Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/1Jm4DLbDr4-hnwwMVvfQ9uTIe9Q.roa
File:                     1Jm4DLbDr4-hnwwMVvfQ9uTIe9Q.roa (raw, json)
Hash identifier:          6xBLxVElnrXxVySu1lS6scXTmQGPZAIVODNRWEoImKw=
Subject key identifier:   D4:99:B8:0C:B6:C3:AF:8F:A1:9F:0C:0C:56:F7:D0:F6:E4:C8:7B:D4
Certificate issuer:       /CN=dde54706f1767065092e9e02a44da24b6628e88c
Certificate serial:       01856D4A953ACCDF7729057A25CAAA76DC82
Authority key identifier: DD:E5:47:06:F1:76:70:65:09:2E:9E:02:A4:4D:A2:4B:66:28:E8:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/1Jm4DLbDr4-hnwwMVvfQ9uTIe9Q.roa
Signing time:             Sun 01 Jan 2023 12:24:42 +0000
ROA not before:           Sun 01 Jan 2023 12:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207046
IP address blocks:        80.71.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:95:3a:cc:df:77:29:05:7a:25:ca:aa:76:dc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde54706f1767065092e9e02a44da24b6628e88c
        Validity
            Not Before: Jan  1 12:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d499b80cb6c3af8fa19f0c0c56f7d0f6e4c87bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:b6:c5:e8:e9:49:2d:3b:6e:b9:23:c6:0f:
                    97:5c:ae:1c:8b:92:50:cb:40:ea:ff:71:71:37:93:
                    53:ec:d0:a0:78:dd:18:67:70:56:5f:47:03:8c:6a:
                    92:53:95:f4:95:a4:c7:22:b6:f9:26:ea:79:5a:ad:
                    75:07:f7:5a:50:8e:79:2f:d8:f2:a9:7d:8d:ac:0b:
                    41:df:04:b5:c0:5b:a4:7b:07:3e:77:1c:f7:70:5a:
                    6b:50:72:02:2c:3c:80:47:82:31:2d:51:c0:eb:a5:
                    1e:ae:6d:7a:27:1d:68:83:24:b8:e0:30:4e:22:17:
                    7f:c9:56:00:92:f4:78:f4:8a:4d:67:5b:2d:2b:90:
                    0b:0e:6b:8a:be:9a:4e:df:04:ca:eb:66:b7:65:27:
                    ac:d5:f8:3f:0b:e1:94:75:42:95:cc:03:24:5c:1e:
                    d4:13:50:f0:65:4e:11:5d:c2:58:65:6c:9c:85:e4:
                    5e:15:34:65:17:26:5e:b4:4a:51:3e:4a:e0:87:82:
                    52:2d:bb:6c:10:a1:bb:00:42:1f:ce:97:a1:06:72:
                    7e:34:27:e6:3d:eb:76:1e:7b:20:c5:15:a3:df:ae:
                    a9:95:b8:9c:86:01:4c:05:11:bf:e7:86:05:41:87:
                    bb:0f:93:33:99:eb:36:b5:ab:85:aa:77:fa:dc:f7:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:B8:0C:B6:C3:AF:8F:A1:9F:0C:0C:56:F7:D0:F6:E4:C8:7B:D4
            X509v3 Authority Key Identifier:
                keyid:DD:E5:47:06:F1:76:70:65:09:2E:9E:02:A4:4D:A2:4B:66:28:E8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/1Jm4DLbDr4-hnwwMVvfQ9uTIe9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:49:8f:e0:1b:d3:55:22:db:0e:97:0d:a9:28:b9:89:4b:
         ca:84:8b:7b:c0:33:ec:7d:45:68:d4:95:19:e4:ce:1a:8c:2c:
         2f:f9:39:b0:99:5d:33:b2:34:6f:28:ad:16:09:85:1a:25:31:
         63:38:08:75:eb:b8:9d:65:9c:aa:60:80:14:08:43:11:65:b3:
         6b:e3:bd:72:50:4b:dd:83:01:17:6b:93:1c:59:32:74:5f:54:
         c7:92:f2:a6:af:5b:8a:c3:0d:dd:ac:79:2b:8e:36:e4:47:ff:
         0a:5f:46:c8:74:92:fe:b5:81:26:d0:6d:04:c8:b8:26:f1:86:
         8c:cb:01:83:69:cb:bc:bf:9b:d3:b9:df:10:92:c6:df:83:3b:
         41:03:08:67:4c:30:eb:8e:39:dd:41:be:ec:65:b0:81:30:17:
         88:e4:ac:d0:8c:d1:06:95:94:c2:ee:65:6e:ed:f9:57:bd:57:
         9b:4a:55:6d:7d:9d:e8:51:53:38:19:b5:2f:29:cd:94:df:af:
         f8:b5:ed:5d:81:60:5a:8e:c0:7d:26:41:18:1e:32:91:16:d7:
         f4:ea:10:5b:a7:16:f8:12:f7:67:02:a7:2d:19:fb:1e:00:40:
         b0:5c:6c:10:28:d3:f3:73:3b:31:17:ce:e1:89:14:5d:43:b5:
         f0:27:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:10 2024 by rpki-client on console-ams.rpki-client.org