Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oG4QHJfHro7-SDKpv0gdrdVYOTI.roa
File:                     oG4QHJfHro7-SDKpv0gdrdVYOTI.roa (raw, json)
Hash identifier:          WzDjgfRADPTbIP2epbIhNguSk/5bWCjLjE5yHTEOiMs=
Subject key identifier:   A0:6E:10:1C:97:C7:AE:8E:FE:48:32:A9:BF:48:1D:AD:D5:58:39:32
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840BC2EB1C3066AD36927733CCD8EAA7E0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oG4QHJfHro7-SDKpv0gdrdVYOTI.roa
Signing time:             Mon 24 Oct 2022 20:50:34 +0000
ROA not before:           Mon 24 Oct 2022 20:50:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211535
IP address blocks:        2a06:a005:1670::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0b:c2:eb:1c:30:66:ad:36:92:77:33:cc:d8:ea:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 24 20:50:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a06e101c97c7ae8efe4832a9bf481dadd5583932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:8b:75:5a:24:de:11:80:1a:81:55:42:35:
                    a6:c5:68:af:e2:fe:ba:27:85:b1:f8:70:98:4d:97:
                    54:76:d2:33:7d:eb:2f:aa:e9:0e:fc:dd:ac:82:03:
                    2e:31:b7:b3:8e:fb:eb:cb:8b:35:93:a4:48:43:ea:
                    2a:c1:30:81:3f:82:28:7a:b8:b4:0d:96:b3:d2:e4:
                    1b:95:2f:aa:48:2e:73:e8:50:55:d3:77:fc:a2:04:
                    88:1d:5b:40:b9:e7:e0:f1:61:e7:26:b3:00:94:62:
                    ed:3a:3d:2e:72:91:8d:94:e7:f9:1f:64:26:89:82:
                    01:6e:a3:3d:9f:e1:f5:6f:e8:17:c2:c9:4c:91:6b:
                    6a:cb:c5:d8:59:82:78:33:e1:af:4f:d3:cb:c2:20:
                    02:88:2e:91:06:c1:c4:cf:43:03:1f:36:27:8f:b7:
                    97:d6:85:36:1a:03:38:c3:cc:e5:4a:1d:24:bd:14:
                    ac:a5:64:b0:e8:4f:76:44:92:61:69:d7:28:0d:b6:
                    bf:11:f9:7d:d7:46:17:28:ae:23:8b:07:c8:08:cd:
                    ce:3e:41:64:69:a5:7b:a1:97:76:d8:14:ee:bd:46:
                    cb:09:78:0b:0a:05:46:64:33:bc:b6:67:6a:52:bc:
                    77:fa:2f:e5:83:a2:68:bf:bd:68:fc:cd:73:16:b8:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6E:10:1C:97:C7:AE:8E:FE:48:32:A9:BF:48:1D:AD:D5:58:39:32
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oG4QHJfHro7-SDKpv0gdrdVYOTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1670::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:91:c9:62:69:9f:89:1c:6a:95:5f:8a:43:8f:d6:ec:c3:3d:
         70:0b:ca:97:9f:28:93:66:91:c7:35:9c:f4:8c:60:19:f9:19:
         85:63:45:76:9a:5e:cb:0c:ad:b9:52:62:fc:a1:fa:c6:54:b7:
         77:78:7a:1c:66:f8:6f:3d:8d:bf:1b:05:45:76:3f:fb:bc:50:
         dc:67:69:82:f9:57:ff:4c:89:8b:5b:cb:28:01:f8:d3:0d:56:
         7f:c6:5f:26:21:22:c1:5b:6c:9f:cd:95:f1:60:92:61:8c:dc:
         64:87:dd:bc:49:7f:b0:bb:2a:bd:9c:80:ad:4d:41:52:4d:0b:
         0f:04:76:50:0d:04:0f:d6:83:7d:80:28:69:56:90:db:d8:4f:
         b6:ca:e9:9f:c1:a2:62:de:06:80:da:0c:57:ed:95:6c:14:4b:
         db:02:3d:fc:78:65:dd:a2:bd:06:ee:1d:15:65:42:c6:f5:f5:
         28:b6:91:ab:b6:c5:1f:ac:ea:63:c1:4e:2d:42:2a:31:24:a6:
         ae:39:c4:df:2c:61:f7:ff:c3:52:ad:55:33:b0:c0:9c:3f:d9:
         c9:69:c1:d9:d9:fc:0b:81:7b:38:45:02:55:8e:be:b4:af:ad:
         76:19:ac:77:a0:42:07:c8:dc:5d:97:6b:95:b0:07:8b:39:10:
         61:33:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org