Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/6K1gOcgmccs80K1zWF4uCpFy1rA.roa
File:                     6K1gOcgmccs80K1zWF4uCpFy1rA.roa (raw, json)
Hash identifier:          t4dG+0m0Cm7OztNWM30qy+u1TPJy+WanIz0M2avfbvc=
Subject key identifier:   E8:AD:60:39:C8:26:71:CB:3C:D0:AD:73:58:5E:2E:0A:91:72:D6:B0
Certificate issuer:       /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial:       0185710305A0F082A2FCE52E7833C0EF855D
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/6K1gOcgmccs80K1zWF4uCpFy1rA.roa
Signing time:             Mon 02 Jan 2023 05:45:01 +0000
ROA not before:           Mon 02 Jan 2023 05:45:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3561
IP address blocks:        94.103.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:03:05:a0:f0:82:a2:fc:e5:2e:78:33:c0:ef:85:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
        Validity
            Not Before: Jan  2 05:45:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8ad6039c82671cb3cd0ad73585e2e0a9172d6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:c3:43:2f:d0:42:f6:65:8c:40:f9:53:5e:
                    01:04:35:94:3c:d8:53:0e:65:36:41:78:6e:87:1f:
                    c4:f6:f9:b5:7a:ed:ff:1d:0e:10:c5:6a:9e:d5:ca:
                    8a:6f:24:b4:84:8c:fc:da:ad:6f:9c:0d:87:1b:d6:
                    60:86:eb:67:d7:02:82:26:c4:73:dc:79:82:4e:43:
                    5f:34:a3:5e:c5:06:06:fd:7f:5f:5e:c0:cc:8a:65:
                    c9:74:dd:c7:8f:1e:ea:f8:6c:b5:a3:e7:44:31:56:
                    6e:b4:66:96:b5:28:df:6d:91:e1:d4:5a:c3:11:e2:
                    ba:2a:92:ef:4a:8b:2a:2a:ba:5f:47:77:30:4a:e6:
                    a7:1e:7f:29:36:53:ac:39:bd:de:00:d2:43:6e:47:
                    1b:8d:1d:0e:23:c2:33:89:4f:0b:3f:54:7b:bd:ae:
                    29:e2:2e:26:0a:fa:bd:aa:e8:c9:f3:b5:12:1f:a7:
                    42:c1:21:d3:f4:81:0b:45:25:c5:0b:57:69:e6:8b:
                    f1:3b:b3:6b:87:ff:28:1e:f9:ef:bb:5c:fa:b9:24:
                    35:7d:4c:e4:64:67:d4:0c:bd:3a:d0:49:75:2a:22:
                    fe:c0:44:0b:d1:27:b0:26:9e:7d:46:d0:8b:cf:7e:
                    50:e7:d3:c9:eb:1d:9b:88:85:86:3e:1a:79:ee:4e:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:60:39:C8:26:71:CB:3C:D0:AD:73:58:5E:2E:0A:91:72:D6:B0
            X509v3 Authority Key Identifier:
                keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/6K1gOcgmccs80K1zWF4uCpFy1rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:cb:f3:0d:15:f4:4a:31:86:66:4b:6a:54:8f:d3:3d:24:
         b4:13:f6:ad:01:0f:16:bf:bc:81:7d:58:7a:86:f7:f3:1c:cd:
         60:27:96:ab:75:b3:cf:70:96:5e:5c:9e:78:de:8e:01:78:93:
         32:c3:c4:3b:d0:6f:ba:35:f8:a7:fd:70:37:66:ae:44:90:46:
         18:26:eb:36:8f:2a:db:6f:da:2d:c6:0c:a1:1e:e6:70:56:12:
         66:c7:0f:30:6a:04:b5:20:65:d8:07:80:6f:8e:0e:d0:cb:46:
         81:fb:6e:fb:e9:82:04:05:99:24:76:75:20:4e:45:c3:a5:11:
         e9:7c:1f:0f:af:8f:78:56:a9:74:a0:38:dc:1a:9b:8f:6f:dc:
         ec:70:2a:16:bf:e9:d5:b6:12:dc:e7:d0:a7:1b:58:85:2c:f0:
         ab:79:68:b6:07:d2:f3:a2:51:c6:8f:27:75:b1:89:1b:e8:12:
         f2:6a:81:3e:d6:1c:23:4d:4b:ac:b7:36:fd:53:ca:e0:bf:f6:
         16:1b:b2:30:b6:c3:43:54:34:5f:81:65:b6:8c:3e:dd:bf:3a:
         35:a4:70:b7:f5:04:ae:a2:bd:18:c0:dc:c8:d1:fe:3b:1e:40:
         5b:96:76:db:8b:9e:eb:51:65:a9:0c:b5:72:7c:bb:cc:29:8d:
         4d:d6:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:33 2024 by rpki-client on console-fra.rpki-client.org