Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/v-p1LWi7Lb-JQMbx0_kkc4Qlc7o.roa
File:                     v-p1LWi7Lb-JQMbx0_kkc4Qlc7o.roa (raw, json)
Hash identifier:          Gzle9aTofgGLRzEKDvEks9txbPZbRuXiFQzIPufM5c0=
Subject key identifier:   BF:EA:75:2D:68:BB:2D:BF:89:40:C6:F1:D3:F9:24:73:84:25:73:BA
Certificate issuer:       /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial:       018CC56E179E586C9E08A72FB6307C2485C0
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/v-p1LWi7Lb-JQMbx0_kkc4Qlc7o.roa
Signing time:             Mon 01 Jan 2024 14:29:35 +0000
ROA not before:           Mon 01 Jan 2024 14:29:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211440
IP address blocks:        212.46.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:17:9e:58:6c:9e:08:a7:2f:b6:30:7c:24:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
        Validity
            Not Before: Jan  1 14:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bfea752d68bb2dbf8940c6f1d3f92473842573ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:3b:5b:16:38:b0:0f:24:87:10:21:82:48:
                    2c:13:95:97:ee:7f:18:ac:aa:e7:f6:69:9c:c3:08:
                    f7:5b:5a:e0:bc:f4:11:51:9b:92:28:4b:ce:38:13:
                    ca:9b:c7:5a:90:92:de:60:72:cf:7b:43:aa:91:b1:
                    db:2f:b4:e7:a0:4c:db:e8:ce:a9:84:24:89:01:c2:
                    3f:08:ec:51:3d:81:1c:c8:de:2e:08:57:80:0b:03:
                    72:ba:55:de:4f:b3:98:43:2e:78:6d:cb:a4:9f:eb:
                    40:a4:18:72:a0:52:47:34:be:f9:20:0b:61:da:66:
                    d8:dc:5e:0f:dc:f3:1d:28:8f:ed:50:f9:93:f4:6e:
                    a3:cb:3f:18:9e:0f:b7:86:8c:85:08:00:46:d0:c6:
                    bc:2f:ee:fb:f1:fa:23:f7:6a:71:fd:22:a6:47:19:
                    ea:28:f9:fe:ff:24:d5:3e:bf:dc:a4:f8:26:2f:1c:
                    f3:2f:02:47:55:75:ee:0f:ab:7c:5e:94:15:86:a4:
                    3e:ce:cb:bc:44:87:be:e1:ab:c5:bc:66:37:6b:27:
                    90:4a:bb:de:ee:2a:e3:a5:0a:4a:ec:47:16:03:07:
                    04:b2:d9:e2:ed:61:dc:68:43:e5:7c:4c:25:86:8c:
                    12:aa:0e:0c:49:4b:df:89:4b:79:9e:43:8a:ce:52:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EA:75:2D:68:BB:2D:BF:89:40:C6:F1:D3:F9:24:73:84:25:73:BA
            X509v3 Authority Key Identifier:
                keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/v-p1LWi7Lb-JQMbx0_kkc4Qlc7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:38:7b:c9:b9:0d:71:af:e8:16:00:53:d5:25:c9:53:d8:
         ab:c5:e8:8a:48:5c:16:a3:fe:d6:69:75:ef:0a:19:20:52:36:
         29:ca:88:e1:68:8c:37:8f:d1:4d:24:fd:96:32:40:7d:84:70:
         42:71:06:fa:55:89:cf:a5:a7:60:83:b2:a3:f1:e5:36:a4:0d:
         26:32:4a:dc:fa:fe:99:3a:58:ea:c4:2f:28:75:f1:31:78:42:
         48:1f:97:fc:8a:72:06:9d:be:13:e0:6b:87:6d:ed:da:94:80:
         e7:97:15:96:38:0f:a8:1d:38:8e:ed:85:e9:3a:fa:a4:3f:3c:
         22:d4:27:fd:31:df:67:80:1b:6b:5e:ec:17:30:38:58:1d:04:
         b7:43:22:00:a0:71:4f:81:c0:4e:07:62:02:05:38:ab:0d:60:
         c9:03:3f:a5:c1:5b:6c:1e:46:f6:0f:82:3a:63:f2:32:95:bd:
         19:46:b6:37:fb:07:8f:cd:57:db:35:5e:91:7b:19:2b:ee:fb:
         88:61:ec:50:03:6a:fc:0b:97:1b:9d:6c:85:ec:7f:36:96:7c:
         40:0f:6f:41:fc:5f:4d:4e:e0:78:fb:57:ab:3a:06:5e:75:28:
         3e:ba:4c:c8:19:bc:64:c9:27:f1:ec:4f:d5:66:49:57:88:0f:
         e2:5f:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 11:29:11 2024 by rpki-client on console-ams.rpki-client.org