Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa
File:                     EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa (raw, json)
Hash identifier:          ULqMLbo3nnRvJiaWcMxlcz/gJxYKtAgiV7sPX8Zks6k=
Subject key identifier:   12:D1:98:4B:A5:82:BB:32:83:14:9E:E0:59:F6:4D:0C:2D:AB:D9:61
Certificate issuer:       /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial:       01875FBD1DA2041B0B33305E957B0DD4D715
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa
Signing time:             Sat 08 Apr 2023 07:20:42 +0000
ROA not before:           Sat 08 Apr 2023 07:20:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211484
IP address blocks:        146.19.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5f:bd:1d:a2:04:1b:0b:33:30:5e:95:7b:0d:d4:d7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
        Validity
            Not Before: Apr  8 07:20:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12d1984ba582bb3283149ee059f64d0c2dabd961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:f3:8d:2f:de:14:af:f3:11:28:6e:03:bc:
                    66:a9:c1:63:d4:69:00:c3:06:b5:01:d6:85:94:a4:
                    0d:b4:be:14:2b:5c:6c:51:23:30:49:0a:81:6a:28:
                    cd:df:a2:91:34:0d:d9:77:03:dd:f9:a5:8c:ce:c4:
                    e8:74:12:6a:40:d9:e9:8a:0b:70:60:a5:2a:8b:62:
                    7e:5c:f7:af:b9:06:5e:65:91:4d:b9:bf:52:34:61:
                    c3:c8:c7:86:af:2d:02:e6:11:dd:13:f8:3a:ae:3b:
                    f2:0f:f2:8c:30:2d:4a:d4:90:c7:86:31:cb:f0:fa:
                    2b:1b:92:f0:ed:e3:12:c9:d0:88:a5:0f:6d:d4:3e:
                    4d:53:ed:88:e9:25:e3:f3:bb:ff:49:4d:2d:b7:40:
                    cd:c4:06:e2:48:8c:0a:4c:d2:22:03:91:3e:0a:80:
                    39:2b:de:7a:bd:1b:42:15:82:04:6a:a1:10:10:83:
                    91:a1:c3:a0:c4:36:1f:a6:e3:94:2f:cd:38:21:9c:
                    bc:26:0f:88:fc:fe:f6:2f:bd:f9:1c:2a:5d:60:3c:
                    74:07:70:21:01:87:51:05:45:f1:b7:11:13:3c:dc:
                    a9:fa:be:ac:88:99:c9:7d:d3:74:36:06:57:e7:2c:
                    41:85:88:99:a5:2c:82:8f:40:50:09:37:ad:9d:67:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:98:4B:A5:82:BB:32:83:14:9E:E0:59:F6:4D:0C:2D:AB:D9:61
            X509v3 Authority Key Identifier:
                keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a4:33:59:9b:cf:d0:34:cf:28:80:6c:31:b5:30:19:03:81:
         24:f6:3a:c1:e7:f2:64:79:5b:12:35:4c:1a:8a:97:4b:6d:cb:
         68:1d:98:83:58:f6:12:ba:f8:4f:52:74:4c:6e:cb:cd:63:67:
         ea:79:23:d7:2b:d3:e6:fd:4b:a1:1a:b5:5e:ff:df:85:4a:ba:
         b5:20:19:b5:88:ef:79:9b:16:5a:30:47:5b:cd:55:f1:58:1d:
         44:8b:69:db:38:49:6a:fa:d2:36:f0:24:99:cd:6b:11:33:75:
         b6:06:2c:9a:8b:71:73:c6:99:f9:56:c0:49:23:6e:c9:bf:ad:
         45:d5:31:80:44:db:f2:f5:ca:2c:ab:3f:14:55:18:c9:4b:0a:
         46:b0:2a:59:fd:3a:96:32:49:47:5f:de:2c:08:57:2d:ba:23:
         34:6f:76:05:10:22:66:1b:49:e9:18:67:0d:9b:ae:eb:40:75:
         e8:7c:4c:ce:6c:ba:4a:36:fd:c3:46:30:bb:a3:49:4a:f2:2c:
         9d:b6:c7:a6:ed:f4:ca:d9:ec:b3:d0:9c:c5:62:ba:56:4f:31:
         58:76:7c:62:4f:5d:50:66:8f:01:82:92:f1:b1:5d:d8:88:f2:
         a3:2e:e3:a1:fb:6d:27:17:b3:7a:74:77:7e:59:99:6a:45:ce:
         4c:60:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org