Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_X26GK0w-l3iYBGsr6gMzsmrPc.roa
File:                     1_X26GK0w-l3iYBGsr6gMzsmrPc.roa (raw, json)
Hash identifier:          sYZ9e+Uj/ZoFtcw0N9nSiF9/7SYzRmDf5iqpwpWFgtI=
Subject key identifier:   D7:F5:F6:E8:62:B4:C3:E9:77:89:80:46:B2:BE:A0:33:3B:26:AC:F7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B6F3D9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_X26GK0w-l3iYBGsr6gMzsmrPc.roa
Signing time:             Sat 01 Jan 2022 05:59:03 +0000
ROA not before:           Sat 01 Jan 2022 05:59:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     135610
IP address blocks:        2a0a:6040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364311513 (0x15b6f3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d7f5f6e862b4c3e977898046b2bea0333b26acf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:26:c5:9e:c8:5e:b8:e6:6e:00:39:3f:d2:
                    06:c1:54:dc:19:79:5b:b9:8e:f9:fc:43:2b:35:6d:
                    84:0b:1f:e0:a3:98:e4:c2:4c:f7:39:4f:89:ef:dd:
                    32:90:a2:ea:c8:e8:9d:81:d0:24:69:bb:5d:dc:cb:
                    c0:7d:59:4e:95:f3:be:9a:87:6b:4e:94:df:cc:70:
                    66:45:a0:14:26:c6:3a:5e:09:e3:91:31:33:3e:26:
                    1f:75:1c:13:de:cf:77:9e:37:ad:75:31:02:2b:b5:
                    3a:dd:a0:30:21:35:30:e2:41:f9:aa:0a:76:f6:c0:
                    e4:10:92:70:dc:9f:39:4f:21:10:12:c6:50:b9:f6:
                    7f:fb:c5:85:ff:8c:2a:4f:b2:43:de:59:3d:a4:75:
                    3a:1b:3a:88:63:c8:91:27:73:0b:08:af:d4:18:f6:
                    42:46:48:25:26:25:62:69:68:94:7f:e8:2a:ad:44:
                    e0:bd:a4:e6:85:03:1b:7e:be:0b:80:93:10:25:50:
                    c4:dc:c8:a4:d6:cc:1d:36:a6:51:59:34:c9:fa:de:
                    d9:fd:24:f6:a8:98:2d:03:83:2b:98:90:f8:56:a9:
                    4d:5b:be:33:a8:37:a6:6a:61:d0:a7:ca:47:74:c3:
                    d7:51:cd:ab:76:99:0f:a6:06:fa:1b:16:91:73:87:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:F6:E8:62:B4:C3:E9:77:89:80:46:B2:BE:A0:33:3B:26:AC:F7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_X26GK0w-l3iYBGsr6gMzsmrPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:15:b8:2e:77:73:21:53:ae:c9:90:60:21:48:72:4d:2f:
         2f:6d:dc:8c:cf:d6:99:0d:b2:35:9d:2c:37:e7:e3:eb:3d:e6:
         75:82:f3:d7:c1:09:37:93:89:59:23:f8:c4:5c:0c:c5:87:29:
         3c:e9:6f:b2:44:b1:af:72:5e:75:d5:78:6e:9e:9f:e4:42:08:
         a4:c2:46:97:2c:85:8c:68:87:a3:65:52:5c:c6:ef:8e:fa:5a:
         fc:73:72:e7:12:eb:1b:22:59:c9:0b:9a:5f:d9:7e:33:b6:63:
         61:5a:e5:92:60:4a:47:3b:92:ef:a9:cc:e2:a5:31:58:ad:15:
         3c:8f:32:7e:b7:ab:42:fe:8c:0c:0f:15:b9:a9:fd:1b:de:5b:
         95:3f:e4:6a:38:c0:45:4c:41:96:46:6b:9c:1c:b9:ba:7e:de:
         30:75:e7:c1:ca:9f:d0:1d:70:fd:04:e9:b1:7d:10:8a:0a:fb:
         ae:8e:37:f4:22:bb:d4:d7:b4:0d:81:27:a0:23:e1:c7:c3:2d:
         90:56:48:7f:91:bb:b4:59:c8:99:3c:6a:c7:36:30:ff:64:63:
         c4:71:ed:0d:22:3d:d1:39:3e:e0:d2:2b:15:fd:3e:89:a5:0d:
         c6:2f:c4:7a:59:c6:fd:b6:c8:82:38:80:16:0e:4a:01:ef:03:
         05:2d:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org