Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/HIrBIBdPjzfhLGC9iL0rlu_xWHY.roa
File:                     HIrBIBdPjzfhLGC9iL0rlu_xWHY.roa (raw, json)
Hash identifier:          HBfI6SmJ+8Mb+AVwjKGnuvVd5DJyVMYRZMMuIMqDfMk=
Subject key identifier:   1C:8A:C1:20:17:4F:8F:37:E1:2C:60:BD:88:BD:2B:96:EF:F1:58:76
Certificate issuer:       /CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Certificate serial:       012914
Authority key identifier: A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/HIrBIBdPjzfhLGC9iL0rlu_xWHY.roa
Signing time:             Tue 01 Mar 2022 17:07:46 +0000
ROA not before:           Tue 01 Mar 2022 17:07:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47125
IP address blocks:        212.46.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76052 (0x12914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
        Validity
            Not Before: Mar  1 17:07:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c8ac120174f8f37e12c60bd88bd2b96eff15876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:3c:79:be:d0:d7:81:cc:8d:ce:9e:83:1f:
                    2e:fc:03:0f:be:c7:71:bf:73:89:59:60:35:24:ae:
                    a4:e9:51:e7:54:7e:a4:4f:c3:16:3b:c7:d5:8f:21:
                    74:54:1f:46:6d:ee:14:11:0f:10:80:4a:33:48:29:
                    c3:ff:70:fc:e5:a9:92:d2:4a:97:37:34:0a:93:f5:
                    bc:67:00:db:52:43:a2:10:fb:b1:0a:a0:4c:16:38:
                    6a:40:26:2d:b6:45:6a:f5:1e:58:6d:d6:1f:ca:f4:
                    48:5d:04:d3:a7:3e:4f:0d:1c:02:62:d4:d8:b3:d4:
                    ce:e9:01:6c:96:b3:27:cf:de:e7:06:60:39:d3:8b:
                    ad:9f:12:ff:37:17:9e:4b:a1:d7:75:e7:86:11:90:
                    ee:a3:0b:96:77:53:c2:0a:fe:08:cc:96:0c:47:90:
                    af:9b:c9:f4:4d:88:6b:07:42:8e:72:61:2e:5d:53:
                    75:0f:41:16:5f:fc:0c:95:fd:2e:cc:2c:96:fb:a9:
                    ba:85:96:30:2a:c8:27:68:6b:63:02:b6:0b:56:89:
                    3d:7c:cc:9d:54:35:f7:88:3d:e9:4d:99:e9:9e:46:
                    99:dd:31:34:bd:d2:63:41:66:8c:85:b7:d3:10:b1:
                    a7:55:8b:f8:e8:29:21:f7:30:9f:73:84:68:9c:18:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8A:C1:20:17:4F:8F:37:E1:2C:60:BD:88:BD:2B:96:EF:F1:58:76
            X509v3 Authority Key Identifier:
                keyid:A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/HIrBIBdPjzfhLGC9iL0rlu_xWHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:6f:22:bf:3c:b2:fe:dd:4f:6c:7c:f8:06:63:47:63:15:
         e9:31:48:ac:cf:06:f5:40:73:3a:de:72:80:e1:1c:ac:fe:31:
         49:51:0e:60:1b:29:14:06:bc:ef:35:32:a2:e1:9d:67:bc:3b:
         43:60:a4:7b:22:60:8c:46:8a:e8:17:fe:a1:ae:03:bc:15:48:
         f0:be:be:4c:98:5d:21:e1:55:c0:bb:77:c5:21:24:f5:77:cf:
         88:bc:99:16:b9:b7:24:18:ed:d8:d7:31:8b:bc:5d:a2:4b:52:
         90:6d:a3:a7:56:08:6a:e5:80:2c:cf:c9:a9:cb:cf:69:a7:48:
         89:21:35:b3:e8:da:23:20:4e:3c:a1:47:81:51:2a:3d:00:ae:
         3b:50:b8:a3:20:80:b8:1e:23:72:8d:7a:06:13:9c:c2:33:11:
         4e:8f:ff:34:52:1a:7e:99:06:96:ad:c9:d5:ec:e0:67:18:45:
         64:a2:52:73:7b:f3:f8:d4:f7:9d:a5:c4:f0:a9:c6:c4:46:8f:
         16:4b:16:ba:d0:90:c6:72:07:29:ad:95:fc:0d:07:cb:39:71:
         4e:6e:62:2b:fe:9c:28:30:52:9c:57:88:10:9f:49:55:b5:0a:
         8c:06:89:e6:97:83:5b:6a:4e:38:55:8b:e6:b7:90:3e:cd:32:
         15:ef:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:28 2024 by rpki-client on console-ams.rpki-client.org