Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/8WvlDNrPQwxaP4lTC9HIOG8rDmI.roa
File:                     8WvlDNrPQwxaP4lTC9HIOG8rDmI.roa (raw, json)
Hash identifier:          zEHaXK1JPr3ofg3pXLpWzTIjVK3F0xUFnHe4BKCLNf0=
Subject key identifier:   F1:6B:E5:0C:DA:CF:43:0C:5A:3F:89:53:0B:D1:C8:38:6F:2B:0E:62
Certificate issuer:       /CN=989ab4e45f6426214cf0a4766e0aa62a4bb6107f
Certificate serial:       6A50E5
Authority key identifier: 98:9A:B4:E4:5F:64:26:21:4C:F0:A4:76:6E:0A:A6:2A:4B:B6:10:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJq05F9kJiFM8KR2bgqmKku2EH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/8WvlDNrPQwxaP4lTC9HIOG8rDmI.roa
Signing time:             Sat 01 Jan 2022 02:53:27 +0000
ROA not before:           Sat 01 Jan 2022 02:53:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        146.19.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6967525 (0x6a50e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989ab4e45f6426214cf0a4766e0aa62a4bb6107f
        Validity
            Not Before: Jan  1 02:53:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f16be50cdacf430c5a3f89530bd1c8386f2b0e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:ec:e3:4a:bc:64:66:97:2f:d7:79:ae:ad:
                    5e:bc:85:9b:ff:d3:1c:c7:43:d2:1a:28:4c:63:b6:
                    26:50:42:de:80:38:a3:a6:d7:55:e5:af:7e:be:b3:
                    23:da:86:6c:62:ac:36:bb:19:a1:73:65:f8:8c:8e:
                    5d:eb:17:2d:e5:65:c0:87:36:ed:78:87:a6:40:92:
                    67:02:9c:3c:3b:b8:5b:ed:66:6d:ac:97:1f:c8:d7:
                    1c:c1:b8:7b:d7:84:2e:8c:a6:f8:18:0d:93:0a:a5:
                    c9:d5:3b:65:ec:02:b8:72:3a:0e:83:23:a2:2e:4e:
                    4f:1f:8c:c4:6f:14:09:d5:10:64:3c:1c:f6:d2:7f:
                    a5:cf:bd:03:c9:9a:60:16:cc:3d:ae:bc:57:f7:50:
                    32:40:ed:39:73:cf:db:4e:9a:00:cc:af:96:91:6f:
                    cb:1e:56:f3:92:e3:93:04:95:a9:6b:dc:22:81:58:
                    8e:bc:4e:58:13:ec:a2:3d:af:1c:9b:75:23:92:43:
                    2a:5d:24:f8:64:5d:f8:38:87:01:fb:21:80:88:5c:
                    e3:77:1e:3e:fc:cf:37:73:e6:a5:bf:15:5c:95:ee:
                    12:5d:17:8a:d3:22:c9:65:ce:8d:7a:44:05:be:dd:
                    d6:01:fc:45:14:28:e1:86:41:fa:17:43:f8:a6:8e:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:E5:0C:DA:CF:43:0C:5A:3F:89:53:0B:D1:C8:38:6F:2B:0E:62
            X509v3 Authority Key Identifier:
                keyid:98:9A:B4:E4:5F:64:26:21:4C:F0:A4:76:6E:0A:A6:2A:4B:B6:10:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJq05F9kJiFM8KR2bgqmKku2EH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/8WvlDNrPQwxaP4lTC9HIOG8rDmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/mJq05F9kJiFM8KR2bgqmKku2EH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cb:50:3d:01:2e:d3:02:25:f1:33:64:d1:73:fc:90:8f:e7:
         34:0d:21:6e:85:9c:ef:7a:86:93:c6:e4:87:f8:5d:4f:3a:96:
         9a:71:b7:20:3e:b4:00:32:25:07:90:ba:4d:25:84:4b:8e:13:
         ef:8f:32:72:2c:cb:25:ef:c9:95:e7:61:73:f6:a3:08:b4:63:
         c4:89:bc:64:b2:da:25:32:eb:8b:69:be:9f:a5:0c:6d:4a:7b:
         9f:9b:03:74:8b:3a:22:36:59:ca:07:05:4b:78:86:3e:85:f2:
         16:e4:ce:55:47:d1:f5:ba:d0:66:81:c4:03:f1:13:8c:ed:f3:
         00:f7:3c:25:e3:a3:18:1c:ae:2e:27:a0:e8:b6:31:49:a4:b7:
         cc:b5:84:7f:7c:5f:09:ba:42:44:91:24:86:49:ce:7c:21:e5:
         19:38:57:e3:08:3d:7d:b5:e0:22:aa:29:27:3d:75:ca:4d:a2:
         ec:da:62:8e:52:5f:c6:1d:24:0a:00:83:a9:6b:6e:bf:c3:df:
         c6:42:a4:19:a6:69:3a:f0:1b:02:82:3b:ce:97:28:be:75:10:
         79:23:13:70:f4:55:e0:8b:8d:c5:94:38:33:49:cb:3c:a6:41:
         35:3e:fc:9b:69:11:78:14:61:d0:17:fd:27:3b:07:99:2f:56:
         10:7f:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org