Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa
File:                     FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa (raw, json)
Hash identifier:          W7bD7Z6+FA9phutu8Fb/vtFgQK3zA4K1/uRDAtkWNnM=
Subject key identifier:   15:D4:E5:A3:90:CD:2F:EE:B0:D1:01:73:1B:3C:EA:DA:90:C9:5B:44
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A1DA2E5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa
Signing time:             Wed 25 May 2022 14:48:14 +0000
ROA not before:           Wed 25 May 2022 14:48:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211144
IP address blocks:        2a06:a005:431::/48 maxlen: 48
                          2a06:a005:9f0::/44 maxlen: 48
                          2a06:a005:440::/44 maxlen: 48
                          2a06:a005:2d0::/48 maxlen: 48
                          2a06:a005:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438149861 (0x1a1da2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 25 14:48:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15d4e5a390cd2feeb0d101731b3ceada90c95b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:3f:42:57:a6:df:c8:bf:26:41:f1:59:07:
                    92:a5:63:45:f6:ed:39:a5:d2:ce:d9:98:ce:7d:e6:
                    02:c6:99:52:a2:c0:2d:bb:b6:b6:9c:e9:b7:82:84:
                    35:1e:99:26:32:12:7f:d2:f4:0d:24:66:cf:7f:7b:
                    99:f6:26:f2:f0:7e:e8:b0:9c:e3:6f:d2:07:15:3f:
                    7a:ec:69:d9:7c:96:74:63:c1:99:97:4a:6b:d8:a2:
                    45:e8:00:0d:92:a7:38:8a:57:9d:38:85:16:36:6a:
                    48:6e:ab:41:cc:dc:a9:9d:5c:59:c1:68:b3:43:e0:
                    08:85:b7:f0:5e:8e:f0:f8:f0:4b:80:1f:09:f7:20:
                    52:8a:05:73:7c:73:67:e3:a5:0d:86:88:88:88:58:
                    41:08:30:5c:f1:40:41:f9:9a:ec:5c:3c:96:f0:1e:
                    b0:75:09:40:41:0c:ee:33:39:65:0d:6f:30:45:76:
                    94:d8:6b:e6:39:07:85:06:93:55:84:4a:d7:29:cc:
                    6a:99:ca:f0:bb:d1:99:17:e5:1a:2c:9b:45:3c:ff:
                    6f:60:d0:42:aa:f2:88:59:15:8c:ea:b5:4f:c2:f2:
                    3e:2f:f6:98:ec:28:07:e0:b4:50:1f:b7:5c:93:cf:
                    00:e5:eb:fc:cc:a6:ff:90:8e:ab:75:79:fd:be:bf:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D4:E5:A3:90:CD:2F:EE:B0:D1:01:73:1B:3C:EA:DA:90:C9:5B:44
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18::/48
                  2a06:a005:2d0::/48
                  2a06:a005:431::/48
                  2a06:a005:440::/44
                  2a06:a005:9f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:cd:ab:9c:3e:bb:4f:f2:3b:85:3e:94:93:f0:a2:34:5b:
         07:c1:66:f8:aa:04:71:b4:8f:27:b2:d8:3b:fb:40:70:68:09:
         de:32:56:ab:88:a1:b0:cf:62:b0:71:c7:d7:ad:57:f5:ea:f8:
         24:01:40:82:46:c3:d1:50:8c:68:54:ef:dd:74:55:98:ce:ed:
         76:3b:25:93:2d:7d:a4:44:8c:06:54:8d:86:97:01:5a:e0:db:
         39:44:f7:6c:76:e4:bf:1b:cb:6b:91:dc:d8:b0:27:d5:5f:1c:
         eb:69:3e:bc:67:13:54:43:ba:bf:72:02:b0:b8:e0:ef:f4:a2:
         63:39:39:78:15:9d:d5:89:8e:cf:63:e8:d2:7a:b0:f8:6e:51:
         d9:45:e6:24:c1:d3:7c:09:a7:a5:50:36:35:5f:0f:11:0b:0c:
         37:17:76:6d:67:4b:aa:ff:ca:93:95:90:39:46:f4:15:9b:33:
         18:17:d2:76:bd:86:4d:92:04:b0:42:cd:46:06:53:9b:04:c1:
         35:eb:b5:71:5b:44:05:b1:9e:e6:64:27:05:a3:4f:a7:c7:9d:
         48:78:15:07:97:1e:34:38:e0:11:b5:c5:00:8b:91:b0:cd:17:
         3a:76:d7:7d:8c:20:8d:0e:c1:51:c2:a8:34:44:19:1f:46:ca:
         ff:18:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org