Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/mlTQWqFpT_eS5J4ekhlVmO0IY2w.roa
File:                     mlTQWqFpT_eS5J4ekhlVmO0IY2w.roa (raw, json)
Hash identifier:          FeFleo5uw2if89ByIrJajR4PszCVSQxUrXKGTTvCs3Y=
Subject key identifier:   9A:54:D0:5A:A1:69:4F:F7:92:E4:9E:1E:92:19:55:98:ED:08:63:6C
Certificate issuer:       /CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
Certificate serial:       017E3DA1
Authority key identifier: AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/mlTQWqFpT_eS5J4ekhlVmO0IY2w.roa
Signing time:             Sat 01 Jan 2022 12:58:16 +0000
ROA not before:           Sat 01 Jan 2022 12:58:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211114
IP address blocks:        194.62.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25050529 (0x17e3da1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
        Validity
            Not Before: Jan  1 12:58:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a54d05aa1694ff792e49e1e92195598ed08636c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:0c:7f:53:5b:a1:91:77:70:88:8b:c7:40:
                    52:97:7f:8e:a9:3c:7c:d6:a8:cd:f9:62:5a:bf:fd:
                    e0:79:ee:ae:b3:ea:30:08:d8:b9:b6:e8:47:45:19:
                    75:74:e2:6d:2e:74:cf:57:ac:e5:99:75:e8:21:fd:
                    cf:df:27:33:99:ec:6a:9c:5b:0d:7d:f5:68:b6:e8:
                    ad:ba:97:49:e2:31:53:75:91:06:d9:20:91:8b:63:
                    4f:5a:25:39:98:cd:a6:f0:4a:07:b0:7a:ef:da:ab:
                    c7:ae:26:5a:7a:f1:1e:30:d2:da:e0:0f:ba:4b:b2:
                    c5:8c:83:98:6e:09:05:bc:62:a2:ba:83:f0:5f:44:
                    d0:2c:3d:60:21:ef:b3:e9:6c:a7:98:5d:ac:e3:6f:
                    79:da:d8:0c:b7:a7:3e:81:f7:29:50:d8:95:1e:1b:
                    5b:c1:bc:6e:07:94:8f:da:2c:00:21:bf:1e:a2:c4:
                    92:17:57:56:d1:2b:b2:68:24:d4:2d:74:35:1b:b5:
                    3c:e4:01:8b:d6:2b:3e:57:9a:34:33:b9:c9:3c:52:
                    4a:1f:a3:29:d1:55:9e:f7:2c:55:c2:82:d3:33:96:
                    ad:e4:77:e4:47:cb:78:69:86:12:88:06:7c:4a:fa:
                    de:0e:fd:ee:2e:ab:fa:9e:5f:11:69:25:e6:38:51:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:D0:5A:A1:69:4F:F7:92:E4:9E:1E:92:19:55:98:ED:08:63:6C
            X509v3 Authority Key Identifier:
                keyid:AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/mlTQWqFpT_eS5J4ekhlVmO0IY2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ruLrw_wwvH251TdgeQxTph32ZzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:fa:c5:e1:66:8c:70:a0:22:e8:6c:5f:53:ff:33:42:4c:
         21:fb:bb:ab:b4:69:d6:58:fc:f9:af:36:2f:4e:bb:45:74:79:
         b6:cc:9d:0e:49:08:c3:bf:de:c4:3d:c2:5f:37:bd:1b:cb:5f:
         fe:f4:f6:9c:0c:49:85:75:b0:62:df:b9:72:f2:92:26:85:a8:
         de:55:2d:0a:6e:eb:18:5e:f8:33:ab:14:86:9a:aa:f3:bb:54:
         c1:4c:bf:fa:7f:9c:72:00:bb:66:a6:be:aa:3a:11:d0:d7:a4:
         92:c8:f0:b2:37:e3:a2:29:01:bd:15:32:06:bc:e5:65:4e:67:
         4e:ca:18:03:a9:3f:c6:81:ad:05:40:09:26:7b:f5:23:50:13:
         c6:0d:0c:12:22:dd:34:fc:35:66:07:48:a5:a2:2d:a4:47:b1:
         61:b1:9a:bb:11:50:ff:3e:32:b9:1a:8c:fd:5a:cb:a4:90:49:
         ed:14:18:22:42:3d:73:16:25:4d:66:8e:74:b1:54:e0:69:85:
         ba:4c:ea:13:5c:f8:fb:4d:89:b0:70:20:bd:09:1d:ba:cf:6b:
         24:71:90:fd:2a:86:2e:ec:a4:7e:af:1b:3b:73:5e:4a:1f:21:
         64:99:59:a9:6c:89:d6:d8:54:73:f3:fb:4f:fe:3a:51:5b:d8:
         66:9f:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:38 2024 by rpki-client on console-fra.rpki-client.org