Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/qc6gaNAPGWzhVA0qQEyW5plR2pY.roa
File:                     qc6gaNAPGWzhVA0qQEyW5plR2pY.roa (raw, json)
Hash identifier:          +cuX0DhC4GZgpOllJCXt2a68BmPgdh6BD9Ya9zcWAZ4=
Subject key identifier:   A9:CE:A0:68:D0:0F:19:6C:E1:54:0D:2A:40:4C:96:E6:99:51:DA:96
Certificate issuer:       /CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Certificate serial:       01867DB10504E1E669F23384A23A42716B1C
Authority key identifier: 1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/qc6gaNAPGWzhVA0qQEyW5plR2pY.roa
Signing time:             Thu 23 Feb 2023 09:53:18 +0000
ROA not before:           Thu 23 Feb 2023 09:53:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199740
IP address blocks:        146.19.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:b1:05:04:e1:e6:69:f2:33:84:a2:3a:42:71:6b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
        Validity
            Not Before: Feb 23 09:53:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a9cea068d00f196ce1540d2a404c96e69951da96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:2b:3d:b2:2c:94:c3:78:03:e1:fa:75:83:
                    d2:72:b3:e4:a8:b1:e0:60:3b:78:a8:4b:74:b2:4c:
                    3a:b5:2e:a0:f1:4f:c9:4c:49:a9:87:0a:85:9f:eb:
                    34:ef:00:d7:ce:01:4b:7b:5e:8c:66:82:55:0b:da:
                    0a:cd:b2:62:b7:bf:9f:34:a8:01:f9:3c:0c:e5:75:
                    cb:40:02:5f:54:d0:6b:13:31:88:d2:18:17:fd:6f:
                    3c:3e:2f:30:0c:b1:ee:c8:93:ad:e6:dc:02:92:08:
                    f4:ca:fd:2c:ff:60:b2:82:58:6d:13:3f:bf:6e:0a:
                    bd:93:98:8c:f9:19:f7:9b:5f:a8:a2:c1:c3:78:93:
                    3d:8d:03:c0:b0:1c:12:7f:7b:28:e6:23:3e:b3:f5:
                    a3:f8:7d:29:8d:2e:37:05:79:2d:64:d9:b7:24:9f:
                    0b:28:a1:55:72:87:e6:9a:53:d1:33:51:e7:56:50:
                    44:fa:b6:0b:70:2f:8a:39:f3:e1:60:90:a8:db:69:
                    c7:5f:34:3a:ef:0a:7a:73:6d:64:00:b6:7d:b1:68:
                    59:05:49:8e:2b:7a:e8:fc:44:05:9c:55:d2:cd:d0:
                    83:4e:0f:19:86:6b:0c:88:e4:09:d3:bb:dc:c1:88:
                    06:ed:78:9c:5e:c7:a2:e1:a8:7f:d5:28:aa:97:12:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:A0:68:D0:0F:19:6C:E1:54:0D:2A:40:4C:96:E6:99:51:DA:96
            X509v3 Authority Key Identifier:
                keyid:1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/qc6gaNAPGWzhVA0qQEyW5plR2pY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:02:04:11:a3:34:5d:ff:5a:e7:ae:dd:be:33:7e:b3:12:
         70:6e:7f:05:74:ab:b8:57:d2:a4:03:3c:fa:48:4c:0f:cb:4d:
         54:9c:ca:3d:cc:4c:ea:84:a5:48:ff:4c:b6:40:69:b6:56:bc:
         f1:c9:5e:e1:22:af:98:f3:d5:5f:5a:78:6d:d0:e0:4c:3e:7e:
         fa:d7:0a:7d:74:4b:81:d8:1f:50:dd:d5:a9:22:cd:0b:85:fc:
         57:ce:2b:d5:8c:47:e8:ec:2a:ed:dc:02:a1:14:96:9f:4e:b3:
         13:73:0d:0e:f1:d4:33:6c:22:89:84:1d:72:bd:e8:1e:f2:2f:
         2c:de:6c:ae:78:6d:4c:f6:b6:ff:52:eb:97:6e:59:bf:f4:cf:
         8c:87:9e:33:de:7f:a0:9d:02:3a:37:da:f8:0a:55:31:65:f9:
         e5:05:e1:a1:98:c4:b6:1b:ad:8d:be:2b:2c:20:2c:41:8e:b1:
         b6:fc:bf:6f:29:89:75:ea:44:26:d3:60:0f:f9:fd:84:db:3c:
         e5:18:8a:51:9f:28:4f:d5:aa:bf:9f:41:62:f9:ec:74:f1:64:
         e5:a4:41:be:41:d6:55:f4:25:6a:9b:34:fb:96:e0:2a:c7:13:
         3b:03:23:84:c9:d9:ba:bf:12:08:77:57:78:11:19:45:1f:a5:
         21:3b:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:50 2024 by rpki-client on console-fra.rpki-client.org