Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          0zqZK5TLUfxMUd4LH2Kko3Xeq95GOE2+dWBS0SXgGLY=
Subject key identifier:   B0:26:6D:4B:3F:AA:CF:52:EB:AB:84:8A:9B:A4:00:5B:73:90:7A:05
Certificate issuer:       /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial:       37D4C1AB6F2D88964F19258E7B24221BCAE7B769
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sat 02 Dec 2023 03:08:58 +0000
ROA not before:           Sat 02 Dec 2023 03:03:58 +0000
ROA not after:            Sat 30 Nov 2024 03:08:58 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3013::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:c1:ab:6f:2d:88:96:4f:19:25:8e:7b:24:22:1b:ca:e7:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
        Validity
            Not Before: Dec  2 03:03:58 2023 GMT
            Not After : Nov 30 03:08:58 2024 GMT
        Subject: CN=B0266D4B3FAACF52EBAB848A9BA4005B73907A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:2a:b2:33:25:54:ee:7c:c5:26:f9:3f:07:
                    4a:66:1c:bc:3f:9a:5e:e4:8f:2f:c3:9e:5e:a6:49:
                    2c:e4:e7:d7:07:21:76:60:9a:80:50:22:ce:90:a3:
                    e3:b3:57:47:a5:36:d5:c0:38:01:4a:76:4d:8f:dd:
                    ad:61:c0:01:98:27:ea:42:ea:c3:4e:61:85:30:3f:
                    47:14:1d:24:12:aa:1b:70:02:20:8f:da:cd:03:f9:
                    ea:83:7b:2c:30:ed:6b:de:71:46:ad:42:27:12:5b:
                    84:6e:c1:e1:b0:eb:36:3d:c4:da:16:9b:45:9f:07:
                    3f:db:42:81:67:4b:5d:fa:d4:4d:78:53:7e:21:70:
                    9e:c4:cb:9b:42:b7:d7:45:68:38:67:af:dc:8e:f3:
                    20:b9:eb:4e:b4:c6:21:94:53:bb:5a:89:b9:85:20:
                    11:f5:89:cd:eb:aa:6c:55:12:a9:2f:04:5a:d4:f5:
                    5d:f8:38:76:fe:33:e5:33:06:f7:55:3c:02:53:aa:
                    31:18:56:a3:94:a4:c3:dc:0b:d2:d6:48:0a:9d:5d:
                    61:aa:aa:4c:6e:1a:a7:5f:26:ba:cf:38:4d:a0:ad:
                    cf:a2:44:07:04:83:78:de:8b:6c:69:b9:77:80:ec:
                    a6:af:d0:b9:de:ca:1e:96:5a:a0:25:84:47:5d:6f:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:26:6D:4B:3F:AA:CF:52:EB:AB:84:8A:9B:A4:00:5B:73:90:7A:05
            X509v3 Authority Key Identifier:
                keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333031333a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3013::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:c9:bb:76:3b:8e:4c:d4:59:be:ad:a8:f4:94:15:64:c4:
         a8:c9:a6:94:e4:e5:8f:b7:a0:2d:b9:57:40:a6:09:fc:67:8f:
         96:4d:39:85:9d:b0:da:70:6a:08:61:d1:53:6b:08:03:e6:8d:
         d5:43:fd:6d:fd:0a:12:7f:6c:33:6c:90:37:cd:c5:ce:5f:5a:
         5c:91:f9:7c:58:de:7c:56:79:c3:0b:29:0b:db:76:c6:bc:0d:
         59:07:ef:e4:d6:aa:e6:b2:1d:51:6e:6d:d5:02:9c:db:4b:64:
         85:b0:b6:df:db:07:4d:29:35:10:d7:83:4a:db:dd:34:63:38:
         9a:55:9b:38:bb:05:ee:e1:e7:5a:9c:ac:69:dd:66:81:80:24:
         d0:63:41:2b:89:3b:16:26:30:15:09:99:ac:c4:59:54:ce:6c:
         47:dc:e1:49:9c:04:15:df:6d:27:ad:be:55:e3:13:9e:07:0c:
         18:e3:78:98:05:4b:82:52:dc:09:c0:98:ea:30:0a:fa:ab:0b:
         73:f7:ef:b8:f3:d1:c1:dc:91:23:cd:21:fd:24:13:28:41:86:
         b7:5e:ec:95:bd:90:17:9b:0d:0d:74:cf:4e:7f:01:24:c2:c1:
         ee:37:36:49:9c:de:38:20:c4:6d:b4:10:81:31:8a:0c:a5:aa:
         9b:80:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org