Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/4/326131323a386430303a3a2f32392d3438203d3e203537363935.roa
File:                     326131323a386430303a3a2f32392d3438203d3e203537363935.roa (raw, json)
Hash identifier:          plBR+fDw8um1z3+xQ6BODOjum5U+7s+wT6VAnj8+TI0=
Subject key identifier:   98:6D:8B:63:B8:C1:96:80:48:78:51:A6:2B:00:46:74:1F:94:47:DD
Certificate issuer:       /CN=d8901aff4a34f68701baa98545c2d390d7a4463a
Certificate serial:       330A95EA10683B6769C82BD7BB28110A59EF0D2F
Authority key identifier: D8:90:1A:FF:4A:34:F6:87:01:BA:A9:85:45:C2:D3:90:D7:A4:46:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JAa_0o09ocBuqmFRcLTkNekRjo.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/4/326131323a386430303a3a2f32392d3438203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:14 +0000
ROA not before:           Sun 03 Dec 2023 21:33:14 +0000
ROA not after:            Sun 01 Dec 2024 21:38:14 +0000
asID:                     57695
IP address blocks:        2a12:8d00::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0a:95:ea:10:68:3b:67:69:c8:2b:d7:bb:28:11:0a:59:ef:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8901aff4a34f68701baa98545c2d390d7a4463a
        Validity
            Not Before: Dec  3 21:33:14 2023 GMT
            Not After : Dec  1 21:38:14 2024 GMT
        Subject: CN=986D8B63B8C19680487851A62B0046741F9447DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:3a:73:4b:2f:34:3a:77:b6:02:d0:ec:ed:
                    06:c2:e3:a1:a2:d2:67:25:64:9b:29:61:da:3f:ba:
                    53:37:44:0d:9f:84:c8:b8:c7:d8:15:95:02:70:4b:
                    dd:c3:c7:a8:5c:ca:69:58:55:6c:bb:85:b1:f1:18:
                    a6:9c:ec:7e:b0:c3:6f:20:54:da:71:e9:29:28:7c:
                    03:bb:d0:85:87:03:f3:4f:00:69:1d:a7:95:3d:8b:
                    a7:87:ee:2c:53:f4:c8:75:4f:e9:ad:9f:5f:40:18:
                    71:4a:bc:90:4e:17:76:40:93:6b:32:ed:b3:2c:ba:
                    fa:89:e2:e1:09:d8:a5:b9:5e:2a:90:70:f0:10:4b:
                    65:fe:62:b1:a0:04:d7:cd:3f:cd:68:53:42:44:ee:
                    a1:3b:8b:12:03:d3:b1:5a:50:94:e4:0e:02:de:04:
                    84:77:35:0b:1e:ce:8e:b1:62:00:8c:6b:c3:2e:ab:
                    fd:65:33:23:f4:a6:c0:44:b7:24:6d:54:dd:e3:e5:
                    be:fa:aa:c7:a1:20:fe:28:48:bd:76:b5:eb:1a:de:
                    5c:0c:cc:ed:62:56:81:1d:cb:86:ab:4d:26:1b:24:
                    91:4e:11:5e:07:ae:f4:90:b3:13:73:6a:a0:3c:95:
                    10:e6:fc:73:92:6e:b1:55:f7:3d:05:38:78:db:4b:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6D:8B:63:B8:C1:96:80:48:78:51:A6:2B:00:46:74:1F:94:47:DD
            X509v3 Authority Key Identifier:
                keyid:D8:90:1A:FF:4A:34:F6:87:01:BA:A9:85:45:C2:D3:90:D7:A4:46:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/4/D8901AFF4A34F68701BAA98545C2D390D7A4463A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JAa_0o09ocBuqmFRcLTkNekRjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/4/326131323a386430303a3a2f32392d3438203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         bb:dd:1f:53:eb:04:55:db:93:dd:e4:1a:17:1f:fa:4b:c4:ad:
         bb:b9:72:8a:0d:2c:77:ea:40:d4:c9:59:f7:4f:0f:46:12:a5:
         e4:bf:6d:5a:ec:fc:91:cd:4b:af:0f:18:51:a7:9a:de:bc:f3:
         90:46:2f:88:4b:23:99:85:69:25:8e:f3:66:44:e9:86:34:e1:
         cf:4d:27:89:04:a1:66:42:ec:96:a2:82:fb:51:5a:b5:9c:50:
         46:40:c1:ea:b6:62:e0:ce:03:3f:be:7f:06:13:a0:e6:d2:61:
         ff:1a:5b:a0:11:c6:d5:2f:28:e3:c2:52:19:ea:a6:ea:62:a8:
         46:57:71:8e:95:f4:94:4d:9d:8d:48:a9:17:9d:f5:82:bf:ba:
         6b:34:a0:6c:e4:9a:58:85:3d:f7:e5:66:20:d7:e9:4e:80:fd:
         be:40:68:ee:84:16:15:8d:4b:a6:2d:2e:0b:e5:ab:fc:ab:13:
         95:bb:e3:7f:02:4d:78:c3:55:c3:5b:db:70:b4:5d:b5:cc:d3:
         9b:e3:68:68:e8:2c:fd:93:cc:8c:d6:13:27:2d:c1:db:08:f5:
         39:0d:ca:98:bf:2e:b8:b9:b5:1e:1c:3a:86:88:bd:74:f3:4a:
         d7:1f:06:82:33:2e:58:8a:ec:90:23:d5:ea:46:40:10:7b:4f:
         37:de:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org