Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/UHaMHBr4--lHZ4oArBI--ykFdO4.roa
File:                     UHaMHBr4--lHZ4oArBI--ykFdO4.roa (raw, json)
Hash identifier:          1R9oWFZ/rLDXxXjicM5fMgJyfpJ55+yIUaf0iEi1PD4=
Subject key identifier:   50:76:8C:1C:1A:F8:FB:E9:47:67:8A:00:AC:12:3E:FB:29:05:74:EE
Certificate issuer:       /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial:       61F999
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/UHaMHBr4--lHZ4oArBI--ykFdO4.roa
Signing time:             Mon 11 Apr 2022 08:39:35 +0000
ROA not before:           Mon 11 Apr 2022 08:39:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        212.46.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6420889 (0x61f999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
        Validity
            Not Before: Apr 11 08:39:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=50768c1c1af8fbe947678a00ac123efb290574ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:db:a3:2e:fb:94:ed:13:4e:f1:09:b3:38:
                    24:47:dc:ba:5d:29:33:e7:66:be:a0:ec:88:b6:18:
                    60:e3:fd:5f:a7:3f:f4:db:38:8a:e0:ce:43:13:f9:
                    28:c9:dd:c1:2c:e7:8b:61:88:be:1d:13:f2:81:9d:
                    e5:d9:10:13:c3:a6:45:86:45:87:76:18:df:48:39:
                    10:ac:79:f8:a5:8b:82:de:19:7c:7c:3f:62:8e:62:
                    9f:88:b4:c5:0d:a9:c4:55:1c:ce:34:6b:16:80:0d:
                    93:a8:5b:6e:bc:a4:30:7e:c0:b8:35:f5:de:5e:e6:
                    f6:a0:60:78:58:6c:25:a6:31:17:d7:38:10:44:f9:
                    96:4e:3e:74:2d:ed:58:90:10:31:49:4f:fd:63:fb:
                    45:d9:13:20:a8:4e:a0:c3:c5:2b:99:71:cf:29:14:
                    65:c9:fe:26:9c:c3:09:41:1f:d7:8a:36:4b:80:9d:
                    50:68:27:f8:39:60:ff:ea:60:f9:c8:4b:6a:bd:78:
                    ee:c9:3c:31:ba:15:6f:5d:ac:97:75:25:3c:1f:db:
                    55:9a:cc:97:8d:46:5a:d0:2e:df:5f:94:40:76:12:
                    df:90:6f:76:ca:cf:3c:a5:36:c7:52:3f:bd:4a:a4:
                    f2:9c:38:df:2e:7a:0c:e4:90:eb:56:21:7e:35:30:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:8C:1C:1A:F8:FB:E9:47:67:8A:00:AC:12:3E:FB:29:05:74:EE
            X509v3 Authority Key Identifier:
                keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/UHaMHBr4--lHZ4oArBI--ykFdO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:fa:c0:38:c2:aa:87:38:5d:7a:0c:24:cb:d9:80:2e:11:
         83:9e:d9:da:4c:b2:86:fa:b9:d6:04:96:cc:bb:df:65:b7:9f:
         4e:f9:a8:f6:77:ee:09:44:02:52:9c:a3:6d:1b:b5:81:33:db:
         48:d2:69:9a:af:5c:ed:b8:41:de:4a:af:74:fc:4d:ee:5b:3c:
         74:b5:eb:14:8e:eb:7d:10:4c:35:4d:f5:1a:56:d8:78:54:8e:
         12:27:d1:95:4b:56:d4:ab:ff:17:a4:40:ab:07:93:7f:93:31:
         6b:6f:2c:bb:58:99:95:69:9b:43:82:0a:82:70:fd:4a:3b:1b:
         08:39:b0:78:36:37:41:3a:45:af:b4:f7:31:d9:8d:75:95:65:
         8c:dc:31:e2:ab:0f:46:39:3e:1d:2a:ba:78:6d:cc:a0:f6:19:
         de:8d:85:6e:4a:bf:72:ce:27:b7:e1:df:71:78:c4:27:6f:c3:
         7f:e0:ea:a7:5d:e3:88:af:a5:34:9b:32:de:16:3a:c5:8e:7e:
         0b:ec:04:70:3f:f8:b3:f9:a5:12:9e:d0:be:81:b7:56:ba:2a:
         9a:2a:b0:f6:40:d3:36:36:9c:20:33:79:9c:4e:15:ad:e0:6b:
         ee:47:00:8f:5e:1b:6e:e0:d4:2e:0d:1b:34:0a:aa:a0:9c:59:
         ba:1f:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org