Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/lwraf-cNwdpOR_mt62WJcA6Yf2k.roa
File:                     lwraf-cNwdpOR_mt62WJcA6Yf2k.roa (raw, json)
Hash identifier:          VA34bJVhPQ11YifmuQVJi9tzLQeR4sfjb+owwl3y9zI=
Subject key identifier:   97:0A:DA:7F:E7:0D:C1:DA:4E:47:F9:AD:EB:65:89:70:0E:98:7F:69
Certificate issuer:       /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial:       04395A95
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/lwraf-cNwdpOR_mt62WJcA6Yf2k.roa
Signing time:             Fri 25 Mar 2022 17:45:37 +0000
ROA not before:           Fri 25 Mar 2022 17:45:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48678
IP address blocks:        141.98.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70867605 (0x4395a95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
        Validity
            Not Before: Mar 25 17:45:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=970ada7fe70dc1da4e47f9adeb6589700e987f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:1e:96:e1:98:01:d1:c8:e6:1e:4e:95:7d:
                    45:26:75:50:14:ac:c1:d9:92:2c:d8:91:a8:db:e7:
                    c4:e0:6e:1e:65:6a:ec:c9:57:89:fa:9d:2a:ef:80:
                    d6:c2:7f:3c:12:ed:8d:91:79:7f:0e:e8:8e:0c:ed:
                    d7:da:3d:41:ed:65:88:aa:d6:a6:38:84:f7:10:44:
                    10:73:cf:a7:90:23:39:8b:46:33:e2:f5:b3:09:b7:
                    17:89:3a:01:62:8e:a1:4b:43:93:52:08:0e:b8:66:
                    ff:17:6d:26:f5:8a:7a:40:17:bb:b4:2a:f3:4b:c8:
                    89:e3:09:75:41:c3:06:4c:5b:a9:ea:0a:3c:ca:e9:
                    61:fb:f7:e8:bd:59:2d:47:b3:7f:3d:ef:ff:5c:29:
                    88:64:8b:9e:f1:f4:e0:b6:ea:b1:ea:21:dc:59:2c:
                    b2:8e:8d:02:57:25:4b:93:4f:1c:d9:a9:c9:50:a6:
                    36:a3:e4:94:39:b4:ed:96:f7:a9:fd:3c:5d:fe:75:
                    bb:b9:06:dd:21:0c:d5:1b:9a:41:ff:ab:fb:7a:8e:
                    3c:b9:54:38:7c:3e:71:4e:ad:14:f7:d6:2b:1e:34:
                    6c:1e:0c:3e:b1:6e:77:6b:12:5e:9a:41:c4:08:a7:
                    f8:23:a1:c1:09:ef:ae:1a:1d:f5:27:5d:fe:4c:1b:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:DA:7F:E7:0D:C1:DA:4E:47:F9:AD:EB:65:89:70:0E:98:7F:69
            X509v3 Authority Key Identifier:
                keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/lwraf-cNwdpOR_mt62WJcA6Yf2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:95:c0:1e:29:74:21:35:1b:a4:37:69:cd:a4:ef:54:ce:3a:
         6e:2b:59:ac:69:9c:95:35:45:72:55:5c:ee:35:ab:0b:3c:1e:
         79:cf:00:9f:3d:3a:74:e7:2f:6c:94:94:9a:62:96:d3:dd:39:
         12:46:d9:f1:1c:b4:91:95:38:2a:f4:3f:e1:19:ad:02:73:1c:
         05:90:d8:ae:77:40:c4:c6:a1:42:f0:fb:63:f7:90:46:c7:8a:
         3b:98:9c:e2:e8:41:64:57:0f:d0:cf:57:18:5e:47:92:f9:fb:
         a4:bc:c2:0d:4f:8f:a9:1f:9d:de:0d:fd:83:f4:7b:02:11:14:
         9e:b5:23:2c:b4:6a:7f:f1:91:51:5b:9e:9d:7d:ae:95:14:9b:
         f1:fe:56:bf:c8:4e:4f:a1:4a:44:cb:11:47:8c:9f:75:23:0c:
         76:77:f5:6c:75:2f:96:02:fb:8c:1e:d5:71:0e:6d:4f:ad:59:
         c4:aa:b1:82:ad:e8:75:9c:87:36:11:79:8a:f5:f0:2a:22:3f:
         81:a1:92:3c:f5:19:5d:ae:12:5a:81:64:ee:13:53:ff:1d:14:
         ec:64:25:af:8e:8f:c2:aa:f1:5a:1a:4f:08:76:9c:d6:3d:5c:
         c3:a2:2d:41:6b:49:ec:60:bf:f9:5a:6b:42:5b:73:90:d9:55:
         a9:d2:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:39 2024 by rpki-client on console-fra.rpki-client.org