Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/FTEsL_46oq3Rs_RzC9sRh0uKkk4.roa
File:                     FTEsL_46oq3Rs_RzC9sRh0uKkk4.roa (raw, json)
Hash identifier:          1YEzOt4UPmKCtJm7/FXJYb3h4BmrivPpq0BbV5aDyiU=
Subject key identifier:   15:31:2C:2F:FE:3A:A2:AD:D1:B3:F4:73:0B:DB:11:87:4B:8A:92:4E
Certificate issuer:       /CN=35813179aa01b6d0d1248e8597c6f86cba862e47
Certificate serial:       679D15
Authority key identifier: 35:81:31:79:AA:01:B6:D0:D1:24:8E:85:97:C6:F8:6C:BA:86:2E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NYExeaoBttDRJI6Fl8b4bLqGLkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/FTEsL_46oq3Rs_RzC9sRh0uKkk4.roa
Signing time:             Sat 01 Jan 2022 00:51:21 +0000
ROA not before:           Sat 01 Jan 2022 00:51:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62068
IP address blocks:        146.19.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6790421 (0x679d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35813179aa01b6d0d1248e8597c6f86cba862e47
        Validity
            Not Before: Jan  1 00:51:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15312c2ffe3aa2add1b3f4730bdb11874b8a924e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:ae:5d:1f:b3:20:89:dc:59:d5:6f:5b:49:
                    0e:67:26:c9:6a:41:bb:db:00:a7:10:61:8f:07:cc:
                    05:08:3e:9e:df:59:b5:59:89:a0:25:be:a9:99:41:
                    f7:b9:b4:e8:b0:f3:16:52:d4:9a:32:61:e5:bc:9b:
                    ec:a9:a5:2c:38:4b:b7:2d:cc:f8:31:15:7a:3e:9e:
                    de:0c:9e:a5:ef:9f:43:94:42:77:8f:0a:02:10:94:
                    7c:6d:2c:bb:84:b5:66:5e:40:04:09:5c:93:70:db:
                    71:f7:96:4c:fb:ac:36:5c:bc:90:df:e9:e6:66:6e:
                    d1:57:89:e1:c1:e6:6d:0d:51:5b:b4:c5:16:6a:98:
                    fd:2f:b0:b9:32:fb:95:80:ec:43:12:17:13:7f:82:
                    87:bd:ef:80:a2:24:bb:ee:cf:2c:0b:6b:54:24:65:
                    4b:24:c9:ef:34:b1:36:e9:78:0a:53:a1:1a:48:d9:
                    b3:2b:6c:40:d7:43:c0:68:39:91:59:27:65:27:cd:
                    33:7e:cd:fa:d3:d4:9c:a4:59:86:69:22:b5:a8:8c:
                    c9:0a:4f:0d:8a:23:6f:12:bf:86:60:ad:e4:42:84:
                    df:e1:e7:df:78:99:48:f1:1a:b3:f2:e0:a6:8a:80:
                    45:8a:5b:2f:91:d0:17:43:fb:20:18:ee:72:f8:ef:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:2C:2F:FE:3A:A2:AD:D1:B3:F4:73:0B:DB:11:87:4B:8A:92:4E
            X509v3 Authority Key Identifier:
                keyid:35:81:31:79:AA:01:B6:D0:D1:24:8E:85:97:C6:F8:6C:BA:86:2E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYExeaoBttDRJI6Fl8b4bLqGLkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/FTEsL_46oq3Rs_RzC9sRh0uKkk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/NYExeaoBttDRJI6Fl8b4bLqGLkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:12:56:f3:6f:3e:58:ec:8c:86:db:48:6f:55:46:c9:5d:91:
         ad:ea:87:51:38:32:55:7d:36:98:7b:ee:1c:9f:52:0d:0d:34:
         3c:5e:26:9c:61:9a:de:1d:9e:58:f0:1e:b4:cb:4d:ad:c5:29:
         78:61:8a:a8:e1:6c:f3:3a:86:24:8e:fd:9a:84:97:b5:d1:50:
         8c:fe:f3:e2:b1:79:48:22:c8:2e:51:53:66:6a:3a:80:e5:72:
         a7:24:4b:a4:43:cd:73:d1:02:28:b8:c7:c0:8d:3d:9b:2d:5f:
         ce:af:d6:b8:83:50:2f:3c:4f:4c:c2:e9:4a:63:e2:1f:71:53:
         0b:2b:b2:f3:02:2b:f3:df:fd:ad:9d:7d:7d:56:6d:8b:8a:26:
         c4:cc:11:82:79:6d:e0:ed:7f:04:a4:ca:90:64:dc:32:76:60:
         9d:43:fb:fc:80:a8:f6:95:44:ee:74:ce:d2:b9:89:57:43:61:
         a6:b2:fe:74:8a:11:25:04:d5:9e:0a:41:71:31:8c:81:10:18:
         2a:dd:39:ed:d5:18:c1:e2:17:89:2d:91:21:0f:9c:16:a0:80:
         4c:93:c7:7b:df:d6:e5:51:f2:6a:9c:0e:be:df:4a:f7:a8:60:
         7c:81:40:11:bf:76:86:d4:26:4a:a0:99:3e:83:b8:de:9b:a4:
         78:83:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:15 2024 by rpki-client on console-ams.rpki-client.org