Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/rkyud-gGrv7cwAtWrrL4RxcIbJM.roa
File:                     rkyud-gGrv7cwAtWrrL4RxcIbJM.roa (raw, json)
Hash identifier:          dfLzSmwmPPZqICyv/rxJ2QSD7/hqFal89Qu+otcerVo=
Subject key identifier:   AE:4C:AE:77:E8:06:AE:FE:DC:C0:0B:56:AE:B2:F8:47:17:08:6C:93
Certificate issuer:       /CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Certificate serial:       018308CAA7D9170B59C0D0246AA6255499FD
Authority key identifier: CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/rkyud-gGrv7cwAtWrrL4RxcIbJM.roa
Signing time:             Sun 04 Sep 2022 13:57:22 +0000
ROA not before:           Sun 04 Sep 2022 13:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210562
IP address blocks:        2001:67c:8cc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:08:ca:a7:d9:17:0b:59:c0:d0:24:6a:a6:25:54:99:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
        Validity
            Not Before: Sep  4 13:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae4cae77e806aefedcc00b56aeb2f84717086c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:72:5a:4d:a1:e8:9c:24:da:50:5d:59:33:
                    60:d9:96:12:74:b9:b4:82:f9:15:87:60:e4:f4:49:
                    e7:52:cd:8e:d0:ed:db:04:22:87:d2:31:bd:a0:92:
                    f1:3c:62:90:60:70:96:0c:4f:f3:a4:f3:e8:fa:76:
                    1b:92:51:b8:be:3f:f5:d2:d8:7c:61:94:85:26:e3:
                    68:a1:8a:55:d5:e1:2d:a7:e8:00:6f:ee:be:d8:26:
                    02:f7:bd:a9:e4:86:9c:dd:40:f7:6b:f8:16:d4:6b:
                    fd:e9:b5:0b:51:68:77:5b:b8:11:8e:5b:b5:ad:d2:
                    20:6a:09:3a:2a:13:52:71:54:0c:04:19:cb:68:46:
                    1a:21:5f:d5:41:3e:5f:c9:d1:32:5a:87:08:ee:cf:
                    b3:85:55:e2:fb:8f:45:b1:45:63:97:09:a4:9c:4b:
                    12:21:61:89:66:fd:10:92:56:49:3d:0d:a4:a0:bc:
                    40:19:54:d6:f8:a0:e3:97:6f:27:68:b0:0f:e8:20:
                    30:0e:97:8d:01:3a:36:f1:9b:1c:9f:83:ba:02:49:
                    eb:4d:50:87:d8:47:2d:74:70:78:e5:70:b0:db:c2:
                    2d:c1:ba:6b:ab:ad:16:2f:b9:4b:17:2c:af:7c:f3:
                    f5:bb:55:4c:f3:94:6f:ee:e3:84:cf:01:11:7d:f0:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4C:AE:77:E8:06:AE:FE:DC:C0:0B:56:AE:B2:F8:47:17:08:6C:93
            X509v3 Authority Key Identifier:
                keyid:CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/rkyud-gGrv7cwAtWrrL4RxcIbJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:8cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:42:9a:22:9f:1a:04:e0:b6:77:6a:1d:cf:19:a0:25:f7:
         c6:69:fc:eb:01:87:48:04:17:a6:ff:4e:c4:e8:97:2e:7d:2d:
         78:bc:a0:da:00:45:6d:56:97:ac:24:ed:0a:17:71:8d:32:53:
         3f:27:66:cc:81:51:eb:a8:bb:64:b0:ad:f2:ed:ac:19:c7:f8:
         b0:dc:30:67:5b:22:bb:9a:6c:37:ff:0a:b7:fe:e0:05:a7:fa:
         ed:1b:cb:1a:6a:80:ab:eb:5b:29:9f:d8:c1:de:7d:70:7f:44:
         d5:ac:c9:fa:8f:15:b4:0c:93:b8:85:a0:1b:23:21:96:0a:86:
         54:30:28:87:9b:63:9e:40:d9:97:42:e3:9b:d4:be:94:1e:b0:
         e2:a2:c1:fc:b9:bb:b0:10:18:7a:71:e3:35:99:7e:7b:ef:b1:
         e9:01:83:7b:bf:83:48:0d:01:16:a5:42:89:2f:65:92:75:93:
         ae:d2:ef:6d:9b:ef:ca:c7:07:05:d1:7f:20:aa:5e:a5:ac:3c:
         7c:97:a9:d1:c7:a4:a3:fc:4c:a8:07:74:e0:3c:c0:b1:11:db:
         bb:41:f3:ca:6e:34:ce:85:8b:f6:d6:76:79:7d:b5:19:0f:a3:
         18:a6:4f:a9:c8:3d:b0:7d:c4:c4:d5:18:fe:e0:06:51:f9:ae:
         d5:90:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org