Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7jXTlna1QB_P8N53pko3kCJAL2c.roa
File:                     7jXTlna1QB_P8N53pko3kCJAL2c.roa (raw, json)
Hash identifier:          J0xWiI9M65MG2T/EB8wiSSUhNxh2FfSdnpH7AC63U2I=
Subject key identifier:   EE:35:D3:96:76:B5:40:1F:CF:F0:DE:77:A6:4A:37:90:22:40:2F:67
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       042BEFFA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7jXTlna1QB_P8N53pko3kCJAL2c.roa
Signing time:             Tue 26 Apr 2022 11:48:57 +0000
ROA not before:           Tue 26 Apr 2022 11:48:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        141.11.168.0/23 maxlen: 24
                          141.11.178.0/24 maxlen: 24
                          141.11.5.0/24 maxlen: 24
                          141.11.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69988346 (0x42beffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 26 11:48:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee35d39676b5401fcff0de77a64a379022402f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:4d:95:1c:00:91:56:b5:89:a0:04:9e:9b:
                    71:0e:67:cc:13:3d:1e:e4:47:e5:2e:c2:ac:37:e1:
                    f4:70:c8:3e:33:e2:c9:65:31:11:33:62:9c:85:51:
                    9d:fe:d3:3b:52:29:7c:5f:8d:f8:4a:af:90:c2:bc:
                    1f:a5:44:e9:96:c3:2d:14:ce:46:98:57:a8:14:a5:
                    74:3c:7b:26:7a:d4:22:1a:55:ff:08:74:8c:37:65:
                    61:3b:eb:f2:a5:33:9c:4c:b7:32:6a:4c:0c:4e:bd:
                    1c:50:6f:49:da:63:c7:16:56:a1:81:a4:23:42:f6:
                    a5:35:da:f6:58:db:c6:db:0a:60:88:97:12:53:83:
                    1e:bb:94:14:92:44:91:a2:ae:cd:5e:0c:4a:36:3a:
                    34:6b:9f:10:0a:cf:e8:f7:6a:08:69:d1:63:fc:84:
                    b0:81:51:17:b1:8a:af:7b:68:30:26:f9:e5:1d:33:
                    98:2c:80:8d:c7:7a:eb:e5:af:ee:40:95:c7:bd:74:
                    34:20:3f:65:0c:51:be:ce:52:f1:50:29:0b:a2:30:
                    3e:5b:96:e4:9b:5c:8d:56:d8:72:eb:bb:a5:ce:87:
                    ad:af:59:f7:cb:38:f5:64:c7:2d:e2:74:f7:e4:9e:
                    92:33:e3:0a:ee:d2:98:2c:e2:8f:7a:2e:62:6d:1b:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:D3:96:76:B5:40:1F:CF:F0:DE:77:A6:4A:37:90:22:40:2F:67
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7jXTlna1QB_P8N53pko3kCJAL2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.5.0/24
                  141.11.26.0/24
                  141.11.168.0/23
                  141.11.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:64:7b:60:3c:95:16:95:6b:44:e6:fb:cb:8f:fc:8d:fd:d6:
         03:d5:4a:98:46:27:4d:a7:89:bb:75:97:28:cc:ef:42:04:f0:
         d0:3f:78:1c:3a:99:42:61:51:34:77:3b:aa:83:4a:d1:12:bf:
         31:f4:d3:3e:6f:47:1c:ba:38:dc:50:3c:3e:bc:b3:29:ac:6d:
         22:9e:0a:5b:35:e3:7e:3d:fa:df:9c:30:b0:33:77:b9:8e:45:
         e1:db:91:96:d6:41:54:84:d5:04:40:6f:29:5d:f7:7d:ff:1f:
         64:0e:e1:bc:41:92:29:64:c7:82:12:f6:69:c6:42:6e:f8:f0:
         11:65:51:ad:9e:84:99:92:3b:41:a5:98:d5:a4:18:1d:50:93:
         44:d1:2b:e0:1f:e5:22:0b:57:1a:ab:6b:3e:1f:ef:70:22:48:
         66:19:9c:37:e0:5f:29:6d:b6:6a:b4:7f:8a:f9:bf:65:11:de:
         fa:c1:8a:c8:a4:ab:34:59:6b:67:0b:33:e1:dd:c2:b2:65:f0:
         82:31:f3:6b:a4:d3:0e:94:66:84:90:fb:03:f9:6d:df:a3:62:
         ad:12:7b:e8:5e:6f:dd:ca:c4:e2:7b:bd:26:ef:f9:e0:f6:1c:
         fb:13:ad:52:08:0a:29:7c:f8:17:77:1c:4a:4a:a1:dd:c2:da:
         78:4d:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org