Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/lUuMq_RyXEzUHLBDQw5g8gBHE4s.roa
File:                     lUuMq_RyXEzUHLBDQw5g8gBHE4s.roa (raw, json)
Hash identifier:          sM+H01abhgEMhoc2i/JWgkkv5jv0vzkRznQ4p81HLeU=
Subject key identifier:   95:4B:8C:AB:F4:72:5C:4C:D4:1C:B0:43:43:0E:60:F2:00:47:13:8B
Certificate issuer:       /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial:       01897A0EA3E4A0ADA212CB5854942B0E2A7D
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/lUuMq_RyXEzUHLBDQw5g8gBHE4s.roa
Signing time:             Fri 21 Jul 2023 20:05:27 +0000
ROA not before:           Fri 21 Jul 2023 20:05:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8100
IP address blocks:        212.46.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:7a:0e:a3:e4:a0:ad:a2:12:cb:58:54:94:2b:0e:2a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
        Validity
            Not Before: Jul 21 20:05:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=954b8cabf4725c4cd41cb043430e60f20047138b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:a4:2c:9b:fb:4d:3c:be:1b:52:59:8f:65:
                    ed:2f:c3:0f:fe:c1:e6:5c:d8:b0:ce:de:8e:a5:e6:
                    02:81:45:3e:fd:7f:68:3d:6e:15:9b:81:29:da:95:
                    12:28:0f:e3:d2:94:c6:f0:18:cb:c9:af:2f:42:ec:
                    46:b0:df:af:d2:97:94:9e:39:d1:49:10:39:c6:ed:
                    47:9a:df:c5:f4:38:2c:50:c4:aa:57:4a:50:e1:f4:
                    d0:8e:19:06:b5:d9:8c:02:4b:6e:c6:e1:c0:8a:83:
                    69:1f:53:1a:02:30:26:6d:c3:50:88:e1:d5:15:9e:
                    73:67:d3:32:92:39:c3:9b:81:c8:16:bb:a8:43:b4:
                    36:95:d0:0e:51:91:cb:8a:a3:83:fe:f9:f4:7b:60:
                    da:7f:8d:8d:6f:23:ac:89:67:56:2e:ac:41:97:18:
                    d1:f8:c9:3f:ab:83:86:16:14:94:b9:72:84:99:ba:
                    10:e0:30:22:cd:dc:72:16:6f:c2:cb:e1:fb:13:1e:
                    fc:a4:0f:0e:d8:c0:31:dd:d1:48:2d:c2:c0:31:54:
                    17:53:6a:af:9e:be:90:f8:44:ea:83:a0:7c:86:0f:
                    0a:7d:63:6a:7b:ff:86:f9:6d:57:f5:00:2f:15:a1:
                    42:0e:cc:70:e6:2b:23:4b:28:c6:42:d7:67:42:ab:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4B:8C:AB:F4:72:5C:4C:D4:1C:B0:43:43:0E:60:F2:00:47:13:8B
            X509v3 Authority Key Identifier:
                keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/lUuMq_RyXEzUHLBDQw5g8gBHE4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:c3:18:19:02:79:b7:e7:23:20:68:76:fe:67:2f:78:af:a3:
         4f:32:58:9f:70:f5:41:d6:aa:dc:1c:4b:b6:9c:04:29:71:dd:
         7f:da:8d:94:73:d6:c9:92:ea:fb:1b:94:5e:e5:1e:97:04:c3:
         14:5d:61:d9:57:91:34:b4:e0:0b:1c:46:f4:2b:f5:f6:cc:d1:
         20:5f:d4:36:28:a0:15:33:cc:39:3a:7c:e7:7e:17:bb:bb:ad:
         66:66:52:fb:2c:3a:83:8f:d4:e1:b0:4a:dd:1d:54:97:29:7b:
         de:78:5f:95:1a:ad:42:ff:d9:11:75:2c:5d:d2:78:d1:37:4a:
         cd:bf:fe:fb:bc:fc:7b:56:d9:55:ff:3c:8d:5a:7b:41:a4:9d:
         75:11:51:2e:cb:60:16:16:0b:da:68:24:2c:c0:ad:bb:c9:26:
         b2:27:95:3c:c4:fa:92:7e:15:b8:29:6c:06:01:81:ed:7c:95:
         ef:48:f6:04:bd:da:6d:25:af:35:ac:9e:b0:9d:7d:b7:a8:8e:
         09:bd:fb:42:6e:55:7f:70:bc:98:f5:f2:42:73:34:6f:bb:8b:
         6b:83:bd:52:b1:ed:a3:39:74:f7:a8:d7:9c:46:41:00:92:3c:
         27:31:24:55:b0:42:e6:57:0e:66:d4:7c:bc:24:b7:8a:db:8b:
         14:44:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org