Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/4eS3I4Ovpfpayy4bdOQvk-sQ27s.roa
File:                     4eS3I4Ovpfpayy4bdOQvk-sQ27s.roa (raw, json)
Hash identifier:          tTKyUSYeBH/eSXmxR63f53tJuzEmP0fWsgfJp/NMLjE=
Subject key identifier:   E1:E4:B7:23:83:AF:A5:FA:5A:CB:2E:1B:74:E4:2F:93:EB:10:DB:BB
Certificate issuer:       /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial:       6ABF93
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/4eS3I4Ovpfpayy4bdOQvk-sQ27s.roa
Signing time:             Fri 15 Apr 2022 16:18:44 +0000
ROA not before:           Fri 15 Apr 2022 16:18:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        212.46.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6995859 (0x6abf93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
        Validity
            Not Before: Apr 15 16:18:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1e4b72383afa5fa5acb2e1b74e42f93eb10dbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:35:56:11:d8:6a:80:6a:b0:1f:f2:35:da:
                    a1:25:e9:09:d0:cc:e6:59:bf:eb:be:79:fe:64:a2:
                    98:cb:cc:88:dd:07:2b:6e:cd:af:76:23:15:ed:a0:
                    4f:a0:9d:e1:43:3c:e0:dd:21:5b:b4:a2:06:76:31:
                    84:a0:66:ef:a5:60:14:47:6a:61:9d:d1:5c:bd:09:
                    4d:82:f8:99:e5:37:7b:9c:20:e3:d4:bf:f8:7d:fe:
                    5e:a3:bb:9d:13:46:df:41:5f:63:3c:3c:f5:85:45:
                    3e:a8:2e:bb:7a:c0:65:40:d1:fe:7d:48:97:cc:65:
                    10:bd:c7:ef:d2:82:52:22:1b:a8:22:2f:3e:e9:21:
                    0d:19:83:d5:37:0a:31:41:2b:28:1f:ca:ca:b3:8e:
                    ec:64:25:7d:81:a8:95:e8:29:ac:c8:27:45:c5:bb:
                    dc:c7:2d:fe:22:72:5f:9e:b9:7c:e4:99:be:fc:b4:
                    ae:6b:2a:0f:1f:a4:41:0a:96:c2:82:56:5b:4d:c9:
                    98:6a:18:5b:a6:1d:5b:c7:00:9d:7a:81:43:5b:31:
                    e8:15:71:fc:4f:36:44:d0:ab:70:7c:95:df:b7:8c:
                    73:c1:0f:35:4d:24:e2:93:0e:dc:15:7b:ad:84:2a:
                    37:bd:9a:94:1a:5a:3e:ed:41:34:58:41:28:af:68:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:B7:23:83:AF:A5:FA:5A:CB:2E:1B:74:E4:2F:93:EB:10:DB:BB
            X509v3 Authority Key Identifier:
                keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/4eS3I4Ovpfpayy4bdOQvk-sQ27s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:c1:dd:50:55:18:06:98:df:45:8c:68:8b:9d:bb:91:7e:
         d3:1a:60:5a:97:68:ef:16:63:96:49:50:06:22:11:10:0a:b2:
         55:b5:e9:b8:b9:f8:79:f0:44:e8:c9:e4:4c:5c:66:6e:10:ac:
         37:a4:52:0c:1b:2d:5e:c7:36:d1:e6:b9:e1:01:e4:0a:44:26:
         bd:f7:66:b1:10:fd:a2:3d:49:7e:8d:98:98:a4:fd:c9:d0:e6:
         51:39:99:0e:2c:df:30:06:26:15:6c:4a:40:5e:d5:16:f9:a8:
         4d:17:7a:e0:76:e2:95:41:ec:9e:18:9a:ee:02:79:c1:fa:44:
         85:fc:b5:ea:3e:69:ab:ce:2d:0a:99:d9:87:c4:b5:05:f3:e5:
         bc:c7:06:7d:62:ab:e8:85:78:7d:e5:5d:05:fe:d5:18:35:5e:
         89:15:05:fe:0f:51:4f:be:67:ef:e5:c8:09:be:f5:9d:15:5b:
         fa:23:b8:d4:57:90:47:11:ce:a8:09:80:ce:05:70:d4:0b:fa:
         e3:ef:4e:e9:c3:7e:10:e0:46:b1:52:7c:d3:53:9c:ad:c7:bd:
         21:6d:88:26:06:4e:5c:3e:e8:f0:dd:3a:7a:86:2d:14:43:db:
         96:5e:6d:4a:1e:be:0a:a0:da:e4:91:e4:6d:b0:a7:79:ac:24:
         a4:c5:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org