Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/DwJa5Yj1yzhcLGXjc-pse5Wo28Q.roa
File:                     DwJa5Yj1yzhcLGXjc-pse5Wo28Q.roa (raw, json)
Hash identifier:          UVyOZ5iR3KiLQzu1A254F4+rCxkeE7UE7UCqp6/bvj0=
Subject key identifier:   0F:02:5A:E5:88:F5:CB:38:5C:2C:65:E3:73:EA:6C:7B:95:A8:DB:C4
Certificate issuer:       /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial:       08EE83CA
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/DwJa5Yj1yzhcLGXjc-pse5Wo28Q.roa
Signing time:             Sat 01 Jan 2022 14:06:18 +0000
ROA not before:           Sat 01 Jan 2022 14:06:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        138.124.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149849034 (0x8ee83ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
        Validity
            Not Before: Jan  1 14:06:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f025ae588f5cb385c2c65e373ea6c7b95a8dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8d:96:5f:0d:9a:3e:01:03:15:a1:67:a1:33:
                    06:c0:b9:3e:ba:3b:0e:df:18:00:49:75:96:d7:ed:
                    43:f9:f4:62:43:ee:4b:5c:ba:fa:c8:5e:c8:36:f7:
                    97:ad:5d:6c:cc:02:4e:a5:25:77:70:5b:df:84:c4:
                    1a:54:ee:69:56:94:73:48:bd:37:27:75:8e:05:68:
                    72:2b:1d:c7:78:68:cf:26:b7:e9:fd:2e:5e:e3:24:
                    e1:2f:7d:cf:30:e3:6d:af:a7:2b:7d:bb:81:95:ef:
                    75:ad:ba:9c:ad:04:7c:7a:93:93:88:09:a2:41:21:
                    d9:da:88:0d:28:8b:b8:22:2f:e5:08:92:65:bc:e6:
                    b3:34:1b:b8:f7:35:35:5c:42:8a:6d:10:6a:22:54:
                    cc:9b:29:0c:a0:23:ba:ae:7f:9a:19:b1:46:2e:6f:
                    88:dc:ee:4a:fb:78:e2:98:f4:8e:63:c2:26:8e:f7:
                    fe:4a:ff:65:39:73:7e:f5:31:f0:03:32:aa:77:4f:
                    74:40:1b:3f:d3:a4:b8:da:6c:e4:b6:16:2d:64:ad:
                    42:30:05:4f:fb:09:b1:38:5c:ad:b9:3e:bd:f9:1a:
                    30:9d:9e:c3:5d:5b:7a:91:30:a6:27:24:c4:92:97:
                    4e:c9:d5:3d:53:80:62:ee:60:37:b6:f7:56:84:45:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:5A:E5:88:F5:CB:38:5C:2C:65:E3:73:EA:6C:7B:95:A8:DB:C4
            X509v3 Authority Key Identifier:
                keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/DwJa5Yj1yzhcLGXjc-pse5Wo28Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.124.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:a0:4c:88:54:6f:70:49:26:a5:fa:89:59:83:3d:e1:d3:
         2b:db:be:e6:de:d0:bd:e4:74:e1:f1:a5:4d:a1:59:79:9d:0c:
         3e:1f:db:1a:9f:6d:08:bb:36:ea:94:8d:79:7a:a6:cf:02:9c:
         91:d6:ff:d3:33:76:80:5e:64:ae:b2:58:09:c2:19:0f:26:c9:
         4b:46:e9:f8:c0:eb:60:7d:63:c0:60:f8:6a:f3:2b:4f:3a:76:
         65:bf:aa:0d:22:80:4e:2f:54:d0:ab:b6:ec:aa:78:b1:bd:02:
         36:2a:8e:d2:ce:34:20:73:51:89:07:83:da:e0:ec:3d:79:3f:
         c3:ae:a6:b4:8b:f0:56:af:6c:3b:6b:f2:9a:cd:6b:88:a8:9d:
         50:81:58:d2:7c:72:f6:54:9c:f4:9d:a3:c6:91:53:c5:9b:67:
         bc:f0:f7:50:68:b6:22:37:e6:86:ac:38:23:60:53:1d:d5:1b:
         3e:43:02:5f:6d:9b:10:ba:3f:65:74:08:f2:93:67:1d:c2:62:
         af:96:a2:42:61:b7:72:2f:da:83:9f:be:c2:4d:3f:66:13:49:
         c6:85:4f:de:52:86:86:cc:ce:21:fd:01:f4:df:fa:bb:78:21:
         4a:62:86:60:68:32:e7:09:fe:07:c5:6a:de:16:22:38:0f:cd:
         32:ff:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org