Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/5eK8NHk9H5hjufKOjDv5mQfjf4U.roa
File:                     5eK8NHk9H5hjufKOjDv5mQfjf4U.roa (raw, json)
Hash identifier:          Igo7e8PihoP3rm6rN6BSzNzsFeYPBB0wyz9V+oi3J5M=
Subject key identifier:   E5:E2:BC:34:79:3D:1F:98:63:B9:F2:8E:8C:3B:F9:99:07:E3:7F:85
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       049FF1AF
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/5eK8NHk9H5hjufKOjDv5mQfjf4U.roa
Signing time:             Sat 01 Jan 2022 10:03:12 +0000
ROA not before:           Sat 01 Jan 2022 10:03:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210662
IP address blocks:        2a10:4646:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77590959 (0x49ff1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5e2bc34793d1f9863b9f28e8c3bf99907e37f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:f0:5c:4c:5c:f3:93:77:a2:7f:77:4e:8a:
                    ab:c0:01:e8:a2:83:11:c5:3c:99:2c:c2:ed:ec:4b:
                    a8:c9:5c:df:9f:2f:1c:01:65:c8:f5:75:fd:34:27:
                    83:a3:e4:96:b3:b9:43:9c:89:40:10:f8:9b:cd:08:
                    c0:4b:69:62:02:e0:25:83:fd:08:15:64:8c:e8:f8:
                    d8:36:81:1e:02:57:0e:d7:b5:78:a4:c2:c8:1b:37:
                    94:8c:84:14:56:ef:06:61:22:8f:5b:0d:d4:11:8e:
                    5e:9f:41:f6:35:9a:9b:b6:62:e9:c4:4b:fc:95:b5:
                    8d:05:55:61:27:6f:a6:c7:a8:d5:f5:63:c8:70:19:
                    b5:45:c3:1a:f1:c2:56:4f:72:b2:82:6b:aa:ea:57:
                    9f:d8:f5:e3:9c:ea:6d:b0:1c:df:7c:89:1d:7b:08:
                    8f:90:3a:fe:e0:34:82:e4:b4:79:6b:2f:62:4d:64:
                    1d:eb:5c:8e:ce:95:20:58:ab:c1:b2:f5:04:d3:d8:
                    80:ae:be:a5:aa:ea:cc:a5:7d:41:75:db:68:8e:be:
                    15:48:cc:30:7e:13:bf:0a:ba:53:52:94:04:25:b7:
                    fb:f9:cf:cd:79:b2:af:86:86:81:79:d5:7d:c1:84:
                    23:e8:c5:49:3a:c1:64:f1:d9:31:8c:af:0f:2a:a2:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:BC:34:79:3D:1F:98:63:B9:F2:8E:8C:3B:F9:99:07:E3:7F:85
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/5eK8NHk9H5hjufKOjDv5mQfjf4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:7b:04:05:2b:db:03:a5:3c:fe:82:49:5b:27:8f:51:1a:
         b3:7e:b4:31:bc:57:db:87:43:f9:c3:a0:8d:6a:72:05:b5:91:
         c1:19:12:ca:6f:19:a5:48:0f:a5:cc:ad:8f:40:cc:8e:96:28:
         55:f7:c9:79:90:2d:50:ed:a8:21:76:3b:40:c6:45:43:a2:18:
         eb:40:40:05:de:28:a2:89:0e:7a:af:19:58:95:56:24:bd:03:
         89:74:a8:aa:ca:da:69:67:5e:72:63:6f:d3:c4:6e:87:83:99:
         a9:34:50:26:0e:9c:26:a3:bd:2e:99:7d:7a:39:7c:06:24:9f:
         c8:ea:0a:08:68:a0:f1:38:41:a9:ad:25:f7:5c:eb:e3:e4:17:
         d3:fb:6e:5a:90:1e:2f:b8:1f:f1:35:ed:3a:6b:d8:a5:10:de:
         c2:fb:a8:a2:30:d9:70:ea:e0:97:78:d7:47:fe:20:f3:f4:ee:
         9b:7d:43:f2:82:ab:ea:4d:df:62:f5:f1:9e:86:8c:96:2a:9f:
         a5:65:39:20:70:d3:01:65:6a:de:37:ce:44:66:a8:34:68:99:
         e7:a1:34:1c:b0:29:8d:87:d4:ec:51:da:32:e0:7a:b2:fc:bc:
         65:5d:b9:b9:66:d3:c8:f5:6e:ab:6e:f0:8a:b6:ee:5f:91:93:
         a9:99:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org