Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/LZQ3fsWS9eJKdjDVbMFbg6qfwuU.roa
File:                     LZQ3fsWS9eJKdjDVbMFbg6qfwuU.roa (raw, json)
Hash identifier:          eO5VwMzTFlHiGa/3hc+VnNS01mhIVB5K7OkUtg3RNBw=
Subject key identifier:   2D:94:37:7E:C5:92:F5:E2:4A:76:30:D5:6C:C1:5B:83:AA:9F:C2:E5
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       0A175D2C
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/LZQ3fsWS9eJKdjDVbMFbg6qfwuU.roa
Signing time:             Tue 15 Mar 2022 09:22:06 +0000
ROA not before:           Tue 15 Mar 2022 09:22:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.136.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169303340 (0xa175d2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Mar 15 09:22:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d94377ec592f5e24a7630d56cc15b83aa9fc2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:4b:bf:92:f9:47:b2:d2:05:fb:32:55:4b:
                    e4:0c:c6:18:72:1c:a3:eb:97:dd:ac:2d:e6:7e:29:
                    e9:91:6a:c7:cc:d5:ea:a7:9a:bf:8a:fc:73:67:05:
                    13:95:74:7a:94:22:a0:1f:d0:b8:6b:ff:cc:e9:50:
                    bf:b8:2e:9c:f7:09:51:59:db:76:39:d6:e9:77:b1:
                    83:2e:eb:5e:c1:7c:f2:cc:2e:1f:d5:ec:ee:c1:57:
                    f9:80:e8:52:d5:b9:6a:64:59:34:a3:89:07:71:67:
                    f2:b7:41:9e:5b:40:90:83:2a:9d:9d:51:b6:59:b4:
                    39:92:63:2e:b9:82:87:da:e8:6f:e0:bc:8a:f0:65:
                    77:fb:e6:99:b0:26:20:88:12:25:56:d4:b4:68:58:
                    59:ff:13:05:8a:8d:f9:7c:b4:b2:f5:70:4f:d3:b4:
                    bb:97:54:55:22:0a:a9:07:be:04:b8:b4:71:a6:b8:
                    ef:55:72:55:da:4f:b3:9a:f3:52:ac:46:bd:87:2f:
                    75:7d:72:89:a3:3e:14:1e:e8:1e:80:00:31:df:cd:
                    a6:4e:0d:04:71:62:74:2d:8c:5c:55:b7:58:7f:dc:
                    02:8e:cb:e8:7a:52:3f:70:49:01:aa:c4:49:5a:f8:
                    c7:72:b9:70:b2:3a:28:3f:03:06:48:a5:11:65:27:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:94:37:7E:C5:92:F5:E2:4A:76:30:D5:6C:C1:5B:83:AA:9F:C2:E5
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/LZQ3fsWS9eJKdjDVbMFbg6qfwuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:60:7c:73:57:6e:a2:a4:75:38:86:2c:60:80:97:3c:c3:55:
         61:93:20:ac:ab:0b:51:32:a4:1f:7d:44:37:f0:3f:70:fc:47:
         e7:df:99:df:ca:8a:e4:f1:e5:7f:51:b2:64:fe:8f:77:e8:8e:
         b0:e3:f0:c5:f5:18:df:2e:45:bf:ee:11:21:f9:29:42:c3:cf:
         29:87:5a:02:6b:0c:eb:5b:73:34:90:d7:93:0e:6e:b3:2c:94:
         dd:ef:48:fc:72:72:4d:0a:8c:3e:db:9a:a4:e6:ad:2d:38:fd:
         b3:cb:c6:a1:70:0c:f6:1f:6c:ed:41:aa:61:90:63:ac:02:8b:
         35:53:6b:58:65:53:34:c6:6f:26:57:fb:63:8e:59:16:9f:8e:
         5e:1a:19:95:dc:9e:cc:13:8b:ba:fe:ee:e4:13:a8:22:1d:48:
         96:a3:03:04:5c:9c:d0:b5:f0:99:84:6f:fc:f1:40:72:e7:a1:
         84:c4:9d:68:8f:b7:47:9f:f9:4b:72:8e:35:cb:43:ae:d5:bc:
         6c:b1:f8:09:cb:c1:ad:20:81:4f:68:ca:35:88:0c:e1:27:2f:
         32:ad:d0:e5:d6:2c:68:03:d3:b1:9a:e2:da:a2:90:ed:fb:47:
         d5:e4:3c:33:d6:fa:0c:91:3c:b8:6a:4a:fe:1e:2a:65:d5:4b:
         9a:b7:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org