Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/MhHDZgTua2R8frpBg8iqPlNeRHc.roa
File:                     MhHDZgTua2R8frpBg8iqPlNeRHc.roa (raw, json)
Hash identifier:          bxN5aBesZaSrdmv66vXLqYq690m8GPFaUMaIGaknYFg=
Subject key identifier:   32:11:C3:66:04:EE:6B:64:7C:7E:BA:41:83:C8:AA:3E:53:5E:44:77
Certificate issuer:       /CN=e56485ea0013f03ac14a0b835992e0ab3ace36ef
Certificate serial:       01920687
Authority key identifier: E5:64:85:EA:00:13:F0:3A:C1:4A:0B:83:59:92:E0:AB:3A:CE:36:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WSF6gAT8DrBSguDWZLgqzrONu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/MhHDZgTua2R8frpBg8iqPlNeRHc.roa
Signing time:             Wed 11 May 2022 21:54:02 +0000
ROA not before:           Wed 11 May 2022 21:54:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        146.19.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26347143 (0x1920687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56485ea0013f03ac14a0b835992e0ab3ace36ef
        Validity
            Not Before: May 11 21:54:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3211c36604ee6b647c7eba4183c8aa3e535e4477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:db:42:de:f2:26:81:0e:23:72:e1:2d:22:
                    ec:c9:0e:39:b9:b7:5b:24:07:1d:18:11:cf:7e:7e:
                    cb:56:40:db:1d:71:39:8c:67:e6:83:d5:82:a9:6f:
                    43:4d:08:33:7e:bb:8e:3b:05:0c:86:e9:46:73:af:
                    22:01:76:ff:d8:3b:9d:6b:23:2b:02:fb:54:bc:cf:
                    ee:16:0b:68:6f:0b:be:eb:11:cb:2d:33:e6:c1:e0:
                    87:3d:0b:ed:d2:11:99:29:9f:ec:ca:61:e8:be:eb:
                    de:02:b4:77:c3:36:50:d5:84:4d:74:7b:e9:a8:01:
                    71:b1:08:e8:27:8a:1f:2b:c9:61:68:a1:75:bc:ab:
                    34:02:ef:89:ee:31:e4:6e:16:30:4b:4a:c5:0d:73:
                    ef:33:19:4d:fd:a4:9b:97:62:a3:5e:71:2f:44:fd:
                    ca:58:02:02:30:da:e5:ea:79:37:8b:8d:f3:38:81:
                    c5:6e:dc:5d:38:55:59:8b:a8:ff:79:18:68:54:8b:
                    38:b8:1f:58:1e:17:f5:9e:78:23:bf:63:01:d9:8f:
                    71:86:80:17:e7:0d:0c:99:68:91:dd:25:7e:84:3a:
                    97:c9:b1:ce:ad:9d:ff:43:88:e9:99:bb:5f:12:78:
                    d0:9d:06:76:ca:7d:6b:26:b3:92:82:28:87:81:61:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:11:C3:66:04:EE:6B:64:7C:7E:BA:41:83:C8:AA:3E:53:5E:44:77
            X509v3 Authority Key Identifier:
                keyid:E5:64:85:EA:00:13:F0:3A:C1:4A:0B:83:59:92:E0:AB:3A:CE:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WSF6gAT8DrBSguDWZLgqzrONu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/MhHDZgTua2R8frpBg8iqPlNeRHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/5WSF6gAT8DrBSguDWZLgqzrONu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:76:85:5e:e9:96:b9:fc:f1:06:a6:3e:6a:1b:b4:50:2f:
         af:d2:8f:e3:76:ca:83:1c:c4:34:fe:dc:2b:b6:60:c5:73:aa:
         91:85:3c:f6:31:2d:10:16:d0:f2:ad:3a:89:0f:db:6a:37:26:
         1c:db:20:07:c2:37:78:75:aa:83:b7:76:47:3e:01:06:b0:19:
         e6:95:23:63:71:0f:6b:32:b3:72:5e:e5:a1:e9:18:93:b9:88:
         3d:5e:45:17:f8:be:4d:4a:8c:c5:1a:52:d1:57:aa:83:11:52:
         40:1f:3e:65:42:0e:7d:c8:1d:0d:c1:35:e4:12:26:88:47:be:
         f7:ca:a1:9e:07:6f:0c:8a:87:c6:b3:63:e2:e2:99:1f:ae:82:
         c3:67:28:a5:f0:7b:38:61:02:d5:7a:b2:cc:b1:7d:1c:61:93:
         e3:43:60:49:c5:49:6d:26:e3:2c:35:35:ff:b8:c8:08:a3:c3:
         97:66:93:7f:e9:81:b8:93:58:1f:95:19:6d:00:24:40:c5:34:
         ee:6b:cc:ca:55:3b:97:62:a5:49:79:b3:6e:9f:e7:3d:f1:06:
         68:f6:84:1d:cf:20:d2:18:25:5e:cb:c8:a2:10:77:ae:64:be:
         06:8f:9e:29:51:14:0a:28:5c:60:16:e6:dc:26:32:a9:80:dc:
         7b:1b:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org