Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/57b0c6-1096-48ef-a416-b3d92b198872/1/dw1su2qpQt-Yqe-l4hTRdJOEvsQ.roa
File:                     dw1su2qpQt-Yqe-l4hTRdJOEvsQ.roa (raw, json)
Hash identifier:          8UMlQvWoQp8v2ut+9sDSF9ZAB7ggbUQi8mf5Xc9tuiM=
Subject key identifier:   77:0D:6C:BB:6A:A9:42:DF:98:A9:EF:A5:E2:14:D1:74:93:84:BE:C4
Certificate issuer:       /CN=94774e6bb057e149331fb6bd019080cb34dbf16d
Certificate serial:       C6F7F4
Authority key identifier: 94:77:4E:6B:B0:57:E1:49:33:1F:B6:BD:01:90:80:CB:34:DB:F1:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHdOa7BX4UkzH7a9AZCAyzTb8W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/57b0c6-1096-48ef-a416-b3d92b198872/1/dw1su2qpQt-Yqe-l4hTRdJOEvsQ.roa
Signing time:             Sat 01 Jan 2022 11:55:17 +0000
ROA not before:           Sat 01 Jan 2022 11:55:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        194.104.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13039604 (0xc6f7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94774e6bb057e149331fb6bd019080cb34dbf16d
        Validity
            Not Before: Jan  1 11:55:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=770d6cbb6aa942df98a9efa5e214d1749384bec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:b5:ae:52:55:9a:67:9d:5d:8e:b1:ba:96:
                    91:4d:52:9f:60:ad:00:74:29:3e:76:d8:13:5c:7e:
                    60:8b:97:43:e5:b7:bf:63:2a:39:d8:9f:81:64:a4:
                    b2:1b:5b:2d:6a:00:85:13:a0:bb:d4:33:d5:24:60:
                    c9:d8:ed:2d:a7:b4:9f:5d:1a:95:85:8f:27:e0:b3:
                    60:f3:99:db:57:41:ab:bf:80:32:75:98:19:e9:7c:
                    c6:1a:3d:8e:fe:9a:46:0e:5e:6e:6c:ec:00:91:3f:
                    d6:8d:eb:d8:77:3b:db:20:ff:60:5e:28:f1:5d:7e:
                    1e:fb:e0:2b:85:7e:2a:0b:0c:d6:36:15:cd:65:40:
                    d4:17:75:3c:cb:57:49:e8:42:77:8e:9a:d4:78:da:
                    d7:ac:3a:8e:89:1b:46:3d:dd:36:1d:a4:69:dc:0d:
                    a1:c2:b5:87:0e:80:42:ae:04:8f:0e:ed:c5:ed:96:
                    9b:48:73:91:32:2b:c7:e1:d5:a9:8e:9f:b6:ea:11:
                    4d:37:bb:f2:fa:a3:02:33:21:3c:b0:9f:6c:32:f3:
                    59:6d:59:de:57:fe:9d:29:fb:1a:96:92:ae:6e:31:
                    7d:ee:c6:ea:34:c7:0e:c7:d6:76:95:4e:fd:83:49:
                    bd:3b:9f:c5:fd:bb:d8:13:ee:05:25:fc:3d:8b:74:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0D:6C:BB:6A:A9:42:DF:98:A9:EF:A5:E2:14:D1:74:93:84:BE:C4
            X509v3 Authority Key Identifier:
                keyid:94:77:4E:6B:B0:57:E1:49:33:1F:B6:BD:01:90:80:CB:34:DB:F1:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHdOa7BX4UkzH7a9AZCAyzTb8W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/57b0c6-1096-48ef-a416-b3d92b198872/1/dw1su2qpQt-Yqe-l4hTRdJOEvsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/57b0c6-1096-48ef-a416-b3d92b198872/1/lHdOa7BX4UkzH7a9AZCAyzTb8W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:6f:19:63:8b:3d:fe:ac:56:04:70:26:19:6b:c9:ef:2c:
         68:05:79:dd:71:94:c6:c8:81:82:0d:f7:03:81:fd:3b:43:ca:
         ed:e0:f5:b5:b2:56:a0:92:98:c6:98:a1:70:7d:d5:92:17:20:
         7c:15:1c:72:8c:b9:b8:30:88:a0:68:e2:d7:4f:73:2e:4b:13:
         11:98:57:37:52:9f:11:7a:2d:e9:7f:48:9e:79:da:45:67:7b:
         4c:12:1c:e7:bd:4d:a4:d9:65:1f:81:78:00:b2:20:2f:30:18:
         b6:c1:65:ec:ab:a1:4f:a8:49:92:dc:8e:36:10:0d:0b:ff:82:
         04:07:aa:e1:cc:6a:6c:33:55:b6:5b:44:1e:a5:a1:1e:99:05:
         a3:15:f4:aa:e6:9f:05:81:09:bd:9b:48:50:c1:0c:22:2e:97:
         78:4c:9e:ae:bc:54:c0:5c:ba:6e:7b:b2:4a:1b:17:6f:40:84:
         1f:75:a1:80:66:50:e6:d6:14:3f:32:37:0d:b2:47:43:2e:54:
         39:37:54:43:a5:60:34:b0:c8:8e:c9:ce:24:b4:fa:5e:9e:e8:
         7d:12:2a:88:8f:f1:b3:a9:b1:5a:33:1e:81:b9:69:c4:c0:e5:
         ed:38:e4:2d:0d:34:cf:d4:7e:c9:80:3a:19:3d:be:02:70:03:
         15:74:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:22 2024 by rpki-client on console-ams.rpki-client.org