Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/k2pdCk6WD_zTYVdJZEFMmnaKY4M.roa
File:                     k2pdCk6WD_zTYVdJZEFMmnaKY4M.roa (raw, json)
Hash identifier:          gZ9TcaytelWYIK0hxHE9GRgNpoAX96jKpPzQYvZZ2YU=
Subject key identifier:   93:6A:5D:0A:4E:96:0F:FC:D3:61:57:49:64:41:4C:9A:76:8A:63:83
Certificate issuer:       /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial:       0181FC2067F859C644DACD0BA64482195D61
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/k2pdCk6WD_zTYVdJZEFMmnaKY4M.roa
Signing time:             Thu 14 Jul 2022 09:53:10 +0000
ROA not before:           Thu 14 Jul 2022 09:53:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31732
IP address blocks:        212.23.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fc:20:67:f8:59:c6:44:da:cd:0b:a6:44:82:19:5d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
        Validity
            Not Before: Jul 14 09:53:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=936a5d0a4e960ffcd361574964414c9a768a6383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:4f:8c:7c:08:37:6f:ae:d6:41:36:25:12:
                    5f:27:fc:6f:7d:cb:42:9b:32:7f:e8:fe:c3:65:db:
                    d7:aa:1e:4d:58:80:cb:41:4a:9e:d1:93:a5:2d:15:
                    7b:76:7b:bf:63:f7:a3:25:5d:3f:1d:24:cd:5d:44:
                    a4:86:26:d1:4c:1b:f5:0f:bc:97:b9:2b:e2:29:13:
                    f5:8e:be:7c:e2:12:b0:5f:27:96:7e:4d:23:1f:4d:
                    f7:60:24:e8:6a:1c:92:e4:77:91:a4:2d:2a:7f:9a:
                    2f:12:09:bd:29:16:ac:89:bd:55:70:e3:c8:3c:a5:
                    3c:4e:89:1c:7b:80:02:ec:ea:f7:14:22:ae:8b:af:
                    35:c1:6d:8a:5d:59:31:c1:cf:62:6a:45:58:e3:86:
                    af:37:f3:f7:78:1f:a0:ff:45:24:ff:2e:c1:43:bf:
                    d4:05:3a:e4:53:fd:33:40:7b:d0:53:89:f6:09:f6:
                    7c:3e:ff:74:27:44:14:f8:8b:ac:47:4e:c0:fb:74:
                    68:52:35:ac:7e:21:82:84:69:12:f5:63:2d:61:30:
                    1a:23:99:e4:da:55:f5:0c:2a:1f:a2:f3:db:44:e6:
                    a7:90:7d:ad:f3:cd:37:ba:d4:bf:68:89:99:4d:9f:
                    fe:b4:2f:41:a7:5e:af:4d:a3:a1:1a:90:e2:8e:fa:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:5D:0A:4E:96:0F:FC:D3:61:57:49:64:41:4C:9A:76:8A:63:83
            X509v3 Authority Key Identifier:
                keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/k2pdCk6WD_zTYVdJZEFMmnaKY4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:50:9b:3e:65:08:07:44:bb:da:9b:1f:f7:20:6a:93:90:d5:
         73:22:c1:f5:aa:e8:c8:6b:4f:19:56:ed:d4:05:db:55:d9:68:
         fa:c5:92:6c:bc:e4:9f:be:f4:36:29:99:91:74:10:17:e6:3b:
         84:9b:19:db:40:f6:5b:2e:62:31:6e:0c:b7:10:8a:48:24:26:
         7f:01:f3:1e:46:77:e7:35:5b:27:6f:59:6f:2b:5c:6d:4e:5d:
         76:b7:5b:e5:73:ef:fe:95:12:ef:e8:05:a5:39:d8:15:bf:1d:
         89:72:a2:8a:82:00:5e:db:06:9d:c1:20:cd:96:2c:e1:8e:ae:
         a5:9d:bf:60:e1:16:ed:eb:7e:c2:65:6a:98:1a:c7:ea:5e:05:
         e0:f9:7c:31:7e:83:97:a6:bf:c0:1e:7e:16:ca:d7:1a:8c:4c:
         cd:f5:b6:af:c7:7c:a5:e0:37:0f:7a:64:3f:df:5c:83:4f:d5:
         97:0b:a0:72:d2:e3:67:e3:6b:b7:42:9f:e3:48:dc:b5:e2:d6:
         4a:ae:c3:f1:d9:7d:bb:dd:e2:23:ca:0e:52:e7:08:c5:5e:70:
         c9:73:f9:b2:45:de:2f:f6:04:47:86:f0:7f:57:1d:43:7c:3f:
         44:a6:6a:81:8c:aa:97:74:1c:76:50:38:81:a9:6d:9c:f0:17:
         0d:c6:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:19 2024 by rpki-client on console-ams.rpki-client.org