Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/YqAQQ9bcawpsezhGARD1lV3yQgc.roa
File:                     YqAQQ9bcawpsezhGARD1lV3yQgc.roa (raw, json)
Hash identifier:          EtV4MpZ3U5fz4vOKHCETYPgIpO12S7JFgmSXot6vUpo=
Subject key identifier:   62:A0:10:43:D6:DC:6B:0A:6C:7B:38:46:01:10:F5:95:5D:F2:42:07
Certificate issuer:       /CN=ba9614d1d5f1cc5d6e1ec530aa048ab247abfe88
Certificate serial:       0181F4557ECC44EE9B01DF99CBDE82978A89
Authority key identifier: BA:96:14:D1:D5:F1:CC:5D:6E:1E:C5:30:AA:04:8A:B2:47:AB:FE:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/upYU0dXxzF1uHsUwqgSKsker_og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/YqAQQ9bcawpsezhGARD1lV3yQgc.roa
Signing time:             Tue 12 Jul 2022 21:34:12 +0000
ROA not before:           Tue 12 Jul 2022 21:34:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        146.19.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:55:7e:cc:44:ee:9b:01:df:99:cb:de:82:97:8a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9614d1d5f1cc5d6e1ec530aa048ab247abfe88
        Validity
            Not Before: Jul 12 21:34:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62a01043d6dc6b0a6c7b38460110f5955df24207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:b2:e6:f6:ab:b1:a7:0b:a4:13:5a:89:f7:
                    19:96:4a:a6:73:47:44:44:10:c8:b4:dc:91:6d:6d:
                    d6:7b:16:ab:cb:48:df:66:0d:09:99:62:08:76:cf:
                    7a:92:2e:ef:ad:84:dc:f8:dc:05:5c:73:ac:03:ed:
                    7f:9a:b5:c9:2e:ee:3a:e2:ae:aa:a9:5b:72:12:00:
                    6f:18:df:bf:48:17:6e:1b:99:7c:18:3b:63:ca:02:
                    40:9f:25:da:ae:ba:47:4c:b1:f0:72:0e:c0:79:b2:
                    47:ee:44:50:3d:4a:ee:8d:e7:f8:0f:9a:3a:86:3d:
                    50:73:0f:43:2b:78:c7:3a:6d:bd:36:10:4a:6d:a6:
                    d3:ef:fb:37:84:1f:c5:ff:82:00:a4:df:dd:dc:fa:
                    dd:61:25:05:29:eb:55:63:0b:5f:ac:7a:96:70:4a:
                    8b:12:b3:94:62:04:d2:ea:10:00:82:e8:f9:2a:b3:
                    f2:2a:04:18:f5:0d:71:6d:d2:e8:56:e1:61:4c:b3:
                    ee:0b:ba:73:50:79:4f:51:c2:1a:4c:7a:21:40:a1:
                    0e:b3:4f:50:68:51:88:92:63:10:21:84:67:f4:4b:
                    e7:c5:48:34:ca:ba:63:2b:c9:92:fa:76:cf:a9:55:
                    1c:72:f4:de:22:98:3b:87:f4:85:4a:8c:03:7d:83:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:10:43:D6:DC:6B:0A:6C:7B:38:46:01:10:F5:95:5D:F2:42:07
            X509v3 Authority Key Identifier:
                keyid:BA:96:14:D1:D5:F1:CC:5D:6E:1E:C5:30:AA:04:8A:B2:47:AB:FE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upYU0dXxzF1uHsUwqgSKsker_og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/YqAQQ9bcawpsezhGARD1lV3yQgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/upYU0dXxzF1uHsUwqgSKsker_og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:d5:d3:b5:41:bc:ab:31:87:c6:60:9d:54:08:69:b2:c6:
         27:87:3c:cb:e1:00:f5:85:3e:08:95:6b:ba:a5:7b:cb:bc:ce:
         48:69:4c:a8:92:22:8c:67:f9:2a:c2:dc:ec:eb:e5:dc:5d:b0:
         71:4f:8e:94:23:35:4c:01:ed:77:ad:8a:c6:c0:46:34:de:f2:
         58:1a:1a:42:00:a2:a1:77:fb:c8:c6:07:e4:3a:3a:0e:08:6a:
         0a:f6:cc:a6:9d:2f:96:12:c9:4e:17:3b:8f:fd:b6:70:79:6e:
         73:12:7e:ea:bd:67:be:05:f0:84:a1:ae:54:89:bd:b7:f3:6c:
         f8:e1:5f:b1:23:ed:49:62:f5:6f:a2:02:bb:bf:4a:53:5b:a9:
         d6:1b:b2:e8:03:c4:63:b1:f3:4d:b6:20:a3:35:d3:de:a0:84:
         93:94:ff:3d:ee:e7:4d:c1:eb:dd:a5:22:5d:6b:1a:10:2c:b2:
         65:90:1d:25:13:03:46:90:34:98:a6:20:35:52:71:fd:00:c1:
         80:b6:f7:1c:91:36:34:82:ad:37:13:6a:ce:97:b5:cb:9e:e7:
         70:80:ae:de:54:55:77:ff:5a:ee:65:a2:ae:54:30:e7:eb:c0:
         d6:4a:82:72:c0:bb:e6:71:99:0c:fc:ba:9e:27:8f:2e:00:9c:
         54:f6:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org