Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/A6ajNdpk01FNpVl3I7iCeUGab_c.roa
File:                     A6ajNdpk01FNpVl3I7iCeUGab_c.roa (raw, json)
Hash identifier:          z7BsP3KucmfJ832Uv1hskdCaDXkVlUliTAurk+ZrWXc=
Subject key identifier:   03:A6:A3:35:DA:64:D3:51:4D:A5:59:77:23:B8:82:79:41:9A:6F:F7
Certificate issuer:       /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial:       020AE760
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/A6ajNdpk01FNpVl3I7iCeUGab_c.roa
Signing time:             Sun 15 May 2022 09:53:40 +0000
ROA not before:           Sun 15 May 2022 09:53:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        94.103.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34269024 (0x20ae760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33980d41e32a5616382e906840264945af02d67e
        Validity
            Not Before: May 15 09:53:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03a6a335da64d3514da5597723b88279419a6ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:c5:e1:af:94:9f:36:e9:80:1d:c2:81:6e:
                    30:7b:b4:b5:35:57:04:11:2b:b1:3a:38:79:03:b9:
                    93:ab:5d:c1:2e:e4:88:3c:3a:65:a2:1c:d6:76:9d:
                    2c:ea:43:20:8c:57:8e:77:69:64:08:10:19:b2:ea:
                    e6:3d:82:47:df:d1:ba:61:cc:60:fd:0b:13:bb:0c:
                    e2:18:6c:0a:a3:28:69:fc:b7:19:21:1f:f6:e9:4c:
                    0c:e2:f4:be:e6:5a:52:45:97:cf:44:7c:6a:45:bb:
                    a8:53:14:be:57:8d:2c:eb:ee:02:7c:4e:f8:cb:78:
                    6a:0a:e3:be:a5:ec:a6:05:82:8a:8d:2d:b8:57:4e:
                    1b:ed:4b:f8:97:39:1b:9b:28:cf:0c:8b:a3:3b:de:
                    21:8c:35:83:4a:91:75:ba:0a:d0:d5:c1:86:6e:42:
                    d8:d4:57:6a:a8:97:6c:a1:89:d1:b9:16:6a:fb:0c:
                    0c:d5:41:6a:de:b5:86:ab:76:bd:65:0e:13:f8:c6:
                    12:a1:9d:66:ee:ed:94:9a:69:89:94:59:73:96:a1:
                    48:ec:8d:f5:5a:8d:ea:1e:a7:cf:a1:69:63:b1:b6:
                    d4:52:d4:ae:af:eb:23:36:ba:ad:dd:95:09:75:ed:
                    78:1d:a1:8e:09:c5:3d:6e:74:fa:62:66:aa:d0:11:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:A3:35:DA:64:D3:51:4D:A5:59:77:23:B8:82:79:41:9A:6F:F7
            X509v3 Authority Key Identifier:
                keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/A6ajNdpk01FNpVl3I7iCeUGab_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:6b:4e:bb:da:d7:63:96:49:1e:01:1e:cf:c9:16:3c:3c:ef:
         45:35:19:0e:12:bc:e8:56:47:bd:b4:c0:6e:13:9a:ac:33:22:
         ef:bb:0e:79:ad:3b:0e:7c:ca:b6:a0:56:e6:b1:59:f7:b8:40:
         e2:71:b0:cd:ea:0f:53:a9:5c:8d:b1:e0:05:93:0b:7f:6e:b1:
         d6:cc:f5:4f:b5:22:03:31:a9:8f:b0:50:c4:9a:69:f2:9a:d9:
         80:88:2e:4b:1d:28:36:08:f5:6c:d7:e9:66:89:22:82:0a:6d:
         df:e9:b6:e1:cb:55:a9:62:dd:e0:1b:fc:34:49:fb:52:c7:5c:
         85:33:53:8c:d5:e4:d6:4b:49:6b:2e:7d:27:83:8b:a0:f3:13:
         9e:4f:25:16:0f:54:3c:96:e1:51:fd:81:99:e8:e7:28:26:01:
         cf:40:88:74:4c:21:42:e0:f3:94:d7:a7:65:4d:2d:93:26:58:
         32:9a:3b:37:37:a6:ba:03:52:b1:10:08:49:ca:59:94:9d:47:
         8c:ec:8d:ff:8a:93:52:ac:93:03:50:17:85:cf:24:62:d7:e1:
         d5:6c:d7:f7:78:ac:b5:10:11:57:25:e1:08:e5:a4:6a:f1:59:
         ab:d9:57:da:2b:90:28:d6:85:87:1b:93:14:bb:90:de:e6:55:
         33:fd:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org