Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/Xa5FIlpel3SGwfs1MBrQmTDjkOo.roa
File:                     Xa5FIlpel3SGwfs1MBrQmTDjkOo.roa (raw, json)
Hash identifier:          WtuKZn2TGHJhWEW1XR6Vn6I1rzNoTGZzstsrKMVmWJg=
Subject key identifier:   5D:AE:45:22:5A:5E:97:74:86:C1:FB:35:30:1A:D0:99:30:E3:90:EA
Certificate issuer:       /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial:       0163D1
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/Xa5FIlpel3SGwfs1MBrQmTDjkOo.roa
Signing time:             Mon 28 Feb 2022 17:57:02 +0000
ROA not before:           Mon 28 Feb 2022 17:57:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        212.46.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91089 (0x163d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
        Validity
            Not Before: Feb 28 17:57:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5dae45225a5e977486c1fb35301ad09930e390ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:2e:c7:f3:18:50:02:28:7a:15:31:7a:ce:
                    79:a7:0f:70:65:1b:93:50:83:ea:13:0a:e8:8b:f3:
                    6a:3a:a4:8c:6d:66:71:6f:a9:ba:21:69:69:d3:6b:
                    e6:a4:11:f8:44:19:ad:b0:38:fc:e4:5f:42:10:59:
                    2e:eb:09:31:3a:52:5c:28:cf:d0:93:85:e0:84:fa:
                    4d:de:7d:ce:61:0f:19:03:c5:e5:55:40:9e:10:3e:
                    58:67:8b:bf:1b:b9:b2:fd:1c:4b:68:9e:21:99:27:
                    3d:42:2d:c6:8c:fc:6f:48:3d:8c:c1:e4:f1:23:3e:
                    8b:5d:62:12:35:ea:90:6e:d7:66:b0:af:28:9f:7d:
                    22:50:e3:df:33:ba:b8:ba:25:40:5d:0b:8b:13:c4:
                    3c:aa:ca:49:10:9a:68:17:55:f2:34:ef:eb:8c:9a:
                    37:5b:05:18:46:0c:db:90:15:eb:de:bb:b5:dc:62:
                    04:83:a9:62:cb:ff:26:ce:ec:40:8b:3d:4e:96:a2:
                    23:4a:72:72:1a:dd:31:46:fc:f1:f2:5a:56:27:60:
                    c9:53:b5:b1:09:d3:a4:5c:37:12:94:2f:06:9d:7b:
                    50:a8:ae:82:88:a6:74:97:30:38:e4:1a:23:60:fa:
                    7f:61:b3:32:8a:75:76:bf:fc:4f:37:89:1e:4e:b3:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AE:45:22:5A:5E:97:74:86:C1:FB:35:30:1A:D0:99:30:E3:90:EA
            X509v3 Authority Key Identifier:
                keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/Xa5FIlpel3SGwfs1MBrQmTDjkOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:ef:79:52:f3:5d:f2:59:5d:98:ff:7d:c3:aa:df:e9:2c:
         d7:75:19:d7:b2:e9:aa:0e:55:d2:34:de:d2:53:cf:d5:31:62:
         a6:bf:f8:79:d5:b1:23:d8:8e:b9:48:c1:bf:3d:cf:e5:86:f2:
         62:97:15:4a:33:69:5c:1a:14:cd:62:b0:80:9a:05:99:fa:8b:
         9b:fb:e5:75:bf:66:5f:82:1b:3c:eb:ca:b3:df:73:40:ac:75:
         35:e5:67:18:1c:54:87:9f:f8:f3:ef:6d:16:1b:bc:45:99:f5:
         d6:9b:18:00:d8:66:62:0f:72:76:6c:83:69:db:68:6f:cf:74:
         e6:83:bd:29:54:24:e1:33:2f:53:49:22:32:bd:02:26:5b:a9:
         55:3e:fd:8f:1f:ea:eb:06:49:f2:d9:df:92:54:1f:e3:5e:c5:
         7c:ff:86:4c:f2:7f:4d:dc:c8:01:22:b2:7b:f2:e8:c0:62:ce:
         de:64:66:66:4a:e7:e5:68:95:c4:40:52:fc:31:3f:fe:64:e3:
         9d:83:63:a0:50:98:d0:75:31:f0:5a:c2:7b:51:c4:53:f6:45:
         35:13:92:92:c6:b2:53:0a:06:2f:59:6a:5e:3a:d7:26:c3:8b:
         f9:0f:3b:d8:e3:38:d5:d4:99:c6:6f:e4:7a:7c:0e:e5:a2:d2:
         52:30:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org