Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/dqhqwEzv6ld-UhhIJ_ZDqXiZSOA.roa
File:                     dqhqwEzv6ld-UhhIJ_ZDqXiZSOA.roa (raw, json)
Hash identifier:          ShyBNHQli+Ze+T6NSE7eeleZIntdp3u56GBU6ku2UXo=
Subject key identifier:   76:A8:6A:C0:4C:EF:EA:57:7E:52:18:48:27:F6:43:A9:78:99:48:E0
Certificate issuer:       /CN=b6721c64a39da3370247319ef0bb053ce6ddc71e
Certificate serial:       01842D812DC23DDAA0B4B2673DB103566FC9
Authority key identifier: B6:72:1C:64:A3:9D:A3:37:02:47:31:9E:F0:BB:05:3C:E6:DD:C7:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tnIcZKOdozcCRzGe8LsFPObdxx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/dqhqwEzv6ld-UhhIJ_ZDqXiZSOA.roa
Signing time:             Mon 31 Oct 2022 10:05:51 +0000
ROA not before:           Mon 31 Oct 2022 10:05:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34047
IP address blocks:        31.222.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2d:81:2d:c2:3d:da:a0:b4:b2:67:3d:b1:03:56:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6721c64a39da3370247319ef0bb053ce6ddc71e
        Validity
            Not Before: Oct 31 10:05:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76a86ac04cefea577e52184827f643a9789948e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:79:61:90:9a:45:b9:2b:b0:ca:db:4a:e1:
                    47:45:51:36:e9:0c:09:23:8a:de:e3:68:4e:68:7e:
                    e1:ec:5d:68:87:f1:47:57:ed:ed:09:26:3e:42:05:
                    7d:aa:18:d0:2d:1e:9a:c7:c5:91:2e:d3:6f:43:47:
                    72:77:a3:03:a3:64:53:1d:8d:90:fb:d1:dd:03:a0:
                    9c:5d:a7:2c:27:6b:cb:7f:f0:1c:b7:58:49:3b:79:
                    17:b0:6a:31:3f:89:18:9b:47:6a:e8:2c:27:07:54:
                    4a:7c:d1:ec:07:23:78:60:af:22:49:ac:b6:10:18:
                    8f:e2:37:76:c3:89:9b:5b:e1:4a:a6:de:29:02:85:
                    d9:6b:50:0d:04:86:ac:e2:02:fa:42:92:e3:66:37:
                    39:ac:a5:22:60:bd:62:fb:69:46:cb:1b:46:fe:1f:
                    e8:24:37:64:7c:ca:65:80:d7:6f:5d:0b:19:bb:cc:
                    29:a1:15:af:52:0d:f2:07:d8:01:a8:1a:ba:91:04:
                    62:c3:c5:cf:19:2a:12:15:fa:dd:fd:3a:70:90:66:
                    1b:07:b7:aa:88:f0:c1:19:7d:56:79:b5:f7:39:e2:
                    52:9e:81:48:13:8d:4c:52:55:c7:6d:3a:39:d5:a3:
                    89:0f:83:6e:24:ee:a6:b3:f4:59:e9:88:95:3c:ae:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:6A:C0:4C:EF:EA:57:7E:52:18:48:27:F6:43:A9:78:99:48:E0
            X509v3 Authority Key Identifier:
                keyid:B6:72:1C:64:A3:9D:A3:37:02:47:31:9E:F0:BB:05:3C:E6:DD:C7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnIcZKOdozcCRzGe8LsFPObdxx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/dqhqwEzv6ld-UhhIJ_ZDqXiZSOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/tnIcZKOdozcCRzGe8LsFPObdxx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:b8:a0:d5:6c:9e:c5:89:56:d0:37:4a:37:6b:16:ca:51:
         0f:f5:59:a8:02:9f:7a:55:03:21:52:04:9b:b7:83:ea:88:34:
         15:f3:50:fc:2b:93:02:7e:0c:f7:72:78:7a:13:4c:8b:38:3b:
         6e:b8:11:8c:be:9d:10:f6:bc:01:ed:e1:65:91:92:ed:7e:29:
         c8:8d:01:42:75:29:40:cf:b0:c5:2a:23:94:48:d4:82:b8:fa:
         16:05:ab:cb:cd:da:0d:d9:2e:19:4c:53:a8:63:c9:5d:34:bf:
         b5:c3:b9:b5:1c:95:09:97:40:45:02:e8:a7:52:ad:59:88:2b:
         0b:2c:17:d3:cf:73:91:90:6c:2b:27:e2:40:37:be:c6:4d:b6:
         7d:5b:73:11:cc:82:4d:c8:1c:6e:19:8c:f8:c9:21:84:c9:11:
         df:96:cc:7e:e8:4a:68:98:e2:9b:4a:e5:2b:8f:42:b5:5e:80:
         ec:0b:ce:54:51:4b:ca:45:d4:c3:ce:d7:ca:80:86:e0:b7:0d:
         a5:72:1a:31:ee:17:15:a2:a9:47:05:3c:a0:ef:17:72:a0:89:
         14:30:0b:e1:7c:57:ae:2e:87:05:da:ab:0f:3f:4f:b5:9b:eb:
         12:aa:ef:85:d7:3b:1b:bb:44:c3:89:a7:6f:eb:b3:d8:2f:4d:
         b6:19:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:29 2024 by rpki-client on console-ams.rpki-client.org