Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/Mpr7MhUekAvfGhgmrYqxKK8GGnE.roa
File:                     Mpr7MhUekAvfGhgmrYqxKK8GGnE.roa (raw, json)
Hash identifier:          8AnZrMQON3fzjkA1siqA7i6k5Tj8UdszPkhRIec/nWo=
Subject key identifier:   32:9A:FB:32:15:1E:90:0B:DF:1A:18:26:AD:8A:B1:28:AF:06:1A:71
Certificate issuer:       /CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Certificate serial:       010B2B
Authority key identifier: BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/Mpr7MhUekAvfGhgmrYqxKK8GGnE.roa
Signing time:             Thu 10 Feb 2022 09:59:58 +0000
ROA not before:           Thu 10 Feb 2022 09:59:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141677
IP address blocks:        2a12:6f40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68395 (0x10b2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
        Validity
            Not Before: Feb 10 09:59:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=329afb32151e900bdf1a1826ad8ab128af061a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:29:5c:b8:e5:0c:7b:e1:1e:54:2d:6f:bc:
                    19:cc:1e:f1:54:af:a7:a5:b2:3e:ab:b9:bf:fe:e5:
                    23:f0:37:f7:78:0f:89:60:44:b5:f2:27:8e:6b:15:
                    fa:a1:de:23:e2:b9:e4:fa:f1:b3:32:87:1f:cb:09:
                    73:5b:77:88:ec:73:12:ba:79:18:23:d0:72:51:3a:
                    23:0c:36:bb:d6:b3:d5:0f:dc:33:1c:8c:c9:ab:a7:
                    92:f9:03:6a:df:a7:ea:80:8a:0d:61:4a:8a:dc:f0:
                    a0:8e:d1:b8:2c:b1:b5:44:33:47:b0:f1:84:e8:9a:
                    cf:be:b7:45:45:4e:1f:0b:72:dc:77:19:75:8f:5c:
                    bc:af:d6:3b:e9:58:eb:37:8b:eb:75:7b:ed:e4:dc:
                    80:f3:d2:3c:02:0f:bb:6c:df:95:c5:39:15:75:ad:
                    17:a0:31:15:e3:14:ab:08:60:ac:4c:2f:75:20:51:
                    20:58:a8:73:bc:cd:2c:84:ff:6b:ad:fd:ee:f8:f0:
                    41:4d:04:dd:57:f7:33:42:1c:b3:b0:8b:34:a9:d1:
                    66:00:22:11:9a:53:8c:ef:39:e9:0d:e8:57:b3:75:
                    11:a0:48:5e:3b:1a:d2:98:89:f6:f2:3e:b5:3e:e2:
                    7a:ee:ae:5d:d1:d2:62:83:aa:40:a3:f0:99:8f:72:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9A:FB:32:15:1E:90:0B:DF:1A:18:26:AD:8A:B1:28:AF:06:1A:71
            X509v3 Authority Key Identifier:
                keyid:BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/Mpr7MhUekAvfGhgmrYqxKK8GGnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/v_tqPY4iZPEFixKr_eu-ocJIxmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:6f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:72:e5:73:26:38:8c:a1:62:dd:89:ca:9d:39:76:8c:02:
         bb:dd:94:63:3d:2b:14:1a:31:e4:a5:dc:69:99:52:6c:24:00:
         81:3a:ee:3d:92:b8:63:39:1a:e6:46:54:07:9d:f9:47:c0:ef:
         f4:8f:af:65:d5:b9:89:24:88:95:2e:55:d7:41:2f:82:f6:28:
         a7:06:02:99:d5:d9:40:9c:51:3c:16:32:bd:c7:aa:7b:0e:c0:
         32:74:e4:b7:59:55:4a:9b:e3:da:da:cf:ec:96:c4:b3:d1:27:
         6c:5b:45:8a:d4:62:16:8c:82:25:69:f0:2c:c3:3f:06:ea:dc:
         d3:77:01:4b:99:95:ec:85:9f:03:77:ee:f8:99:86:4e:43:66:
         8b:4b:ec:20:0f:fe:07:cb:83:de:6b:fb:e4:2d:b9:3f:a2:fc:
         b2:61:5b:e1:b4:2b:e5:80:1c:55:37:b5:ab:de:29:0e:5b:18:
         1d:cc:fd:87:16:ad:f1:09:2d:7b:81:f6:e2:b8:75:e7:cf:4d:
         07:2b:88:72:12:2a:02:b7:0f:c0:b1:83:ef:9c:64:12:da:64:
         d1:c5:fd:7c:dc:6d:8c:b2:87:90:84:83:5b:7e:88:6f:b2:f3:
         de:8d:ff:72:b9:b4:94:52:ba:41:b6:d4:c0:e5:b3:2c:cd:91:
         74:f5:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org