Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/Tx8xlp5FZdYjB8mnVUCB82apy9I.roa
File:                     Tx8xlp5FZdYjB8mnVUCB82apy9I.roa (raw, json)
Hash identifier:          DQedB8vl9SQ9QOC5PrpmB4ug58iNJgoqADW5jGHxztA=
Subject key identifier:   4F:1F:31:96:9E:45:65:D6:23:07:C9:A7:55:40:81:F3:66:A9:CB:D2
Certificate issuer:       /CN=d464fcbe7e193d272130756634f6474307480151
Certificate serial:       01856C5CA893D4476610254DA69DC535EFED
Authority key identifier: D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/Tx8xlp5FZdYjB8mnVUCB82apy9I.roa
Signing time:             Sun 01 Jan 2023 08:04:49 +0000
ROA not before:           Sun 01 Jan 2023 08:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211677
IP address blocks:        178.216.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:5c:a8:93:d4:47:66:10:25:4d:a6:9d:c5:35:ef:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d464fcbe7e193d272130756634f6474307480151
        Validity
            Not Before: Jan  1 08:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f1f31969e4565d62307c9a7554081f366a9cbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bb:82:34:7b:08:10:d5:f3:44:fd:96:58:ea:
                    40:69:d6:d8:df:13:8e:0b:0d:ae:cb:ba:bc:4f:c4:
                    fa:05:5d:90:81:bc:06:fa:b1:e6:4b:d5:8d:5f:33:
                    97:c3:ee:08:fc:6a:30:2f:f4:6b:17:01:b1:5a:0d:
                    7a:b1:12:62:1a:c5:cd:27:7c:33:c4:55:96:10:33:
                    aa:ef:fb:b5:12:44:92:a5:c2:75:c2:fa:27:22:a7:
                    a6:1c:5d:06:ea:f2:bc:17:80:8d:c8:c7:56:27:64:
                    01:83:72:0a:d8:dc:8b:5f:f2:6f:c2:be:fd:64:70:
                    09:c4:17:19:83:b0:bc:23:b2:13:b7:c2:ae:6b:03:
                    20:f9:b4:4b:9d:d5:8a:72:1a:a2:9c:b3:da:2f:06:
                    2c:65:7f:4c:b2:db:95:89:c8:f9:25:9a:7a:ac:f8:
                    ac:00:8f:8b:92:cf:39:aa:ec:eb:f7:92:00:1a:3e:
                    cf:1b:b9:22:cb:dc:3f:64:d1:ce:0a:56:08:b9:0e:
                    3b:20:46:64:01:d0:59:2f:d2:de:b2:17:fa:a7:48:
                    87:d2:6c:0a:1b:78:75:69:b8:51:d5:2c:00:13:a1:
                    21:0e:cb:e0:53:a5:04:05:8a:6b:96:97:01:fd:92:
                    50:6f:37:ea:ea:5d:87:02:c5:d9:39:8f:72:63:d6:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:31:96:9E:45:65:D6:23:07:C9:A7:55:40:81:F3:66:A9:CB:D2
            X509v3 Authority Key Identifier:
                keyid:D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/Tx8xlp5FZdYjB8mnVUCB82apy9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.216.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:f1:f2:e2:c3:b7:24:6e:ad:02:2b:80:62:78:de:2a:44:
         29:95:c8:82:c1:93:c9:f2:05:00:51:c1:c3:10:f8:2c:22:ee:
         d0:1a:67:61:01:cf:46:f1:ce:fe:be:cf:92:58:09:45:98:42:
         80:a7:ed:0b:c0:9b:94:a1:da:d6:fb:5c:ad:28:14:c0:7a:57:
         83:5f:68:f8:7c:b4:86:1a:70:37:e1:fb:c9:e9:77:17:36:c6:
         d6:2e:8e:4a:e3:2e:b4:65:01:2a:3e:c5:7f:c3:96:25:2b:8e:
         e2:ba:9b:e5:86:2d:7e:2b:0a:fc:48:7b:27:c1:5e:9e:89:de:
         50:ec:ab:28:26:66:ef:db:81:de:91:b5:59:44:ac:05:ef:42:
         b1:bb:9c:0c:06:73:fd:46:1e:b0:11:77:83:2a:3c:43:de:ad:
         e8:d2:b7:70:a2:75:ec:13:60:d4:9e:11:03:76:56:f9:23:8d:
         5d:f4:09:16:40:46:ab:e6:3e:40:71:68:ed:2f:bd:18:9c:b5:
         1a:ac:8a:44:b9:7f:e8:f3:62:a1:e9:c8:31:b5:bd:ad:47:7b:
         ae:81:a6:14:ba:57:e9:0c:a6:5e:a0:d8:6a:86:a8:a3:8c:fa:
         22:71:f1:c5:2a:ac:ce:71:ce:10:db:7e:f8:1a:98:4b:a7:a7:
         ca:1a:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org