Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/P7YmZW6C5ELDB_VabevGEj61gmQ.roa
File:                     P7YmZW6C5ELDB_VabevGEj61gmQ.roa (raw, json)
Hash identifier:          H2H2r2Smjq9UnpLqh5twRJXiS1GEsm9oidQZ3HhBHMU=
Subject key identifier:   3F:B6:26:65:6E:82:E4:42:C3:07:F5:5A:6D:EB:C6:12:3E:B5:82:64
Certificate issuer:       /CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Certificate serial:       6CEC4C
Authority key identifier: 1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/P7YmZW6C5ELDB_VabevGEj61gmQ.roa
Signing time:             Sat 01 Jan 2022 00:51:41 +0000
ROA not before:           Sat 01 Jan 2022 00:51:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        146.19.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7138380 (0x6cec4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
        Validity
            Not Before: Jan  1 00:51:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3fb626656e82e442c307f55a6debc6123eb58264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:85:bb:1e:b9:28:0f:c7:57:30:5b:de:65:
                    e0:63:40:a5:7f:8e:e2:d8:e8:47:26:56:2b:a2:87:
                    01:56:b9:71:9e:27:b7:09:3e:bd:30:cc:5b:1a:a4:
                    8a:50:a5:1e:4b:3c:99:d1:c8:8e:48:43:27:8e:2b:
                    e5:c4:7b:c7:1c:cf:2a:72:3f:93:e4:f5:78:64:e8:
                    47:31:17:a5:8f:42:9e:be:17:9a:b4:d3:1b:e5:56:
                    70:99:47:d8:a2:17:59:d2:1f:ba:19:74:10:a9:35:
                    f7:64:78:b9:ad:56:e9:f2:97:70:a1:85:a8:5b:2f:
                    e1:a4:21:ec:8d:f8:b1:cc:e8:c7:c3:33:24:5c:c5:
                    30:01:18:e9:4c:12:87:52:d1:1c:33:e4:e8:fc:ab:
                    3b:67:50:2d:21:63:79:19:07:db:13:ca:cb:0a:36:
                    83:62:44:d4:3b:14:86:37:26:2c:38:22:50:29:e6:
                    b1:d3:1d:f9:4f:90:a7:0d:e9:c8:6a:60:be:1d:5e:
                    de:dc:fd:d7:0f:ce:af:af:74:0f:20:bc:8e:12:81:
                    00:cd:ce:7d:4c:80:7d:4c:1e:b4:41:ac:22:3b:f7:
                    b9:dc:d8:2e:0b:6e:22:0a:4c:96:88:1d:f5:54:03:
                    e1:49:7e:3b:69:0d:cb:87:8b:70:91:7a:43:df:e8:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B6:26:65:6E:82:E4:42:C3:07:F5:5A:6D:EB:C6:12:3E:B5:82:64
            X509v3 Authority Key Identifier:
                keyid:1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/P7YmZW6C5ELDB_VabevGEj61gmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:81:ed:0c:11:2d:ac:e6:bc:fa:64:23:12:b6:29:57:a5:b8:
         d3:10:9e:b3:61:c2:a8:c7:38:25:78:ea:c0:ed:29:2b:5a:da:
         5a:c6:b1:01:60:5b:d5:7a:f6:9d:a0:3f:47:4c:76:5e:c4:87:
         82:dc:89:36:1f:9d:b9:84:23:d6:e8:ac:8b:b6:b7:e5:af:17:
         e8:bb:b5:16:b6:ff:47:53:5d:e9:9a:52:d4:20:1e:6c:c6:3b:
         5a:31:f7:5b:ea:81:dc:58:a9:4f:82:fa:3d:ce:1a:16:98:79:
         da:8a:ad:bc:a9:dc:7f:e5:6f:7e:d4:57:22:e1:d5:e2:0d:c5:
         bd:80:ef:d4:a4:04:e6:ea:73:79:61:54:7a:ea:97:22:49:cb:
         3a:8f:15:3a:94:a2:e0:1c:6f:86:9f:3b:94:71:77:b3:5f:85:
         d9:97:cb:8b:a1:2b:8d:b5:cc:44:5f:8c:9d:91:63:d9:a2:00:
         1a:e5:b6:bc:c8:18:9b:8b:f8:b8:63:8b:06:48:c6:33:79:d1:
         d5:41:49:eb:ec:33:78:dc:0a:f7:07:a4:b0:31:e0:3e:78:90:
         7d:16:f5:6b:98:7f:6f:2e:dc:3b:06:04:7b:1c:ee:02:fa:84:
         b3:b0:79:80:8b:f6:44:da:d3:02:4c:17:80:18:ff:39:e7:aa:
         af:fc:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org