Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa
File:                     DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa (raw, json)
Hash identifier:          yLFJYbY3F1lqQGGWrhCH+Myh2eO+ecDCSbINQC6abuc=
Subject key identifier:   0D:96:4A:CC:27:B4:6D:55:40:34:66:66:E4:06:7A:0C:25:BA:44:0F
Certificate issuer:       /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial:       6DB5
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa
Signing time:             Mon 28 Feb 2022 19:39:51 +0000
ROA not before:           Mon 28 Feb 2022 19:39:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        212.46.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28085 (0x6db5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
        Validity
            Not Before: Feb 28 19:39:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d964acc27b46d5540346666e4067a0c25ba440f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:9d:bd:cc:64:f0:97:b5:97:8f:6b:9e:38:
                    c8:8a:fc:a2:f6:e8:aa:7e:f1:c1:77:fd:17:47:98:
                    43:10:73:d2:79:61:16:37:d7:b4:13:ab:eb:b8:58:
                    8e:90:f4:b5:2c:23:8c:90:b4:f3:d2:ec:86:d3:27:
                    7c:57:ca:24:18:ff:71:aa:5b:0c:f8:ec:73:5c:21:
                    96:33:95:03:2d:30:57:5b:59:41:38:31:9e:eb:b8:
                    18:10:b2:37:0d:b1:60:52:53:04:d6:a4:58:cd:5e:
                    4c:96:f0:ea:1c:26:c0:9e:f5:7c:9f:9d:a1:74:8d:
                    8c:3a:c5:9a:53:06:60:6b:d9:93:3e:92:b5:80:79:
                    12:fb:dc:12:93:86:6f:d0:2c:11:b6:f8:ae:9e:f1:
                    6a:0e:63:ca:3c:e8:2f:2d:27:04:5e:05:2f:75:3e:
                    b0:0d:b8:6c:d2:f9:00:15:da:cc:31:1e:e5:c1:81:
                    50:1a:ed:3d:07:10:03:00:90:f7:5a:bb:45:ed:ce:
                    59:1a:a1:06:b6:c3:bc:23:ab:9f:d1:71:f7:2d:85:
                    85:ee:46:8e:a1:ea:78:a4:93:9f:ff:9c:8d:b6:5d:
                    a0:ba:b6:26:93:64:56:2c:eb:12:7e:25:b4:60:47:
                    eb:bb:05:61:86:32:3f:e6:1b:f9:fe:66:fa:19:22:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:96:4A:CC:27:B4:6D:55:40:34:66:66:E4:06:7A:0C:25:BA:44:0F
            X509v3 Authority Key Identifier:
                keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:c3:6a:17:5f:d1:15:2d:db:ee:ff:2b:d9:13:f2:29:59:
         ea:53:3b:6b:f4:30:87:94:a4:39:06:99:bb:f0:2d:2e:92:6e:
         8d:22:ce:03:b6:72:f2:18:74:82:36:43:fd:3a:11:6f:9a:84:
         77:63:cc:67:c0:37:0b:fe:f1:9f:95:d8:21:5b:ce:16:c9:22:
         22:8e:32:ae:bf:ed:54:29:e9:32:e3:9e:7b:43:24:72:cd:37:
         17:77:78:b5:18:b5:48:24:7f:be:ad:f6:56:3d:6f:6f:77:76:
         93:15:c8:55:31:46:ab:f6:37:67:07:0f:c8:8e:83:40:df:29:
         a3:09:b0:01:be:52:ee:1f:42:a4:10:fd:9a:b2:98:9e:59:ab:
         86:74:13:1c:67:39:f4:4e:c5:8e:36:5d:ea:40:28:b8:69:6c:
         8d:d4:01:00:e8:38:f7:bb:37:31:89:01:9a:53:ff:af:80:fe:
         d7:c7:8d:72:a2:75:f6:ff:cb:98:13:f9:59:96:54:05:ee:35:
         bd:58:ce:1a:01:76:d3:32:a7:11:35:ad:f9:44:58:d5:aa:9c:
         ce:cc:58:38:57:14:92:fc:9e:32:04:84:5e:87:da:00:1a:eb:
         13:82:bd:42:94:20:7a:a5:e7:6d:51:f4:a9:be:cb:35:ba:19:
         03:21:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:22 2024 by rpki-client on console-ams.rpki-client.org