Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/4UZOMVh7vtkUfjrMsqN6N3pFAyY.roa
File:                     4UZOMVh7vtkUfjrMsqN6N3pFAyY.roa (raw, json)
Hash identifier:          ElcUcSLW0o4a+bwys4zk9dI+vGH4u8gtdzmg6iTL5lU=
Subject key identifier:   E1:46:4E:31:58:7B:BE:D9:14:7E:3A:CC:B2:A3:7A:37:7A:45:03:26
Certificate issuer:       /CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Certificate serial:       6CA74D
Authority key identifier: 1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/4UZOMVh7vtkUfjrMsqN6N3pFAyY.roa
Signing time:             Sat 01 Jan 2022 01:52:13 +0000
ROA not before:           Sat 01 Jan 2022 01:52:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7120717 (0x6ca74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
        Validity
            Not Before: Jan  1 01:52:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1464e31587bbed9147e3accb2a37a377a450326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:d2:95:58:cd:7c:95:96:63:94:7a:25:b6:
                    6c:3d:1e:fd:36:45:a1:11:57:d6:1d:c0:3d:b2:a0:
                    50:f1:33:38:dc:58:b9:45:2b:85:72:86:24:4c:d6:
                    f1:f5:4b:70:62:f9:f3:08:1b:78:fc:4c:24:fb:1a:
                    ea:1b:28:88:fb:22:95:b6:6e:99:fc:55:4d:e4:3a:
                    6e:37:e4:fe:7e:55:ea:aa:e1:48:0d:0c:df:89:af:
                    ab:73:03:e3:1b:04:4f:61:79:55:0f:9f:10:90:6c:
                    cd:2c:a1:f6:a4:5a:65:2c:2f:7d:67:6a:8c:cd:e5:
                    22:c4:cb:51:00:97:cb:a6:c7:1e:6b:1c:ad:8e:ab:
                    f9:e0:27:f8:88:aa:f7:55:6f:a9:dc:3e:b8:e9:4f:
                    0f:5c:ba:85:11:a7:d9:08:39:81:ef:ae:31:ef:4d:
                    70:ab:6a:20:31:40:ed:8a:89:33:05:8c:de:bf:b4:
                    07:e5:c4:8e:04:df:2c:60:c8:35:0f:d7:8f:68:3b:
                    1d:45:cb:a4:b8:9f:2e:e7:de:ad:1c:bc:2d:ec:76:
                    6c:7b:e1:8f:f1:24:52:35:de:1a:a0:50:23:08:1f:
                    d8:70:5a:8a:5c:9c:e3:7b:83:95:44:39:a7:c5:13:
                    86:01:e0:8d:c5:21:50:9d:aa:7b:0e:3f:d8:e0:a1:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:46:4E:31:58:7B:BE:D9:14:7E:3A:CC:B2:A3:7A:37:7A:45:03:26
            X509v3 Authority Key Identifier:
                keyid:1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/4UZOMVh7vtkUfjrMsqN6N3pFAyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:a7:74:a9:5f:01:a3:9a:08:b7:36:cc:1e:9f:c2:24:94:
         d0:a9:e8:5b:86:a0:7e:31:94:e2:a8:eb:6d:2d:b6:00:d2:7e:
         21:dd:c8:c6:f7:47:6e:c9:db:1e:af:00:63:84:fa:6c:5e:d8:
         24:f0:54:cc:9e:da:5f:64:9d:c4:a1:68:83:ce:71:72:02:73:
         10:67:fa:91:a3:e9:cb:ed:de:39:27:db:50:42:fd:4c:e4:7a:
         4e:ec:6c:bd:47:d7:27:be:2e:dd:64:45:0f:5b:1a:ee:93:56:
         7c:f9:de:62:1e:2a:aa:13:83:ca:81:90:10:a2:d3:59:db:b9:
         04:a9:05:20:78:6a:06:be:f2:1c:3d:22:3c:a2:2b:d7:6c:13:
         c2:50:7a:d6:78:d3:3a:34:14:1f:69:ee:70:4a:07:a9:41:4a:
         81:25:a0:a3:f8:b0:8a:31:0a:c3:ca:f7:06:ea:e0:3d:55:30:
         f0:98:c1:77:21:be:33:b8:42:47:7a:7f:b5:5d:0d:e6:6b:35:
         b5:20:fa:1f:61:37:b6:61:ec:b4:b9:4b:b6:1f:ee:92:31:ab:
         25:33:fa:80:c2:64:eb:9e:12:36:4a:8b:b5:0d:59:c0:99:d0:
         84:79:34:53:b2:ea:73:92:c7:4d:c7:73:1b:1f:ac:b5:1d:34:
         61:31:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:50 2024 by rpki-client on console-fra.rpki-client.org