Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/nMEREmUCYT2qanD6qS7Eq38ur-g.roa
File:                     nMEREmUCYT2qanD6qS7Eq38ur-g.roa (raw, json)
Hash identifier:          bpodNJvQqyLXaEAOOPq4jZidlfQVM+vKT4d9oJhbg7M=
Subject key identifier:   9C:C1:11:12:65:02:61:3D:AA:6A:70:FA:A9:2E:C4:AB:7F:2E:AF:E8
Certificate issuer:       /CN=923c1cff0bd0d026bdd1096c80d1eed3ee90cb2e
Certificate serial:       06BAB830
Authority key identifier: 92:3C:1C:FF:0B:D0:D0:26:BD:D1:09:6C:80:D1:EE:D3:EE:90:CB:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/nMEREmUCYT2qanD6qS7Eq38ur-g.roa
Signing time:             Sat 01 Jan 2022 00:50:23 +0000
ROA not before:           Sat 01 Jan 2022 00:50:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51489
IP address blocks:        46.30.192.0/22 maxlen: 22
                          46.30.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112900144 (0x6bab830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923c1cff0bd0d026bdd1096c80d1eed3ee90cb2e
        Validity
            Not Before: Jan  1 00:50:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9cc111126502613daa6a70faa92ec4ab7f2eafe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:d4:25:e5:db:02:3e:4a:98:eb:9f:2f:14:
                    c3:a2:d6:91:87:76:af:3a:e9:51:3c:5a:f0:52:98:
                    e9:75:bb:fc:e7:0d:59:79:f9:56:24:92:12:28:34:
                    bd:79:3b:4f:8b:db:ad:e3:c5:5a:c4:00:e0:60:3e:
                    e7:1c:a5:34:f1:f3:a9:ff:35:93:90:90:15:8e:77:
                    db:7e:c3:5d:eb:94:a1:14:4a:ce:64:1c:39:09:c7:
                    6c:dd:4b:38:a2:f3:73:ec:1c:e6:0c:6a:0b:17:f8:
                    b4:43:98:68:71:7a:55:f9:26:5e:6b:b2:5b:b4:69:
                    3e:61:be:3b:fd:cf:86:53:4e:67:de:e9:ab:1e:db:
                    b7:d7:17:a9:0b:77:7b:ba:60:e4:42:76:4d:cb:76:
                    71:60:05:38:8a:80:c8:f9:ea:4b:b7:1e:e7:fb:b5:
                    a4:ce:17:aa:e8:d0:84:14:ae:47:06:71:43:9e:4e:
                    63:28:a2:12:b3:af:61:cb:50:42:f9:72:d5:13:e1:
                    b3:94:80:b6:b7:e0:d6:34:5b:72:49:48:48:55:d1:
                    2c:63:63:a9:9d:74:05:02:9e:01:03:71:a6:2f:d1:
                    4b:8a:74:11:3b:fc:c4:93:f8:27:cb:c3:3f:5e:67:
                    dd:a3:22:3e:88:cb:15:93:ee:37:bd:f8:41:30:84:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C1:11:12:65:02:61:3D:AA:6A:70:FA:A9:2E:C4:AB:7F:2E:AF:E8
            X509v3 Authority Key Identifier:
                keyid:92:3C:1C:FF:0B:D0:D0:26:BD:D1:09:6C:80:D1:EE:D3:EE:90:CB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/nMEREmUCYT2qanD6qS7Eq38ur-g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.30.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:08:ae:7a:43:f7:91:7d:61:67:69:0d:9c:fe:c5:a5:b4:
         d1:84:b2:28:39:bd:35:d7:e1:97:dd:f9:35:d5:8c:7a:ea:db:
         2a:7e:f4:fe:93:39:9d:0f:35:9a:64:59:b1:da:e4:ba:5f:6f:
         8f:6f:73:7f:7a:fc:f3:2f:8a:9d:15:fd:ae:cc:eb:f2:e2:2c:
         ef:97:ed:7a:e9:7d:3e:6a:2b:28:45:eb:a9:e5:fd:b0:12:5a:
         b9:24:2b:2f:5f:6e:66:b4:78:ad:e8:fc:d4:f8:8e:8a:73:8e:
         c3:d5:28:6d:25:28:6a:ca:1a:0a:24:36:f6:89:e8:19:97:d8:
         41:8c:0b:3b:df:3f:20:1a:d7:3d:83:05:23:1f:dc:07:80:6d:
         d1:22:a4:0f:bc:b0:f6:e6:36:be:96:c8:87:65:7d:a2:b3:6f:
         06:5d:af:a0:c3:74:67:79:33:62:d9:e7:a7:be:b4:50:09:dc:
         89:c4:0d:c8:d5:73:91:41:a5:d6:b2:9e:32:46:46:79:8d:83:
         92:e1:a9:5a:34:b6:23:67:7c:a3:77:9c:d7:f0:e3:44:e2:38:
         e9:6c:03:e9:17:ef:fa:ba:6b:42:7d:a4:25:b8:3c:71:b0:a9:
         03:d2:f1:aa:32:80:35:ba:23:ee:12:41:14:1a:71:07:63:5e:
         a5:d3:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org