Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa
File:                     Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa (raw, json)
Hash identifier:          e70u6weRDBV6JWEkJ4iTDPkd6bFoI2WC8caeKQY0SWQ=
Subject key identifier:   62:BC:78:24:F2:3A:B0:C3:A2:F6:31:0D:AF:E1:99:46:58:1D:A1:96
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15C02EC3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa
Signing time:             Sat 01 Jan 2022 05:59:08 +0000
ROA not before:           Sat 01 Jan 2022 05:59:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208046
IP address blocks:        5.253.84.0/24 maxlen: 24
                          5.253.86.0/24 maxlen: 24
                          185.99.135.0/24 maxlen: 24
                          2a06:a000:160::/44 maxlen: 48
                          2a06:a001:a010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364916419 (0x15c02ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62bc7824f23ab0c3a2f6310dafe19946581da196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:a0:fc:76:56:bb:39:cc:5b:76:0c:c7:9a:
                    f5:c4:99:d7:34:75:5f:0a:c4:a0:d9:f3:c7:c5:8e:
                    3b:fa:1d:e6:e0:68:ec:5d:22:73:11:33:74:c2:f4:
                    be:52:50:31:1c:2b:11:eb:1a:db:c5:83:b3:c1:b3:
                    e4:a7:5f:d7:96:27:58:6b:53:06:10:e5:0b:a2:86:
                    81:2f:3a:e7:44:90:3a:dc:cc:fb:90:a1:91:04:ec:
                    e5:ff:a5:b7:cc:43:9c:42:7c:3b:7c:75:06:04:12:
                    51:19:3d:5c:61:f1:70:a7:f0:72:52:e6:03:2b:bd:
                    51:93:d2:05:36:5f:e8:eb:53:2d:9f:d9:18:76:d3:
                    57:7b:81:26:f0:64:d3:aa:19:5d:9d:be:43:75:68:
                    28:55:cb:b9:ff:bc:92:b2:35:4e:81:03:60:f8:39:
                    b2:fc:ca:b8:dd:6c:2b:54:37:0d:ce:ff:2f:d3:c6:
                    9d:a3:40:8b:f5:e7:02:24:20:4d:43:80:86:86:16:
                    3d:b6:9b:c1:01:ac:bf:0a:78:08:f2:03:12:00:7c:
                    75:3a:1f:82:f3:ea:f8:92:5f:df:95:ba:87:53:f6:
                    14:9c:63:6d:9b:5d:37:10:db:7e:95:35:02:5e:91:
                    cc:74:b8:1c:26:01:5c:22:a4:c1:5a:0b:2c:22:cd:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:78:24:F2:3A:B0:C3:A2:F6:31:0D:AF:E1:99:46:58:1D:A1:96
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.84.0/24
                  5.253.86.0/24
                  185.99.135.0/24
                IPv6:
                  2a06:a000:160::/44
                  2a06:a001:a010::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:ec:5c:95:84:75:c3:5d:df:d0:fa:cc:7f:ab:23:77:08:
         c6:2b:b3:c7:8b:94:2b:4f:3c:4b:09:05:6d:ad:00:b3:08:6e:
         40:1e:a7:a7:89:64:d8:f4:43:a4:f0:10:df:88:5b:1f:ac:2b:
         7e:db:63:f3:2c:2f:06:47:b3:46:41:ce:c2:69:ff:2b:93:b6:
         9c:a8:d4:0c:8b:88:d1:de:f3:80:7a:16:be:f5:b4:10:3e:d3:
         ea:46:d4:72:22:75:44:64:4c:9e:f4:74:68:a4:68:71:aa:db:
         a3:e8:85:8a:1f:24:13:59:a5:a6:1f:5e:92:23:14:10:b3:dd:
         99:e0:ab:e1:3a:4b:42:8f:24:21:3e:5e:73:1d:7a:c1:59:91:
         c2:aa:8f:b1:8c:b7:50:7e:6e:c1:de:8c:86:35:53:cc:b5:8a:
         6d:32:8c:46:e5:b9:e1:d8:b3:52:8b:18:f2:a7:ab:7d:d3:a1:
         6f:45:d0:34:b1:52:d4:9f:da:9d:ac:9f:82:13:73:16:1c:84:
         b9:37:32:f0:6e:c1:cb:34:40:25:7e:58:17:c0:d1:99:3e:cc:
         7b:58:b8:61:59:49:45:62:e1:82:66:1e:f2:6b:9d:b6:7f:31:
         4a:f0:90:58:38:f1:b0:41:e4:01:30:b8:6e:1b:4e:31:06:77:
         09:b1:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org