Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          X40tqiRHtoOatgPOHla6UwKN4H5rxFIDymwCiJiCMcY=
Subject key identifier:   57:69:48:22:19:AC:1C:4C:70:66:16:C0:1A:9D:3F:13:BB:F7:5E:A2
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       313B0BC6B870F7D3D6C1C74097FC35B38E524F6C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212294.roa
Signing time:             Sun 01 Jan 2023 23:59:12 +0000
ROA not before:           Sun 01 Jan 2023 23:54:12 +0000
ROA not after:            Sun 31 Dec 2023 23:59:12 +0000
asID:                     212294
IP address blocks:        2a06:a005:e40::/44 maxlen: 48
                          2a06:a005:1610::/44 maxlen: 48
                          2a06:a005:1620::/44 maxlen: 48
                          2a06:a005:1630::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a06:a005:1c30::/44 maxlen: 48
                          2a06:a005:1c40::/44 maxlen: 48
                          2a06:a005:1f40::/44 maxlen: 48
                          2a06:a005:1f50::/44 maxlen: 48
                          2a06:a005:1f60::/44 maxlen: 48
                          2a06:a005:1f70::/44 maxlen: 48
                          2a06:a005:1f80::/44 maxlen: 48
                          2a06:a005:2200::/44 maxlen: 48
                          2a06:a005:2210::/44 maxlen: 48
                          2a06:a005:2220::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3b:0b:c6:b8:70:f7:d3:d6:c1:c7:40:97:fc:35:b3:8e:52:4f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:12 2023 GMT
            Not After : Dec 31 23:59:12 2023 GMT
        Subject: CN=5769482219AC1C4C706616C01A9D3F13BBF75EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:08:02:15:fa:ae:63:0f:f0:6e:9b:03:5c:
                    ee:3a:d1:fd:7c:7c:bb:07:a9:ad:bf:0c:eb:80:83:
                    8e:4c:c5:3d:25:b3:0b:8b:43:ab:f6:f9:12:7d:b7:
                    7c:ce:91:b0:67:ba:c1:bd:b9:1a:81:be:b4:8e:e2:
                    1c:98:db:84:77:de:cf:90:19:0c:38:5d:76:a1:f5:
                    5b:bb:30:c4:68:e9:bb:6d:fa:cb:a4:61:e8:7a:8f:
                    a3:46:9b:f1:31:d4:b0:47:af:02:72:ef:dc:1d:d6:
                    be:7e:a2:d3:1e:0a:08:83:16:e1:9b:8d:43:a1:d2:
                    f6:70:b6:d8:0e:9a:e9:58:d6:78:de:06:9e:3b:89:
                    cf:4d:1f:78:4c:4e:b9:1f:b5:f0:e1:e0:2a:65:0b:
                    07:44:fa:9a:62:f4:7d:a2:b9:f6:54:93:a3:c2:f6:
                    ab:3b:58:d3:6e:fc:30:fb:7f:77:5a:42:b5:03:37:
                    85:c4:4c:0e:cc:1b:47:3e:1c:64:09:21:01:bb:71:
                    82:93:e2:3f:1a:55:a3:29:47:ab:b9:fe:10:de:c8:
                    0d:8a:18:6b:23:d7:7b:a4:f6:b2:e8:d7:6d:4d:38:
                    99:92:9e:92:65:71:76:12:12:7f:35:22:0f:2b:99:
                    ae:08:72:77:b5:ee:e5:5b:01:9d:a4:8d:c0:50:48:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:48:22:19:AC:1C:4C:70:66:16:C0:1A:9D:3F:13:BB:F7:5E:A2
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e40::/44
                  2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:19e0::/44
                  2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2200::-2a06:a005:222f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:4d:8c:fb:9f:0e:b2:40:4e:8d:56:80:40:6d:8e:36:fe:
         03:da:26:fb:0b:71:48:f8:21:be:b0:c0:df:d4:21:a4:73:2d:
         ec:57:fb:39:4b:ea:98:3c:d9:86:ec:b7:d2:4a:22:6c:f6:69:
         60:eb:68:b4:74:52:42:9a:57:6e:e1:77:46:a4:b2:3d:04:eb:
         9f:ec:73:14:02:dd:5a:fe:da:ee:44:b2:43:d0:38:2e:c8:70:
         05:eb:4f:eb:3c:33:49:e7:8a:fe:3e:5e:5d:1a:77:9b:70:22:
         47:5d:b2:4a:16:1d:e8:91:b6:e2:6f:fc:2c:f9:29:2d:91:40:
         13:4c:e9:82:d1:cb:4a:67:85:42:5e:2e:fc:fb:7f:ec:e2:91:
         05:02:85:84:7d:b5:39:db:a2:d3:66:77:d8:ac:12:aa:39:09:
         83:7b:e5:6f:fc:58:8d:60:ff:53:48:29:39:aa:14:10:88:11:
         ae:56:aa:c5:e5:fa:7e:12:e6:9a:aa:14:a1:8a:44:66:bd:ea:
         76:ce:7b:b9:1e:0e:ff:d4:e7:f6:81:3b:b8:ee:1b:30:77:ba:
         37:80:d2:a4:68:fb:c2:04:01:a0:fa:61:0f:6d:9b:69:8f:14:
         06:7f:5c:37:2c:01:88:20:ef:b6:74:07:25:6f:82:83:b3:40:
         68:b3:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org