Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/c2n--gaXhxt4oCQDSvm4Y2H79lo.roa
File:                     c2n--gaXhxt4oCQDSvm4Y2H79lo.roa (raw, json)
Hash identifier:          fClagmJNNSFpV2zrdLHJVdyK1dE7YwvQBl5+3/I+Z+k=
Subject key identifier:   73:69:FE:FA:06:97:87:1B:78:A0:24:03:4A:F9:B8:63:61:FB:F6:5A
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183B1744F9F2384C97E8C9D5593081B7E4A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/c2n--gaXhxt4oCQDSvm4Y2H79lo.roa
Signing time:             Fri 07 Oct 2022 07:58:53 +0000
ROA not before:           Fri 07 Oct 2022 07:58:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210703
IP address blocks:        194.150.205.0/24 maxlen: 24
                          194.150.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:74:4f:9f:23:84:c9:7e:8c:9d:55:93:08:1b:7e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Oct  7 07:58:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7369fefa0697871b78a024034af9b86361fbf65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:6d:e7:c1:9c:63:75:bd:a9:59:ce:63:6a:
                    88:9a:94:b7:fa:bb:eb:4f:6b:ec:2d:7e:8d:20:66:
                    43:70:9f:17:33:8f:a5:0f:06:cc:9b:c3:94:da:d6:
                    04:1b:53:3d:c8:98:ef:a9:33:b7:16:fc:ca:f5:d4:
                    56:65:46:b7:5f:ef:45:d7:8b:ba:25:ca:97:6f:8d:
                    84:56:72:9f:bf:e7:d9:28:a2:0c:8b:7d:e5:af:a0:
                    c6:71:f8:e6:de:84:37:21:dc:58:49:7e:d4:52:c9:
                    3e:89:10:57:6c:ce:79:a5:b2:c3:3a:4f:20:b7:39:
                    0c:ac:cb:6d:31:9e:95:b8:d5:ca:b6:f2:6d:8e:f4:
                    9f:35:f2:02:80:67:c4:bf:99:65:48:75:20:28:c5:
                    ec:17:d8:4a:30:41:f0:c7:49:80:7d:d0:c2:95:c3:
                    99:a1:d9:84:12:ef:16:7b:a4:21:ac:73:e1:17:c9:
                    5a:65:09:5a:3f:76:f1:97:f7:98:02:3a:58:da:9e:
                    17:d6:92:75:2d:69:9c:0b:78:5e:18:11:dd:31:4c:
                    a8:5d:46:7a:cd:df:d2:c6:b1:59:6f:c8:b8:9d:e9:
                    39:ef:bd:7b:69:a4:3d:89:d2:8a:09:ae:1f:b6:2c:
                    7a:62:df:22:bb:2c:ca:38:cd:b1:36:19:ab:ac:23:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:FE:FA:06:97:87:1B:78:A0:24:03:4A:F9:B8:63:61:FB:F6:5A
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/c2n--gaXhxt4oCQDSvm4Y2H79lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.205.0/24
                  194.150.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:95:9c:c5:c4:ab:dc:3a:77:30:6e:24:a2:7d:8d:09:a2:1e:
         bf:dd:e6:30:79:a2:4a:10:70:62:6a:f5:a0:ce:5f:e6:d6:33:
         c1:9b:cd:b1:3c:26:bd:df:a2:9d:cd:4c:dc:79:d9:f4:b2:b7:
         70:bf:82:82:f3:51:53:99:3c:1d:05:f9:cf:9c:ff:68:be:10:
         33:64:98:c9:f5:e2:da:06:b5:13:e8:03:11:aa:45:d1:62:84:
         e0:01:61:39:b9:a4:ba:82:7a:f7:6c:46:41:8b:3b:ee:ae:b6:
         d2:64:ba:43:42:8a:23:f6:d1:26:cb:40:b2:9c:c5:b2:b4:76:
         c9:8f:66:fd:96:db:7c:25:36:f6:08:4d:87:60:6e:9a:c4:2c:
         7d:7d:ba:dd:03:d6:a6:bd:9a:eb:92:98:44:3f:47:78:96:0a:
         c8:eb:d2:1b:86:00:da:04:d3:65:14:68:50:1d:bd:bc:f1:49:
         e1:d7:78:41:0f:05:06:33:ac:30:ee:a7:0a:a6:7c:40:02:7a:
         b4:c3:7a:78:25:a7:00:f2:7a:08:97:12:d0:79:45:ca:25:49:
         c3:af:61:7c:49:22:13:c5:23:54:24:fd:42:2b:de:af:5a:70:
         23:6b:72:22:4e:a8:f6:ea:18:ce:0d:ce:82:83:9b:4b:10:d7:
         77:71:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:16 2024 by rpki-client on console-fra.rpki-client.org