Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GryYYfBFeHHMtUBhxmNjj3WXR_s.roa
File:                     GryYYfBFeHHMtUBhxmNjj3WXR_s.roa (raw, json)
Hash identifier:          WOqL7aL5WHu7QpppenNIwch7BU2oJdT1Rw0BC70YlIM=
Subject key identifier:   1A:BC:98:61:F0:45:78:71:CC:B5:40:61:C6:63:63:8F:75:97:47:FB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184C9AC471972E24D9AD25CF953986045E9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GryYYfBFeHHMtUBhxmNjj3WXR_s.roa
Signing time:             Wed 30 Nov 2022 17:53:41 +0000
ROA not before:           Wed 30 Nov 2022 17:53:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201242
IP address blocks:        2a06:a005:1084::/48 maxlen: 48
                          2a06:a005:855::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c9:ac:47:19:72:e2:4d:9a:d2:5c:f9:53:98:60:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 30 17:53:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1abc9861f0457871ccb54061c663638f759747fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:24:14:51:3e:4d:24:98:15:35:5c:7d:59:
                    02:1d:1e:b3:28:ba:a1:ff:1f:6b:c9:48:48:92:db:
                    33:66:47:1c:cf:08:88:f7:c1:80:ad:8b:b5:27:25:
                    85:fd:cc:72:c7:8d:3a:8b:d3:5c:b3:47:48:06:97:
                    da:46:61:4e:31:28:ab:ec:35:a3:ad:38:f2:a5:ce:
                    13:6e:07:79:7a:6e:85:73:83:84:b9:b9:95:5a:e5:
                    6e:6b:1f:77:10:1d:27:e5:70:f9:1f:eb:d7:6d:ed:
                    e7:b0:e0:89:e3:68:5a:2f:68:a1:0c:62:05:57:d7:
                    23:97:91:a6:1d:86:63:31:1e:81:0c:4c:10:c3:e2:
                    08:23:ac:de:32:fb:05:14:c3:e5:1f:9b:11:67:ef:
                    29:e9:1b:ee:08:69:d6:e7:70:c2:29:a6:85:1e:ae:
                    42:cd:0c:dc:d9:4f:53:bd:86:0b:45:4a:49:63:f5:
                    e8:23:9d:6c:ef:0b:66:5b:63:22:d5:c3:56:33:8d:
                    f8:27:a0:34:d3:1c:aa:c1:f8:1b:4b:65:fe:ac:86:
                    9f:9c:ec:3e:37:dd:22:fa:93:b6:2c:3d:95:f9:f5:
                    62:41:0d:01:84:cd:48:07:e9:15:a9:7f:65:ae:55:
                    3e:24:54:7c:c2:9f:bc:1c:1f:ce:ff:89:80:79:d2:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BC:98:61:F0:45:78:71:CC:B5:40:61:C6:63:63:8F:75:97:47:FB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GryYYfBFeHHMtUBhxmNjj3WXR_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:855::/48
                  2a06:a005:1084::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:a0:67:59:66:ac:99:d9:e0:36:5f:a5:f4:a9:77:6e:8a:
         f4:9a:b0:86:d9:34:50:bf:d5:51:73:48:7e:fa:4d:34:0a:8f:
         73:68:22:24:4a:a0:31:11:13:1f:10:40:f5:05:e0:b0:72:c8:
         b0:09:6a:8a:45:8c:51:0d:36:4b:43:72:9c:eb:8c:16:39:52:
         db:43:e0:8f:8f:80:6e:85:f5:ab:06:6b:f3:86:28:17:34:71:
         a0:80:48:9c:11:c2:bb:f4:06:27:25:de:56:86:9c:70:c0:d3:
         cd:fe:ac:56:b4:6f:d9:bf:38:ac:ae:e6:9d:2e:6d:f2:1f:d3:
         ee:25:98:21:50:02:64:64:c9:0f:f8:cc:db:26:96:b3:d0:11:
         51:5b:6b:4f:61:93:75:fd:5e:65:34:0b:bd:59:29:d6:1f:ea:
         91:50:ce:ef:60:94:94:13:14:93:06:b1:fb:07:5c:d8:1f:c5:
         67:b0:3f:23:78:c9:b9:60:da:13:d0:f3:57:b4:a6:28:34:af:
         5c:a2:5a:bc:91:92:44:4e:c9:2b:e3:18:35:c3:8b:2d:8e:f0:
         e8:59:07:14:9a:ea:fc:19:08:80:a8:36:cd:4b:8a:95:3d:08:
         d9:d6:77:60:75:89:cb:b8:1e:bd:7c:ee:35:2d:0c:d0:e6:b3:
         1d:e8:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org