Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DIJLGpkjZtmS6DW4lye9H5RTpOU.roa
File:                     DIJLGpkjZtmS6DW4lye9H5RTpOU.roa (raw, json)
Hash identifier:          3YAmgNTUp6GUACtAJmJ4J+ZptzMg6EwGjiCW+lc6XZc=
Subject key identifier:   0C:82:4B:1A:99:23:66:D9:92:E8:35:B8:97:27:BD:1F:94:53:A4:E5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182007B82841F185A468A35D03CB5CD6009
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DIJLGpkjZtmS6DW4lye9H5RTpOU.roa
Signing time:             Fri 15 Jul 2022 06:11:10 +0000
ROA not before:           Fri 15 Jul 2022 06:11:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204333
IP address blocks:        2a06:a005:d21::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:00:7b:82:84:1f:18:5a:46:8a:35:d0:3c:b5:cd:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 15 06:11:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c824b1a992366d992e835b89727bd1f9453a4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:4e:e3:71:af:4a:9d:43:f4:e4:5b:a7:a3:
                    17:eb:39:d0:d7:98:3e:de:96:45:0b:92:5b:37:89:
                    f6:77:a5:23:55:fb:60:1e:2e:76:df:d7:1d:cd:76:
                    75:f3:7c:83:2d:96:ff:4c:c6:87:af:4f:93:22:78:
                    7b:67:f9:e4:da:ce:0c:5f:3c:9e:cf:22:e5:89:e3:
                    6f:dc:c2:ee:ef:2a:d5:16:21:55:f0:ec:d3:34:a2:
                    af:e5:8f:7e:b6:89:de:86:be:77:ad:6c:bb:14:9e:
                    b9:bb:ed:0d:c7:cf:2c:01:04:5c:a4:18:59:12:e4:
                    d4:b9:db:ab:c3:77:b5:7b:88:3b:c7:09:90:a8:70:
                    6b:9c:1c:e5:75:24:77:c6:d7:9f:8e:cf:f6:ef:3b:
                    fe:a2:4e:7e:e6:cd:12:a7:0f:17:4e:db:21:52:19:
                    b4:10:fd:27:26:b8:cf:6d:af:62:22:57:79:93:b8:
                    5a:3b:a8:49:a3:79:87:68:b6:06:5c:31:b3:74:3c:
                    12:ae:48:0b:1b:fb:01:18:2b:27:db:0b:15:da:b5:
                    df:53:57:4a:e4:58:45:01:82:a6:c3:97:3f:21:0e:
                    2c:ef:c8:f0:11:08:e7:4e:b3:ed:fa:ea:25:a9:36:
                    bf:de:df:18:68:14:2e:28:17:fd:6b:bc:25:46:9c:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:4B:1A:99:23:66:D9:92:E8:35:B8:97:27:BD:1F:94:53:A4:E5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DIJLGpkjZtmS6DW4lye9H5RTpOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d21::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:dc:3e:42:e1:3e:30:bd:d2:06:87:46:81:6b:0a:c9:cc:
         21:01:8f:fa:e6:52:d0:df:a1:d7:e4:ab:e2:25:be:d1:44:5a:
         41:ae:c3:73:09:c8:32:ea:41:bf:75:0d:86:ec:1a:45:7f:14:
         97:0b:db:7c:99:e5:3a:ba:99:f9:cf:04:f4:86:e8:6b:91:95:
         46:81:31:04:81:72:73:d2:f3:be:95:93:60:f2:a8:e9:d4:72:
         9d:a2:60:84:29:b1:63:a4:3f:3c:a9:23:11:46:b4:e4:85:e8:
         4d:19:4d:06:16:f3:87:13:3c:40:f2:d6:63:e8:a1:8b:b3:91:
         0c:f5:74:bd:c9:26:a2:e0:fd:5a:2e:57:29:ed:96:b9:7e:f9:
         7a:e6:d3:20:b9:ff:d1:16:d0:6f:dc:1f:ac:76:e5:c4:a0:ab:
         97:97:d2:78:11:24:6a:ec:97:c0:a2:20:f7:9b:ea:57:7c:9f:
         95:8c:ec:3c:fa:73:94:39:33:f2:55:53:11:46:b0:62:c8:79:
         79:f3:5d:46:a2:c2:c5:98:c3:b3:c7:fa:df:99:5e:0a:8c:ea:
         d4:97:be:72:38:ba:9c:4a:13:89:e3:b2:97:b2:d4:69:af:ca:
         f7:a8:4c:1b:8b:25:a7:2b:6c:0f:68:e7:e2:a4:cb:95:cf:0b:
         58:26:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org