Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/djpxcH2_73s0I4QORj6-m9MDTSE.roa
File:                     djpxcH2_73s0I4QORj6-m9MDTSE.roa (raw, json)
Hash identifier:          CVZ3F+hLrV7VEgDN+MFK4Pqg+INi1dfMLWIZiNqr4bw=
Subject key identifier:   76:3A:71:70:7D:BF:EF:7B:34:23:84:0E:46:3E:BE:9B:D3:03:4D:21
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1989DC51
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/djpxcH2_73s0I4QORj6-m9MDTSE.roa
Signing time:             Sun 08 May 2022 03:26:56 +0000
ROA not before:           Sun 08 May 2022 03:26:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:851::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:850::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48
                          2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:5ef::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:5ed::/48 maxlen: 48
                          2a06:a005:5ee::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428465233 (0x1989dc51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  8 03:26:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=763a71707dbfef7b3423840e463ebe9bd3034d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:d3:9a:6d:06:a0:d8:00:06:a4:b1:ed:42:
                    07:67:02:dc:3d:26:ef:f5:35:07:43:4b:46:21:fb:
                    df:81:21:5d:32:fd:08:af:38:40:ee:8e:1b:ab:ab:
                    92:a5:89:eb:6a:60:9c:97:21:28:ad:92:9c:cb:06:
                    c0:ba:38:61:4d:61:2e:27:05:52:7f:a7:14:c6:cf:
                    9e:67:6e:a7:2f:f2:3c:13:ff:6f:1c:5f:cf:27:83:
                    54:2a:d2:bc:13:30:76:d4:d3:c6:85:53:30:48:1c:
                    4c:79:d6:b9:21:a7:a4:06:9f:2e:84:db:cb:e1:f2:
                    83:d7:02:fd:1c:93:69:60:44:bd:9c:21:56:e7:73:
                    ae:25:77:33:9d:50:d5:bb:86:44:7a:f1:12:46:29:
                    6e:19:1f:28:13:3a:b2:60:b0:0d:02:f1:f3:38:21:
                    1f:d7:4e:b1:2e:63:61:b6:43:2f:8e:87:3e:3c:e0:
                    a4:02:70:4b:d7:24:c0:6e:32:64:b4:59:4b:5a:8a:
                    94:3c:14:ff:e5:1d:db:49:cf:cd:1c:e6:19:af:11:
                    43:45:52:30:55:a9:ca:a1:a7:d8:3e:a3:ac:85:0d:
                    32:77:1c:2e:5c:ea:9c:89:d4:9e:fc:8f:8c:1e:df:
                    53:da:16:18:2d:f9:af:96:c2:57:cf:47:4b:ce:38:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:71:70:7D:BF:EF:7B:34:23:84:0E:46:3E:BE:9B:D3:03:4D:21
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/djpxcH2_73s0I4QORj6-m9MDTSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::/48
                  2a06:a005:5e8::/45
                  2a06:a005:850::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:b3:40:18:77:d3:57:6d:33:45:5b:71:9a:35:68:20:9a:
         18:ab:fc:44:0e:9c:b5:af:48:00:19:76:3b:75:5d:24:d2:c3:
         cb:54:1d:b7:74:7a:93:df:eb:46:34:60:7f:87:df:f1:a5:c8:
         e5:cd:54:14:ed:75:bc:f3:a8:59:82:2b:6d:ad:84:96:28:6d:
         d7:88:3b:2a:d1:c6:4c:f5:bf:4f:68:31:fe:04:39:69:b4:69:
         28:4e:8b:ce:9d:c4:78:be:4f:c0:35:63:be:00:b9:b6:7e:b3:
         e8:d2:58:07:b6:85:a9:54:4c:5a:81:2c:f8:d6:a4:c6:47:44:
         ec:be:05:65:d1:6b:ef:f1:69:cf:2f:f9:73:43:ad:d3:c4:e7:
         83:09:26:43:70:48:9d:33:64:20:23:9b:be:26:38:45:dd:76:
         e2:6a:04:0c:eb:0b:0c:83:60:c0:b5:5f:40:68:97:18:18:ac:
         e0:4c:b5:b1:4c:bd:61:60:93:3e:12:99:06:63:80:ea:b2:07:
         64:10:ef:8d:d4:50:ba:30:7d:14:06:27:27:62:34:f9:fc:77:
         ac:25:41:66:9a:e8:8a:2e:d6:0c:73:76:cc:89:b5:48:87:86:
         8c:5e:67:7d:37:f8:22:e9:39:6d:b8:00:ef:f9:b5:d7:79:89:
         3e:de:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org