Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/aTs2AJlj9JSnzIDXyWEbN8poqwk.roa
File:                     aTs2AJlj9JSnzIDXyWEbN8poqwk.roa (raw, json)
Hash identifier:          IkVX/fqHGvCNnwXiOIIcC8ZNg6sSyms+jNelIzW69Fw=
Subject key identifier:   69:3B:36:00:99:63:F4:94:A7:CC:80:D7:C9:61:1B:37:CA:68:AB:09
Certificate issuer:       /CN=e2cbeb8f1df5e6fd4fa34ab80845d69f377ecbdf
Certificate serial:       11C7D939
Authority key identifier: E2:CB:EB:8F:1D:F5:E6:FD:4F:A3:4A:B8:08:45:D6:9F:37:7E:CB:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4svrjx315v1Po0q4CEXWnzd-y98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/aTs2AJlj9JSnzIDXyWEbN8poqwk.roa
Signing time:             Sat 01 Jan 2022 05:52:25 +0000
ROA not before:           Sat 01 Jan 2022 05:52:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203435
IP address blocks:        185.135.2.0/24 maxlen: 24
                          205.201.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298309945 (0x11c7d939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2cbeb8f1df5e6fd4fa34ab80845d69f377ecbdf
        Validity
            Not Before: Jan  1 05:52:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=693b36009963f494a7cc80d7c9611b37ca68ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:e9:ac:46:4a:4c:5b:f5:e3:01:4a:7f:03:
                    8b:3a:bd:db:e9:e6:15:7d:ea:75:7b:b9:aa:4e:75:
                    19:57:45:7f:e2:51:05:09:99:a7:d6:b5:1f:94:4e:
                    47:3f:a2:1d:73:8e:b5:53:b2:27:4c:ae:ac:44:9f:
                    09:bb:ae:39:46:86:e6:df:d0:a8:d1:10:85:26:93:
                    d4:4f:4a:4d:67:c8:95:a3:23:44:b9:91:dd:e0:4e:
                    73:87:fc:03:3c:a9:3f:98:6b:95:89:51:52:eb:24:
                    55:21:8a:a0:35:15:3b:e2:c7:e6:08:69:43:65:74:
                    be:94:8e:98:9f:82:d4:2a:1b:49:b6:4d:63:a5:14:
                    14:70:95:5d:fc:ef:e2:cc:c8:77:e3:fa:6b:df:e1:
                    f6:ba:60:b3:b7:67:7f:4a:df:1f:e8:8d:25:1f:13:
                    c7:3b:78:b2:a0:2a:1e:35:05:0c:a9:76:b5:c6:88:
                    26:98:60:90:4c:15:ba:92:74:22:93:5f:06:b3:70:
                    fd:74:c4:04:21:e5:91:c2:cf:cc:17:27:cd:1a:6a:
                    ae:18:0f:ee:c9:59:07:f9:f0:42:0c:a6:eb:f7:b7:
                    10:f1:7f:22:57:d0:6a:f1:2d:df:a9:16:aa:63:6b:
                    c2:46:c4:fc:9d:7d:ae:d4:3a:21:f9:ef:5b:93:88:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3B:36:00:99:63:F4:94:A7:CC:80:D7:C9:61:1B:37:CA:68:AB:09
            X509v3 Authority Key Identifier:
                keyid:E2:CB:EB:8F:1D:F5:E6:FD:4F:A3:4A:B8:08:45:D6:9F:37:7E:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4svrjx315v1Po0q4CEXWnzd-y98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/aTs2AJlj9JSnzIDXyWEbN8poqwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/4svrjx315v1Po0q4CEXWnzd-y98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.2.0/24
                  205.201.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:61:9c:5f:dc:35:22:d9:74:10:f0:07:55:ec:6e:a9:4d:dc:
         ac:fb:eb:a1:e2:5a:90:51:7c:3a:a9:2f:ff:86:ab:3d:b5:09:
         ce:f5:af:e9:ba:d3:17:74:aa:6e:40:0e:f3:63:90:4a:f9:a3:
         7d:93:5b:12:50:e2:b2:c8:d9:d4:3e:70:6d:0e:a8:98:3c:1e:
         19:5a:57:1f:1a:cc:65:32:fd:d3:8e:bf:26:ff:8c:04:db:73:
         32:e7:57:ce:7e:25:f8:45:d1:a3:f9:2b:a3:97:f5:87:8e:d5:
         d3:40:54:40:80:7f:cb:19:60:18:bc:8f:02:34:cc:e6:c3:57:
         db:64:e1:8d:f3:31:f7:be:c4:7d:b1:7e:a4:83:ca:f7:c4:16:
         66:7d:b5:cc:91:ed:df:b5:4d:63:19:37:1d:62:3e:55:0d:cb:
         3e:0b:28:a4:4e:7d:62:8d:45:ab:a2:c6:81:81:99:99:36:7e:
         43:52:cb:fe:e5:1c:ec:b1:af:ea:56:70:43:52:ac:44:65:b9:
         a3:bd:05:1c:8d:7e:24:bd:39:6d:76:4b:02:ce:c3:b3:92:f9:
         80:0b:33:97:29:cf:19:7f:01:8a:cc:be:21:13:a8:51:ab:aa:
         fb:20:25:34:84:b7:0a:ca:3a:92:04:8a:7a:dd:19:b1:ab:73:
         5c:e1:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:23 2024 by rpki-client on console-ams.rpki-client.org