Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/02_X6Dd3QOEiItQ70iqCQNPkmFU.roa
File:                     02_X6Dd3QOEiItQ70iqCQNPkmFU.roa (raw, json)
Hash identifier:          YQaqCwuBoOo0W93T1c5lYoTQXmflzjJK5QKVVEtmaHk=
Subject key identifier:   D3:6F:D7:E8:37:77:40:E1:22:22:D4:3B:D2:2A:82:40:D3:E4:98:55
Certificate issuer:       /CN=abb558699207297438090cbee19f022b6eeab982
Certificate serial:       01856F9DAFFBD2A40A5E72590FE9FF6C0695
Authority key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/02_X6Dd3QOEiItQ70iqCQNPkmFU.roa
Signing time:             Sun 01 Jan 2023 23:14:43 +0000
ROA not before:           Sun 01 Jan 2023 23:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43624
IP address blocks:        146.19.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:af:fb:d2:a4:0a:5e:72:59:0f:e9:ff:6c:06:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb558699207297438090cbee19f022b6eeab982
        Validity
            Not Before: Jan  1 23:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d36fd7e8377740e12222d43bd22a8240d3e49855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:47:2f:38:46:11:8d:d9:18:79:e9:7b:87:
                    87:de:41:3d:01:4d:19:7e:ca:19:31:0a:50:8a:41:
                    a8:8f:08:a1:25:e9:0c:24:45:09:f0:41:e2:5f:93:
                    e0:35:25:53:86:bb:29:51:33:e4:a2:5b:bc:fd:37:
                    69:5c:b1:c8:b7:d0:18:f5:da:27:3e:98:68:da:44:
                    f6:d8:f6:c2:b1:0e:31:00:64:4c:69:b3:8c:f5:be:
                    56:37:ec:11:1d:b1:e2:27:d7:f1:0d:28:0c:69:13:
                    2b:6a:67:62:d6:70:da:bf:af:2e:2d:15:a6:13:43:
                    96:32:4b:80:0f:3f:ea:cf:fd:2e:79:d3:8d:ee:14:
                    0f:b1:fc:18:28:b4:19:77:1e:32:1c:7a:a8:72:d3:
                    5a:ce:d2:8a:42:ca:2d:1c:c5:89:c9:ef:d8:47:a1:
                    ea:b3:b6:97:49:32:a1:49:8b:24:90:c4:8a:55:f1:
                    3b:fe:4a:ca:cc:40:c0:a0:2a:5e:36:b7:f4:4f:7b:
                    18:36:40:bd:4f:a3:75:9f:2e:af:f7:a1:d2:d1:5f:
                    21:b2:00:27:d4:4d:43:8f:6e:64:fe:e7:57:40:54:
                    89:b9:95:56:28:e1:89:f2:99:22:ee:28:4c:48:57:
                    8d:5d:75:f1:be:d7:26:d2:18:ce:2e:01:8f:00:88:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:D7:E8:37:77:40:E1:22:22:D4:3B:D2:2A:82:40:D3:E4:98:55
            X509v3 Authority Key Identifier:
                keyid:AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/02_X6Dd3QOEiItQ70iqCQNPkmFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:24:97:11:38:52:58:17:13:5a:ec:be:da:70:c5:27:ee:
         85:99:dc:35:3b:85:96:73:a0:29:1c:da:10:f7:0d:49:18:40:
         27:83:fe:8f:6d:e8:6b:56:99:0b:cd:1f:0f:ef:f9:68:5d:29:
         a0:57:00:35:fd:06:f9:fb:ec:88:b2:ef:52:e0:7d:bc:35:c0:
         18:27:59:e6:07:a5:a7:23:14:23:b7:0a:8f:9e:91:d0:48:b6:
         38:3e:0e:08:d3:0e:8a:1c:29:75:a5:74:92:d5:cc:8c:f5:65:
         99:cc:a4:79:3f:8b:b3:9b:2d:49:46:84:0e:08:b5:e4:03:53:
         2f:8a:3a:80:30:d8:fb:8f:08:eb:9c:73:ce:49:3a:3e:a6:0c:
         99:cf:09:fc:7d:0e:3d:1d:7a:2e:ae:28:04:94:f8:64:bd:68:
         6a:89:27:ff:f8:34:73:2a:cd:ef:e6:44:25:8e:dc:7a:de:ed:
         0d:86:a6:69:35:2f:78:a5:94:2b:37:b4:cb:18:73:2e:2a:61:
         c7:3a:18:68:86:e0:ec:53:53:ce:34:79:07:20:f7:a9:00:bd:
         e4:f5:9c:0b:6b:65:dc:fc:d1:9e:9c:60:a4:32:04:e3:59:e7:
         ee:d1:4b:59:8b:43:5a:d9:e7:c2:03:64:54:ca:e6:7c:bc:3b:
         dd:3b:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org