Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/rV6ZbaG5tfNLbEOXFwnUd9li8QU.roa
File:                     rV6ZbaG5tfNLbEOXFwnUd9li8QU.roa (raw, json)
Hash identifier:          TK+EXr++4YuXPjK6mjNh1VNo0n6uuWoo6GrGQvgX9i8=
Subject key identifier:   AD:5E:99:6D:A1:B9:B5:F3:4B:6C:43:97:17:09:D4:77:D9:62:F1:05
Certificate issuer:       /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial:       02D616D6
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/rV6ZbaG5tfNLbEOXFwnUd9li8QU.roa
Signing time:             Tue 18 Jan 2022 13:57:06 +0000
ROA not before:           Tue 18 Jan 2022 13:57:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        194.49.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47584982 (0x2d616d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
        Validity
            Not Before: Jan 18 13:57:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad5e996da1b9b5f34b6c43971709d477d962f105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:6b:7e:a2:f2:c6:8c:b6:b9:de:83:27:05:
                    40:61:7f:25:9a:0a:67:13:48:74:52:3a:49:a6:7d:
                    d7:a6:22:53:26:7c:e1:ea:f7:31:03:bb:fa:e8:15:
                    cd:c3:07:e3:af:e6:a8:a9:70:5e:37:c2:0e:e1:fd:
                    e4:93:06:c0:b7:1d:b6:68:2c:28:ac:9a:11:5a:d2:
                    31:ad:27:26:1b:31:55:cb:d9:8a:18:0b:5b:65:ca:
                    50:a8:25:db:51:92:8b:12:98:26:8f:de:9e:53:1d:
                    53:31:35:fd:05:06:c2:c0:9e:4e:50:fe:06:90:39:
                    b2:1f:dc:6b:16:1a:1d:5d:7f:9b:32:64:69:e3:57:
                    81:8f:89:11:53:f6:50:43:d7:a2:9b:10:25:42:d7:
                    4d:95:d1:5b:af:1f:c2:f8:6a:01:00:ec:29:fb:30:
                    64:ae:ec:4e:a2:67:47:b2:3f:cd:7a:cf:0a:c1:da:
                    33:df:49:56:2e:1a:ae:be:a2:30:8a:7b:ce:1d:84:
                    6b:24:0e:a9:27:24:7f:9b:f2:4c:4a:e6:f5:94:03:
                    bd:0a:01:1e:60:fb:15:00:d0:d6:d3:02:98:ac:c3:
                    68:f2:cf:d5:98:e2:5c:7c:de:1c:29:3f:e8:24:c2:
                    02:dc:53:13:05:58:3d:ea:1c:43:f7:8b:40:f8:d8:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:99:6D:A1:B9:B5:F3:4B:6C:43:97:17:09:D4:77:D9:62:F1:05
            X509v3 Authority Key Identifier:
                keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/rV6ZbaG5tfNLbEOXFwnUd9li8QU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:b4:c3:04:94:9b:4f:5c:64:3f:de:aa:1b:a2:e4:41:47:
         fe:91:92:5e:9c:28:df:5e:43:89:95:66:c3:6b:f9:e7:8b:22:
         1d:25:77:a3:1b:1a:91:e1:43:4b:9b:3e:25:29:e7:f8:6d:cd:
         b3:9b:00:35:1e:94:ff:03:d3:9f:e1:b8:92:e8:86:34:95:72:
         21:cf:2e:63:e2:79:14:70:2e:30:e4:f3:89:b1:be:65:be:b3:
         c9:70:51:f2:a7:a3:40:41:27:72:de:d7:ea:0f:e6:94:08:25:
         4f:8e:ee:c1:dd:eb:c3:2e:ca:82:88:be:c2:bd:2b:50:df:ec:
         e7:49:ac:fd:f4:8b:5d:45:9c:d2:4d:40:fb:59:c1:63:74:47:
         72:d3:4f:6a:b9:73:35:6c:38:74:e6:58:d5:72:3d:4c:ac:8e:
         50:53:6a:16:fb:fa:32:b9:14:a9:eb:f9:6a:84:a5:cf:54:78:
         04:23:f2:98:f3:0c:d4:e1:1f:50:dc:bb:df:ea:b9:58:01:7f:
         2e:c1:8f:c7:5d:cc:db:bf:16:23:1f:13:31:16:88:82:87:33:
         3f:16:6f:e7:20:90:64:d4:58:e5:74:46:5b:bb:31:68:e7:58:
         8a:8b:dd:e9:45:87:ee:cb:b2:2e:cc:77:a1:1e:6b:8a:a9:08:
         da:51:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:46 2024 by rpki-client on console-ams.rpki-client.org