Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/0p-X3AUH3_SZVT6E4n4TtDVN__k.roa
File:                     0p-X3AUH3_SZVT6E4n4TtDVN__k.roa (raw, json)
Hash identifier:          rno342+2JWhf7BgedaGm/PGX0bGea73mU77oSnI/oJg=
Subject key identifier:   D2:9F:97:DC:05:07:DF:F4:99:55:3E:84:E2:7E:13:B4:35:4D:FF:F9
Certificate issuer:       /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial:       01884903C8814900A611ED0D4B6450304742
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/0p-X3AUH3_SZVT6E4n4TtDVN__k.roa
Signing time:             Tue 23 May 2023 14:29:24 +0000
ROA not before:           Tue 23 May 2023 14:29:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14576
IP address blocks:        146.19.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:49:03:c8:81:49:00:a6:11:ed:0d:4b:64:50:30:47:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
        Validity
            Not Before: May 23 14:29:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d29f97dc0507dff499553e84e27e13b4354dfff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:d8:9a:84:f4:b8:7c:42:d2:6f:62:15:9a:
                    7b:76:ec:48:17:c0:71:69:66:71:1e:c5:d9:58:20:
                    a3:91:ab:e5:bd:0f:7d:09:60:b9:49:bf:ad:9e:fd:
                    91:f9:6c:37:e1:46:46:68:0a:c6:1e:01:2e:bf:3b:
                    f5:79:4f:7f:b7:7f:55:4f:ca:e4:26:1f:9f:89:85:
                    12:10:05:8f:77:ff:26:e2:5c:a3:69:c7:6a:dd:d0:
                    a9:7e:9c:4e:b2:6c:89:fb:40:32:4a:87:ff:25:d2:
                    f3:fc:cc:e0:91:33:23:2c:c8:72:0d:aa:ad:b0:9a:
                    21:22:a0:b2:51:01:74:51:02:a0:9d:f6:89:30:ac:
                    03:87:b5:ec:46:12:d0:68:a3:48:52:78:18:09:a6:
                    76:d1:d3:32:b1:26:be:a3:eb:58:74:14:37:af:5d:
                    ed:0c:7a:b9:e7:f4:20:44:14:49:79:02:8b:25:9c:
                    fb:1d:4d:7f:bc:3d:95:a8:e4:27:ca:70:6a:27:85:
                    bf:07:a6:59:8e:51:3e:19:52:2c:0c:8a:a9:a0:73:
                    41:1a:f8:13:df:09:9e:66:ea:f8:8d:65:23:b7:6a:
                    e8:82:c4:74:fd:32:22:06:4e:ff:44:4b:35:9f:dd:
                    27:a4:66:ef:81:84:07:e4:af:8d:dd:8b:a5:42:cf:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:97:DC:05:07:DF:F4:99:55:3E:84:E2:7E:13:B4:35:4D:FF:F9
            X509v3 Authority Key Identifier:
                keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/0p-X3AUH3_SZVT6E4n4TtDVN__k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:c6:dc:7a:6e:a3:d4:c8:a3:79:1c:8f:68:7a:03:16:5a:
         dd:63:bf:25:0e:5f:20:be:5f:5f:c4:a3:04:fe:e4:35:37:04:
         62:92:d7:fc:42:3f:f7:88:c7:3b:5f:56:9d:ce:00:6c:40:15:
         03:38:4c:63:14:5f:49:06:38:ce:41:5e:83:c0:04:75:03:6f:
         0a:4a:3e:f1:c1:c3:65:5b:39:a5:2f:28:eb:cf:0a:48:14:e8:
         e9:08:2d:dd:f3:26:b4:c9:79:85:89:48:5c:1c:f7:59:57:00:
         7e:f9:15:c3:3b:5a:82:45:e8:67:45:e2:99:e9:35:0b:ab:32:
         11:d9:c8:f8:1f:11:c4:66:8b:c9:2f:02:ce:5a:25:1c:b7:06:
         06:22:75:55:c5:f1:81:68:c4:7a:ad:3f:36:73:60:67:ab:64:
         53:c6:1d:65:3f:22:e4:83:6b:5a:de:7f:72:84:e6:87:37:65:
         23:83:f0:7c:1c:6d:6b:f0:f5:e1:d8:6c:7e:03:ca:61:82:b9:
         ca:32:5a:27:c4:a8:60:8b:bd:2d:e5:65:7d:48:71:30:d8:e2:
         a8:f6:94:b8:78:02:49:17:96:d8:68:3b:24:41:de:15:0a:6b:
         3e:1e:80:26:7f:4f:8f:9a:78:6b:a5:4e:c9:18:23:32:41:6b:
         03:7d:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org