Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          b8DQNHBmUHxz/EGjHGGVUWW1UrIkoxi03owTSlHu/Nc=
Subject key identifier:   CC:C3:07:97:95:71:1E:2E:CB:D7:48:1E:41:95:0B:8A:E8:B3:42:22
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       4C28FFC2DD4A5A56EDA6A02CC2044302B27057C8
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 09 Sep 2024 08:59:34 +0000
ROA not before:           Mon 09 Sep 2024 08:54:34 +0000
ROA not after:            Mon 08 Sep 2025 08:59:34 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d0b0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:28:ff:c2:dd:4a:5a:56:ed:a6:a0:2c:c2:04:43:02:b2:70:57:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 08:54:34 2024 GMT
            Not After : Sep  8 08:59:34 2025 GMT
        Subject: CN=CCC3079795711E2ECBD7481E41950B8AE8B34222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:1b:43:6f:e2:f3:74:02:2f:ad:73:89:ce:
                    ad:0d:4f:e4:8b:73:b7:8b:cf:e7:48:52:45:e6:fc:
                    20:80:17:98:4a:6f:06:9c:d0:23:c5:77:0d:b7:90:
                    90:bc:67:18:13:b1:25:e7:72:08:af:1c:5e:6d:97:
                    e2:79:9e:17:e6:0b:33:5f:0f:ae:e2:35:c7:38:3b:
                    b9:ca:ea:d0:c6:39:7b:87:84:7d:9d:ea:53:9f:92:
                    ca:53:4b:12:ca:de:a2:8c:03:3c:fd:8e:4d:59:b5:
                    7e:fc:1d:29:0b:db:39:f2:79:74:2d:04:8d:b0:87:
                    dd:e2:84:bf:13:88:18:8b:c1:c1:de:28:6d:a4:df:
                    14:05:c0:e3:8c:fb:81:e9:0f:41:41:b3:c7:0a:2c:
                    f6:0b:48:2f:4c:5c:41:96:43:6f:3f:46:0f:9b:03:
                    17:c5:eb:32:fa:86:d7:fc:7a:00:4a:89:a3:f7:39:
                    fd:44:27:e9:d1:a2:00:84:86:40:0e:20:13:be:62:
                    38:d9:f2:a3:89:4a:eb:5f:06:ac:79:6f:2e:60:0b:
                    81:81:18:96:fa:1c:c4:c8:e0:70:dd:03:2b:c1:dc:
                    b6:d5:bc:67:38:5f:f1:1e:52:23:b4:2e:80:81:f7:
                    17:c1:90:c9:32:d3:47:3a:87:77:9d:38:d2:3f:0b:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:07:97:95:71:1E:2E:CB:D7:48:1E:41:95:0B:8A:E8:B3:42:22
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d0b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:72:27:3f:64:c0:51:d1:ff:44:08:ab:ce:2f:ed:f2:7e:
         fa:1c:ce:03:44:01:19:fe:b5:1b:dd:f0:17:57:af:81:05:19:
         e0:10:7e:80:01:39:23:c7:99:81:9a:2a:32:46:27:8d:ef:86:
         d6:c2:41:76:0d:92:26:3e:52:7a:a9:25:64:5e:cb:68:4b:7d:
         4f:fa:e3:81:78:89:40:af:ae:c0:ff:22:1a:8e:8c:38:57:6a:
         87:75:fe:a3:25:33:08:2a:e1:32:fc:5f:9f:b2:b6:8b:40:fb:
         fe:03:c1:65:a7:1c:fb:78:9e:ad:5b:3c:02:06:de:20:f4:a0:
         88:63:c8:9f:08:24:58:d9:95:41:e4:af:2f:17:ea:29:99:c7:
         05:fa:d4:28:79:f3:be:34:2f:59:cf:71:3b:8d:c7:1c:c6:91:
         06:c6:69:88:f4:6b:f8:7a:0c:d9:99:4b:5d:0e:97:cd:77:fe:
         06:7a:e8:e3:c5:75:d2:33:61:49:da:8e:2e:52:e4:60:8a:2a:
         e7:42:78:fc:93:9a:b4:aa:2c:bc:91:af:c2:5b:f2:5a:4c:8e:
         59:eb:2f:ad:eb:92:49:31:de:3f:19:d7:ce:e2:1b:b7:44:72:
         d8:d8:76:81:cf:16:0e:ef:aa:4d:3a:92:d2:60:5e:88:4d:0b:
         05:ab:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 19:45:41 2024 by rpki-client on console-fra.rpki-client.org