Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/upmP36Zk6z7JvUVkIQcGuVdk4Kc.roa
File:                     upmP36Zk6z7JvUVkIQcGuVdk4Kc.roa (raw, json)
Hash identifier:          OP57WvMZvUzp2o9d/1V3KE96EWthzXBzV0PzVFOTYgE=
Subject key identifier:   BA:99:8F:DF:A6:64:EB:3E:C9:BD:45:64:21:07:06:B9:57:64:E0:A7
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       018263F1707B917CCB21FF3B93D4BEDD9E20
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/upmP36Zk6z7JvUVkIQcGuVdk4Kc.roa
Signing time:             Wed 03 Aug 2022 13:42:23 +0000
ROA not before:           Wed 03 Aug 2022 13:42:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        212.46.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:63:f1:70:7b:91:7c:cb:21:ff:3b:93:d4:be:dd:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Aug  3 13:42:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba998fdfa664eb3ec9bd4564210706b95764e0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:6c:22:2b:a3:ce:46:f6:ac:06:6c:87:4c:
                    4a:bc:7b:6a:21:3c:01:d7:ef:aa:e4:26:64:bc:58:
                    0f:40:ac:dd:3b:cc:1f:97:6a:c6:38:ac:ec:55:d5:
                    10:c2:7e:4d:3c:cd:7c:47:01:2e:47:18:c5:a8:08:
                    0e:bb:a6:6f:7c:ea:39:83:85:90:2b:33:1c:f2:ac:
                    1d:e6:af:15:ea:72:00:e5:04:88:ea:0a:94:6e:4b:
                    44:a2:3e:86:fe:bd:d0:22:48:99:88:20:24:1a:c6:
                    70:b4:cb:12:31:3d:0d:21:9d:0f:b0:d6:33:5a:32:
                    ca:28:c2:18:7c:a0:c6:2e:53:36:7b:70:07:28:4e:
                    bd:0f:97:df:91:da:6f:77:a5:33:cd:0d:76:62:96:
                    94:66:94:1e:46:3f:8f:1f:06:a4:f4:eb:b1:e3:09:
                    59:75:b6:fe:9f:dd:e4:2e:c6:21:17:fc:34:e7:d3:
                    65:44:46:a2:89:d6:8c:9a:82:2b:a0:7c:da:f4:d8:
                    08:34:f1:f4:cd:f2:b5:00:6e:be:de:7e:a9:a7:ad:
                    d3:c6:cd:40:5d:c2:58:6e:a1:d2:2d:4f:6e:ea:6c:
                    57:63:75:21:a1:a6:17:d7:39:02:dd:75:d1:88:1e:
                    c9:23:0b:ab:6c:2e:00:6b:5d:4f:01:35:01:b4:39:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:8F:DF:A6:64:EB:3E:C9:BD:45:64:21:07:06:B9:57:64:E0:A7
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/upmP36Zk6z7JvUVkIQcGuVdk4Kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:cd:c0:8b:f3:96:d7:5f:28:bd:eb:5e:72:28:68:88:1d:
         41:c6:f6:07:f7:3b:b4:91:ab:0b:0f:72:28:70:e3:32:e6:e0:
         46:04:97:e8:53:8e:ce:31:ef:18:01:ce:b2:fa:1b:73:a7:ec:
         f9:80:5b:25:f2:d1:2e:7b:0b:53:73:1e:f5:1e:c9:d3:54:e3:
         90:5d:da:c2:3b:9d:c5:f7:70:2f:98:09:37:fe:14:fb:5e:95:
         93:a9:75:ab:ee:5d:e6:f0:64:61:11:8c:1e:92:9b:61:de:bf:
         76:d9:c1:be:a6:58:20:05:b9:03:3d:3c:37:c4:76:e6:33:60:
         ba:11:7c:bc:74:c8:98:bc:09:3c:9a:44:b7:2a:b9:3f:54:21:
         58:eb:cd:4d:18:7d:37:1d:dd:a4:7f:f1:59:93:a2:7a:d1:e8:
         8e:28:f4:58:70:ab:9d:c3:f8:8a:ae:1c:ea:f4:39:f7:ef:53:
         7f:59:3d:b3:28:1c:2b:84:be:f4:0d:fc:ff:a1:1e:ad:9d:75:
         d6:be:64:23:94:7b:42:ef:d6:f2:4f:bd:5c:ab:db:96:8d:5f:
         1e:cf:34:5a:84:5f:31:55:c1:e0:d4:f5:46:69:10:c9:8f:7b:
         92:99:d3:93:bb:f6:84:86:08:ab:4d:25:ac:26:40:6d:86:26:
         15:46:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org