Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS132282.roa
File:                     AS132282.roa (raw, json)
Hash identifier:          dpGR6TedIV1a9FmzMggzmKUhESEY4ZXTWwv8NWnrHK4=
Subject key identifier:   14:6F:75:BA:45:EC:6F:C3:CD:27:27:AD:CD:0C:2A:F8:57:92:D5:25
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       164A9816324EB4BB034EF9D352F495F624E4C9A2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS132282.roa
Signing time:             Sun 01 Jan 2023 23:59:19 +0000
ROA not before:           Sun 01 Jan 2023 23:54:19 +0000
ROA not after:            Sun 31 Dec 2023 23:59:19 +0000
asID:                     132282
IP address blocks:        2a06:a005:bb0::/44 maxlen: 48
                          2a06:a005:c70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4a:98:16:32:4e:b4:bb:03:4e:f9:d3:52:f4:95:f6:24:e4:c9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:19 2023 GMT
            Not After : Dec 31 23:59:19 2023 GMT
        Subject: CN=146F75BA45EC6FC3CD2727ADCD0C2AF85792D525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:b2:09:4f:a0:ff:73:b8:25:18:d5:d4:5a:
                    c7:d9:de:0e:04:55:e9:6c:c2:2a:34:2f:98:4e:5f:
                    23:5d:2e:b1:b8:eb:98:56:ad:61:74:03:ee:36:f7:
                    2a:1c:79:14:0d:e3:14:cd:0d:42:11:28:d3:7d:69:
                    4a:61:68:bc:5f:d5:31:65:4e:58:8c:cc:33:11:25:
                    46:b4:aa:11:a5:e5:61:2c:37:0e:33:8b:53:89:76:
                    d9:ac:41:83:26:fd:9c:b5:d0:59:d9:82:e0:98:f7:
                    31:8f:59:16:ed:90:41:23:53:14:0f:64:94:9f:8a:
                    9d:71:55:59:dd:a6:d0:13:54:14:65:49:87:c6:7a:
                    09:1a:9d:08:08:aa:a0:76:40:6d:9c:bc:26:0e:61:
                    4f:4c:57:8b:81:c1:83:47:78:a0:22:10:7b:5a:d2:
                    26:f6:34:87:84:df:fb:c3:7d:10:81:cf:9a:c6:2f:
                    c1:a2:90:a0:a6:32:82:6f:fa:79:25:2d:1b:97:98:
                    88:da:03:4e:36:ea:db:63:7c:cf:bd:2a:7b:c8:99:
                    b1:09:63:fc:78:d6:46:a0:c6:02:de:6c:5a:5f:54:
                    8f:37:cb:b4:7a:f8:c7:cb:90:2e:12:e8:48:d7:79:
                    60:62:c4:0a:42:7d:74:e7:8e:88:54:f1:ad:ef:48:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6F:75:BA:45:EC:6F:C3:CD:27:27:AD:CD:0C:2A:F8:57:92:D5:25
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS132282.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bb0::/44
                  2a06:a005:c70::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:12:c4:fa:9f:23:19:47:85:74:b8:bf:14:85:64:2b:31:
         51:26:90:9b:69:26:5e:f9:d4:37:ed:93:2b:0d:8e:9f:03:f3:
         eb:35:ff:82:2e:4d:89:2a:54:bc:d5:c1:91:4e:61:9b:e2:e5:
         f9:66:b1:07:c9:fa:3f:22:8f:77:a9:f3:86:5b:f1:18:b0:b9:
         58:b7:d2:d2:1f:35:24:4a:02:b6:85:a9:fc:f3:f9:02:16:77:
         49:36:1f:b5:69:74:c0:e6:e3:dc:05:2a:55:ff:7b:a5:01:5c:
         32:cf:71:d0:40:27:3c:63:90:9c:35:9b:61:99:37:ed:b7:fb:
         51:70:cb:1c:40:87:fe:4a:1d:9a:4d:9f:06:a9:fa:95:b7:c9:
         02:49:76:ba:d3:51:a1:b7:02:eb:61:dd:00:09:cc:f6:3d:d1:
         d5:97:64:38:c0:7f:29:c6:f8:8d:f3:4b:d4:27:6d:0f:94:2f:
         94:b4:8e:d8:1a:af:09:8f:ef:69:11:fc:7d:80:37:25:96:d1:
         35:84:85:fb:ba:95:47:9f:04:9e:4c:47:a4:24:32:dc:98:e3:
         7f:f9:d0:ef:97:b8:65:8a:22:a3:f8:9c:ae:6a:88:0e:2a:22:
         1c:16:89:07:d4:a9:ab:2e:5c:3c:ad:ae:49:fd:0b:a7:cd:88:
         7a:0a:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org