:b7:77:fb:dc:23:b8:12:c2:2a:e4:fa:04:
         fb:4f:1b:c9:b6:a9:b0:bc:0d:61:dd:53:ff:05:3e:12:dc:4b:
         02:bd:63:0a:52:a6:f3:fc:72:9f:dc:14:ba:fb:c4:3d:2b:33:
         31:3b:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:20 2025 by rpki-client