Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/L2scJ_jGt0k4t-V7NgXfICXztVY.roa
File:                     L2scJ_jGt0k4t-V7NgXfICXztVY.roa (raw, json)
Hash identifier:          DA0Nd+wP6y9yC8CPIrL3jawQdNr+WB3/Y15FVIkpS54=
Subject key identifier:   2F:6B:1C:27:F8:C6:B7:49:38:B7:E5:7B:36:05:DF:20:25:F3:B5:56
Certificate issuer:       /CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Certificate serial:       098170
Authority key identifier: BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/L2scJ_jGt0k4t-V7NgXfICXztVY.roa
Signing time:             Sat 12 Feb 2022 05:46:05 +0000
ROA not before:           Sat 12 Feb 2022 05:46:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        2a12:6f40::/30 maxlen: 30
                          2a12:6f44::/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622960 (0x98170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
        Validity
            Not Before: Feb 12 05:46:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f6b1c27f8c6b74938b7e57b3605df2025f3b556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:b3:1b:65:fb:8a:06:5c:a4:af:e3:f2:41:
                    17:f0:3e:8a:bb:82:d4:89:65:1d:15:5a:7b:cd:e7:
                    e7:d2:0c:06:e0:30:c8:24:47:cd:e3:17:12:7d:46:
                    30:b7:60:84:78:3a:83:c1:b5:6f:56:f2:ba:d0:c8:
                    26:cd:15:df:ee:31:0e:d5:d3:42:40:6f:31:f0:7e:
                    af:56:61:00:43:22:d0:ba:37:b8:89:58:63:72:ce:
                    f8:2d:9c:b4:86:0e:c4:c4:a7:5a:41:c0:55:ee:ad:
                    d3:47:36:b4:59:b8:6a:81:76:10:de:ba:9f:56:ba:
                    ab:7f:dd:98:aa:3d:8b:57:9b:af:ff:88:a6:c6:88:
                    90:69:21:7f:20:ab:dd:a6:f2:3a:56:e0:12:cd:fe:
                    db:04:ea:1c:25:e4:7c:ac:36:20:c5:b3:05:a7:4e:
                    ed:55:98:1e:92:6b:25:15:5a:7e:5a:61:7e:44:85:
                    58:28:98:53:42:94:64:8e:df:a6:78:7b:92:15:af:
                    78:c2:ac:a3:48:85:47:94:ff:d6:d3:ad:e6:da:12:
                    a8:f8:e4:79:97:da:d2:ec:03:5c:5c:0d:29:03:9a:
                    a6:13:8b:eb:8c:04:42:dd:c8:ef:38:7b:bc:84:95:
                    9f:53:95:ee:8a:29:f4:0c:9c:9e:82:49:8e:ff:30:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:1C:27:F8:C6:B7:49:38:B7:E5:7B:36:05:DF:20:25:F3:B5:56
            X509v3 Authority Key Identifier:
                keyid:BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/L2scJ_jGt0k4t-V7NgXfICXztVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/v_tqPY4iZPEFixKr_eu-ocJIxmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:6f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:ec:10:d3:8c:92:a3:ed:5b:73:85:c8:c3:7e:6e:76:a9:
         81:49:ed:1e:88:3a:1f:4e:f4:d1:24:8a:eb:d2:8a:0b:dc:46:
         ea:d6:f3:c6:fa:3f:36:f2:16:4b:e2:0a:57:c1:dc:46:6c:6b:
         c1:91:bd:08:35:18:83:d8:71:f9:08:f1:f0:18:02:5c:2c:55:
         ab:46:e8:98:19:f2:7d:19:03:8e:1d:9a:43:6a:3b:b8:61:26:
         48:a3:b4:75:1a:52:c6:34:f8:48:2e:0f:32:a5:4b:73:df:82:
         34:ce:61:08:74:d9:4a:a6:72:b9:05:b7:73:20:f1:a6:a2:a9:
         a3:0b:2a:a8:8f:a4:f5:6d:75:ba:85:50:03:58:e3:7b:2d:bf:
         40:8f:72:e6:81:1b:21:d9:e9:c6:11:b1:f2:63:37:e8:e5:20:
         84:42:67:46:ca:d4:73:60:0b:99:7d:f6:1d:ad:67:99:9c:e5:
         2c:03:cf:94:75:62:44:db:cf:77:64:b6:81:65:6e:40:1b:2d:
         e7:18:c2:86:6d:b7:00:30:48:71:60:7d:80:f9:8a:aa:55:c9:
         29:81:d5:c8:d9:43:6d:b4:13:20:03:2a:53:3c:a9:71:1e:d7:
         d9:87:fe:05:50:2a:07:73:67:15:c2:6f:a4:61:cc:21:1a:b6:
         bc:53:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org