Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/dJAYlEJ6x74OcJDK5eOJaJo1Xlg.roa
File:                     dJAYlEJ6x74OcJDK5eOJaJo1Xlg.roa (raw, json)
Hash identifier:          rhWmBj1JEbx+8cv90jSrL8aY9L23NNCQE0UbUCPjX/s=
Subject key identifier:   74:90:18:94:42:7A:C7:BE:0E:70:90:CA:E5:E3:89:68:9A:35:5E:58
Certificate issuer:       /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial:       C83B38
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/dJAYlEJ6x74OcJDK5eOJaJo1Xlg.roa
Signing time:             Wed 19 Jan 2022 12:34:44 +0000
ROA not before:           Wed 19 Jan 2022 12:34:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211190
IP address blocks:        176.126.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13122360 (0xc83b38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
        Validity
            Not Before: Jan 19 12:34:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74901894427ac7be0e7090cae5e389689a355e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:8d:fc:f1:13:36:9c:75:10:c1:a0:2a:8a:
                    92:40:ee:2c:67:46:4a:55:9f:d7:25:6e:cd:b5:cf:
                    70:ed:cc:55:f1:de:ff:f1:0d:2e:df:0a:c4:28:57:
                    0b:6a:ff:17:7f:80:f4:7f:32:23:4c:ad:6e:71:bb:
                    e0:0b:7d:25:31:24:60:64:ae:5f:99:9c:02:a6:ce:
                    ad:53:91:af:06:34:dc:53:0f:02:09:62:8a:e6:ba:
                    30:09:03:be:2d:6f:50:ee:67:81:d7:8c:e4:46:e7:
                    18:9f:14:42:8e:8b:78:d1:a8:77:66:5a:0f:7f:74:
                    7a:14:e4:d6:3c:61:b5:b2:63:94:2f:9a:fb:c8:93:
                    5e:f1:93:ea:0d:fc:6d:01:f9:db:16:23:e9:89:d4:
                    2e:01:a3:4e:96:29:25:06:a5:9b:cd:31:2a:85:94:
                    a9:41:a2:e3:9d:6a:47:e7:c8:65:89:32:a9:c8:78:
                    90:2e:6e:5f:ed:3b:ac:3c:0c:0a:64:38:76:9a:e9:
                    c3:e5:e1:0c:2b:36:cb:e2:12:74:56:4f:1a:72:f3:
                    bc:0b:35:14:73:63:87:11:93:84:5a:98:71:77:9a:
                    59:26:eb:61:fa:49:9f:73:f1:83:dd:34:0a:26:0f:
                    99:bf:f7:a3:b9:a6:3e:02:4d:3f:0b:72:81:2c:44:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:90:18:94:42:7A:C7:BE:0E:70:90:CA:E5:E3:89:68:9A:35:5E:58
            X509v3 Authority Key Identifier:
                keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/dJAYlEJ6x74OcJDK5eOJaJo1Xlg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:b3:45:49:d4:d4:8c:c0:72:d7:85:b1:23:8a:6d:8d:dd:
         17:03:bc:63:ab:48:6f:ad:dc:5f:a7:e9:25:70:66:af:7d:f8:
         4f:f1:4e:a0:53:1f:53:9b:54:9e:ed:09:5c:ee:e6:5d:ee:b6:
         7e:2a:f0:d4:05:f6:57:1c:13:e4:38:19:b0:94:9e:e8:11:e2:
         0f:cc:62:c0:a0:c8:ef:58:5b:ef:02:ec:82:86:8a:13:10:72:
         e5:a3:64:5b:7e:63:7f:bd:33:a1:14:28:c8:ba:7e:3f:cc:e8:
         36:9b:d0:0d:79:b7:c8:1d:dd:0c:10:ba:7c:54:ca:4b:84:9c:
         b6:39:3b:4b:e9:b5:ba:30:fa:07:03:e8:49:8b:c0:18:3d:66:
         91:9b:f2:00:45:26:dd:51:6a:51:64:04:69:99:a6:b5:0e:2a:
         8f:3e:71:6b:42:e4:a8:2f:bf:a4:ea:07:6a:5b:3b:cd:a5:b3:
         ec:b6:94:00:a6:a6:2c:25:a4:9c:73:6f:94:11:b5:0f:d0:0a:
         47:40:70:37:3c:54:f3:00:51:8a:c4:e7:8a:b4:12:87:aa:e8:
         49:fb:d8:77:b1:29:5b:57:a0:a2:c9:d8:b1:89:ba:22:e4:d2:
         8e:63:58:62:55:34:2e:9f:6d:b2:d5:01:9a:03:6e:07:c5:95:
         1e:94:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:25 2024 by rpki-client on console-ams.rpki-client.org