Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/roWj6CJurdV__J8QRJPMnNHInqg.roa
File:                     roWj6CJurdV__J8QRJPMnNHInqg.roa (raw, json)
Hash identifier:          3zRi9raDpVRyL0D+JI7VAq8ozFT4UvYtyuWwhhtV2ZM=
Subject key identifier:   AE:85:A3:E8:22:6E:AD:D5:7F:FC:9F:10:44:93:CC:9C:D1:C8:9E:A8
Certificate issuer:       /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial:       1D49E1
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/roWj6CJurdV__J8QRJPMnNHInqg.roa
Signing time:             Sat 01 Jan 2022 01:54:00 +0000
ROA not before:           Sat 01 Jan 2022 01:54:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206485
IP address blocks:        146.19.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919457 (0x1d49e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
        Validity
            Not Before: Jan  1 01:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae85a3e8226eadd57ffc9f104493cc9cd1c89ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:38:d7:96:2e:76:03:9a:dd:25:f6:4e:d1:
                    ba:5e:e0:0f:91:3e:08:29:3e:9f:bb:2b:87:e0:ed:
                    d7:7c:01:93:67:3c:20:c3:ed:e5:d3:00:65:f3:ca:
                    24:93:ec:7c:79:1d:cb:88:d6:93:82:77:56:b1:26:
                    d7:17:09:71:af:96:09:a2:45:79:c9:6f:db:60:92:
                    41:45:b9:26:1f:81:2f:22:2d:76:f6:27:ca:b4:70:
                    5a:cf:33:2e:b6:b6:a6:38:5b:87:e2:e8:12:40:20:
                    68:18:cd:ba:e9:5f:5f:7a:c7:44:46:e4:dd:58:66:
                    32:42:8b:99:03:80:0b:11:16:27:f4:c4:50:08:28:
                    c1:e2:02:8c:e1:85:63:f6:ea:71:d8:c8:37:36:c7:
                    19:08:be:c2:6a:61:ac:51:7e:5b:0f:d7:46:b4:2c:
                    3a:a8:68:74:31:11:4c:48:d7:c7:3b:d4:d7:8e:98:
                    08:9c:f3:86:df:44:05:de:62:cd:47:f7:e7:82:82:
                    3b:33:0d:40:f2:fc:bd:7d:76:53:1c:49:2f:2c:aa:
                    43:66:2c:04:2f:f4:61:8a:b5:8f:e1:0a:41:5e:eb:
                    9e:24:30:bb:39:18:8c:2a:eb:78:4b:fc:9a:1c:2b:
                    ef:64:b0:11:a6:38:c6:c3:b9:74:66:df:7e:da:a2:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:85:A3:E8:22:6E:AD:D5:7F:FC:9F:10:44:93:CC:9C:D1:C8:9E:A8
            X509v3 Authority Key Identifier:
                keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/roWj6CJurdV__J8QRJPMnNHInqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:5a:31:fa:f9:42:86:de:4c:03:e4:bf:28:ec:9b:74:50:
         ba:fd:55:32:82:42:9e:b2:b0:c6:d0:a3:38:32:fd:5a:0b:45:
         08:d8:2f:02:91:81:18:f2:8e:ca:56:5e:7b:15:97:c1:91:d8:
         10:e6:8c:24:69:87:f1:e4:32:ae:74:24:04:15:85:a2:ec:5f:
         0c:6c:30:87:4d:d9:9f:19:9f:22:a4:c8:68:4b:21:cb:31:6b:
         40:d0:30:14:62:46:44:9c:35:fc:ca:e7:a6:97:b2:f0:64:f0:
         cf:eb:01:76:4b:e7:fb:2f:04:a9:f6:18:b7:db:e4:5c:a6:d6:
         0e:0f:7f:b6:80:0d:a5:10:26:12:69:de:b0:6d:77:5a:4a:84:
         00:10:29:f9:ad:fe:77:db:d5:fa:ee:49:97:d3:bc:56:2f:32:
         85:d3:64:cb:1d:07:f4:f6:c4:e9:d6:a9:f0:34:39:58:42:3d:
         de:32:e1:6a:e0:39:f5:33:48:6b:75:ea:19:97:9e:07:a3:ec:
         da:ff:58:90:7c:96:8b:af:22:51:df:7c:99:fb:e9:e5:f8:04:
         e6:93:ac:ab:a1:4a:96:89:ff:62:07:d9:89:8d:5f:43:0d:28:
         e1:41:9e:bf:7f:3f:68:1c:76:16:16:b3:80:e5:16:c0:58:bd:
         94:ab:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:13 2024 by rpki-client on console-ams.rpki-client.org