Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WnhQripM4QNxNxAsfwqQnKihq2Y.roa
File:                     WnhQripM4QNxNxAsfwqQnKihq2Y.roa (raw, json)
Hash identifier:          15oBLcK+1VDsTTIhtL2iiG/esLKITJSwbslwadhNrz8=
Subject key identifier:   5A:78:50:AE:2A:4C:E1:03:71:37:10:2C:7F:0A:90:9C:A8:A1:AB:66
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E22337AA6409E2A82549C1E6B778C17D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WnhQripM4QNxNxAsfwqQnKihq2Y.roa
Signing time:             Mon 05 Dec 2022 11:54:29 +0000
ROA not before:           Mon 05 Dec 2022 11:54:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200907
IP address blocks:        2a0a:6040:e100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:23:37:aa:64:09:e2:a8:25:49:c1:e6:b7:78:c1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 11:54:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a7850ae2a4ce1037137102c7f0a909ca8a1ab66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:73:71:8b:dc:cb:f7:99:3e:3c:f3:bf:e5:
                    98:c6:c7:09:28:9f:ef:c5:d7:c1:50:0b:15:2b:b5:
                    61:bb:24:e8:2d:25:21:e7:3c:1a:58:df:ad:40:33:
                    33:e9:22:e2:1c:85:88:80:98:3f:41:21:b2:46:9d:
                    c4:bc:49:ea:97:e7:03:0b:b5:69:ef:5d:fb:e7:eb:
                    50:7f:dc:5b:79:72:15:7e:f2:1a:1e:e9:97:d6:05:
                    1f:17:e9:d7:65:11:f0:f3:2d:77:d7:be:0f:da:4b:
                    ff:19:44:4d:56:bd:69:e8:16:53:6f:67:16:b0:90:
                    78:16:e3:8a:18:78:a3:5a:09:1e:b5:d1:92:3b:6a:
                    9f:b9:95:d9:be:c5:f1:a7:f4:81:6a:12:12:90:e7:
                    c1:b9:ef:5d:79:48:29:d3:f0:82:11:26:8f:94:c8:
                    29:1c:03:d9:57:aa:d5:a0:55:19:58:db:82:fb:16:
                    63:42:10:fa:87:ff:f3:7b:07:96:e8:1c:44:50:19:
                    60:a1:fa:3b:a7:f0:e0:e9:51:75:03:a1:27:b1:a5:
                    fd:1e:2e:34:fe:a0:b6:8e:17:21:ae:a4:e2:eb:55:
                    80:ec:9d:f4:30:66:13:0b:42:a4:83:14:5c:b7:62:
                    86:8b:1c:ff:d6:11:6b:ba:bf:06:5c:4c:5e:73:69:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:78:50:AE:2A:4C:E1:03:71:37:10:2C:7F:0A:90:9C:A8:A1:AB:66
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WnhQripM4QNxNxAsfwqQnKihq2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:69:f2:da:ce:38:93:c9:61:a2:39:63:58:56:e3:43:3c:1e:
         cc:91:f2:88:44:a1:00:d9:b7:32:7a:16:b0:44:37:2b:51:cc:
         2b:f7:68:e2:9a:8b:ab:ce:96:2f:cb:25:92:f5:24:19:40:f4:
         02:d0:2f:ea:a9:3e:68:5f:4c:cd:85:00:a3:1b:d3:d6:19:e3:
         1b:0f:aa:45:d4:c2:4e:79:9e:ce:ec:71:89:29:b6:c3:4c:8a:
         87:f8:85:cf:01:27:d8:df:75:45:4e:81:3e:2f:7c:f5:fd:f7:
         af:79:b2:d6:98:f6:e7:54:9d:cc:b4:83:7a:9a:60:c4:83:60:
         29:1f:a6:fb:ac:76:4b:0f:55:8c:79:ea:bd:33:53:0c:d0:6a:
         c9:58:e6:66:2c:01:02:ff:f0:d6:ff:72:c1:f9:ee:70:00:33:
         78:83:23:55:d2:92:28:29:01:0d:c2:3d:67:b6:41:16:58:d5:
         fd:9a:49:94:20:31:eb:8a:ba:81:5c:08:11:4d:e0:35:7a:bf:
         7f:fa:be:1d:a5:b4:54:69:ea:65:6c:2a:61:6d:c2:6a:64:a1:
         a0:a1:9c:3c:1e:6e:0c:1b:1f:a5:35:37:bc:76:6d:82:a0:c8:
         36:8d:2d:88:6e:48:bd:30:79:72:e7:87:39:af:9e:59:08:f9:
         92:b1:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org