Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/WUEZnI6GGn7KTsv64NjSmo-lbdA.roa
File:                     WUEZnI6GGn7KTsv64NjSmo-lbdA.roa (raw, json)
Hash identifier:          SPQZ2cX+S/zK2uZool7fClt5usTsMfltDAN31EZnRbU=
Subject key identifier:   59:41:19:9C:8E:86:1A:7E:CA:4E:CB:FA:E0:D8:D2:9A:8F:A5:6D:D0
Certificate issuer:       /CN=422b1549c8cc2eebf858067bb2a62bfef90a1eb5
Certificate serial:       322952
Authority key identifier: 42:2B:15:49:C8:CC:2E:EB:F8:58:06:7B:B2:A6:2B:FE:F9:0A:1E:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QisVScjMLuv4WAZ7sqYr_vkKHrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/WUEZnI6GGn7KTsv64NjSmo-lbdA.roa
Signing time:             Sat 01 Jan 2022 01:52:07 +0000
ROA not before:           Sat 01 Jan 2022 01:52:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50495
IP address blocks:        176.119.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3287378 (0x322952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422b1549c8cc2eebf858067bb2a62bfef90a1eb5
        Validity
            Not Before: Jan  1 01:52:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5941199c8e861a7eca4ecbfae0d8d29a8fa56dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:26:26:e8:db:d2:7e:5f:51:4e:00:c9:ad:
                    87:be:49:c0:93:40:cb:b4:b3:f0:10:1d:6a:25:6e:
                    e1:1e:70:90:9a:ec:ad:65:9e:34:78:5a:97:40:47:
                    47:66:46:58:47:c4:2b:33:4d:48:57:27:b5:ae:bd:
                    a0:65:02:d6:79:b4:ea:3e:62:a7:cb:1a:89:de:c2:
                    48:9e:a2:7a:41:8a:2a:92:9d:c3:4d:7a:56:c0:e9:
                    89:4e:bd:b1:ff:6c:9b:58:ec:50:d4:3b:6a:b5:3e:
                    01:e4:02:28:9b:e9:7b:f5:29:f8:20:b2:79:3f:d4:
                    78:53:80:7a:07:15:32:b7:d1:3c:c9:2f:14:1b:96:
                    85:9b:41:79:6b:80:3d:66:5a:7e:56:37:ab:b6:f6:
                    9e:ef:98:d4:8d:ed:f8:ff:5e:e6:3d:b9:c2:30:be:
                    c2:e4:0d:c9:f9:6b:46:96:38:c2:58:b1:2f:6d:7a:
                    36:f5:d8:65:6b:f5:05:eb:e9:d3:79:40:da:d0:2e:
                    0d:92:70:bf:66:8f:3e:03:5d:42:05:68:08:96:c4:
                    92:cf:16:a4:14:e9:ad:f0:b2:04:ff:99:36:52:fb:
                    57:5a:9f:8e:81:c9:0a:e5:0e:9f:20:a5:30:8a:9d:
                    ed:42:14:01:01:65:36:53:02:16:6a:12:eb:c2:a0:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:41:19:9C:8E:86:1A:7E:CA:4E:CB:FA:E0:D8:D2:9A:8F:A5:6D:D0
            X509v3 Authority Key Identifier:
                keyid:42:2B:15:49:C8:CC:2E:EB:F8:58:06:7B:B2:A6:2B:FE:F9:0A:1E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QisVScjMLuv4WAZ7sqYr_vkKHrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/WUEZnI6GGn7KTsv64NjSmo-lbdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/QisVScjMLuv4WAZ7sqYr_vkKHrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:70:9c:e5:8f:be:82:e6:65:9d:b7:51:97:e6:51:5e:c8:09:
         23:13:5d:f5:d8:10:a6:04:f4:65:e2:fb:d4:cb:a4:b3:4a:82:
         28:46:96:7a:4e:a6:fb:9f:3d:f5:a9:b8:9d:b6:1d:9d:e1:2e:
         8c:6c:6b:83:f2:44:49:9b:21:c7:43:ff:15:9f:d0:07:4e:9f:
         85:93:2c:21:e5:0f:26:8b:95:30:68:75:18:91:06:ed:5c:1e:
         86:68:a2:3b:e5:a2:78:d2:f3:79:8b:ba:20:9c:d4:95:ae:89:
         91:39:90:74:92:8b:f5:40:89:ec:4d:45:62:23:77:b5:c9:bf:
         17:d1:61:ba:7b:cc:f0:24:1e:b8:b5:65:62:a7:ce:02:da:59:
         dc:b3:a3:8c:4a:9e:f7:0e:fe:be:1c:13:85:3e:d0:7c:7a:8c:
         a8:33:f6:22:f4:dd:0e:b3:73:fa:0f:d5:0c:aa:23:c4:c9:e4:
         a2:c1:b6:a3:ce:ef:a9:02:79:b1:4b:26:8f:73:c0:61:89:a4:
         b0:ea:e3:85:97:ac:67:b5:ea:55:97:b4:b2:b8:9d:f3:41:f2:
         3b:d6:02:c5:17:24:03:2b:4c:8b:67:66:65:5e:20:07:be:bf:
         35:54:c7:9f:5d:e4:97:e5:a6:1f:c3:55:99:32:ea:c7:88:51:
         d4:64:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:30 2024 by rpki-client on console-ams.rpki-client.org