Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/M7xYOXnB2EjuSZeJu0huuw8Qko0.roa
File:                     M7xYOXnB2EjuSZeJu0huuw8Qko0.roa (raw, json)
Hash identifier:          PIciQARjsgU73Y6uvJxfE0KzSJS6rSEGfOwGNEtFIRI=
Subject key identifier:   33:BC:58:39:79:C1:D8:48:EE:49:97:89:BB:48:6E:BB:0F:10:92:8D
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04A462CF
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/M7xYOXnB2EjuSZeJu0huuw8Qko0.roa
Signing time:             Sat 01 Jan 2022 10:03:15 +0000
ROA not before:           Sat 01 Jan 2022 10:03:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211405
IP address blocks:        2a10:4646:70::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77882063 (0x4a462cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33bc583979c1d848ee499789bb486ebb0f10928d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:78:7a:14:26:a5:c3:aa:ce:e5:29:c1:59:
                    85:9d:90:46:7c:30:dc:26:e6:6d:7b:74:b5:ba:ad:
                    3e:5e:72:ae:37:79:a5:7e:10:c1:39:00:a1:76:b9:
                    18:3a:ed:64:9b:92:6a:2b:61:4e:36:d1:00:30:b7:
                    00:93:d9:49:8f:74:77:6c:26:71:13:ae:7b:85:c1:
                    a2:b4:a9:d7:15:a6:70:ac:8c:a0:49:6b:1a:48:dc:
                    ed:bc:fd:cd:6d:b3:44:ff:05:cd:dd:de:27:b5:f2:
                    ab:5e:ae:fd:a4:9b:c4:79:cc:8f:9c:03:ad:cf:8b:
                    95:27:93:b8:04:81:26:fe:eb:c1:fc:17:01:aa:f2:
                    b9:4d:62:bd:82:82:0a:14:f0:53:9a:98:48:2a:73:
                    3c:de:20:93:be:66:67:82:a6:ee:f8:5e:20:55:6c:
                    66:9b:e7:f2:58:30:e7:23:df:a5:f3:9f:0d:8b:36:
                    0b:8d:b5:fc:aa:b1:16:c6:32:15:45:ae:cb:43:30:
                    32:8c:e7:ae:bb:73:5d:87:74:76:3c:36:7e:a2:2b:
                    d2:8f:f2:e9:cd:56:cf:f4:7b:e8:fd:61:75:8c:00:
                    94:1d:d8:94:3c:53:5c:01:19:9f:81:8b:da:e7:c0:
                    c3:56:4f:31:07:1d:ab:61:ab:bd:5b:3a:7b:c9:ed:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BC:58:39:79:C1:D8:48:EE:49:97:89:BB:48:6E:BB:0F:10:92:8D
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/M7xYOXnB2EjuSZeJu0huuw8Qko0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:00:e7:4c:f8:69:e8:b3:a1:c4:73:c8:b3:c3:ce:a2:45:
         be:1d:4c:ec:ae:64:d8:4c:69:97:68:4c:03:88:be:e5:5d:f8:
         08:fd:bc:a5:7c:ef:c2:ee:25:1b:af:60:8e:75:86:2b:8e:8c:
         72:23:b4:98:47:15:36:af:09:cd:1e:f4:7d:20:ad:84:a5:40:
         42:48:61:00:9e:d9:86:6a:56:f9:69:5f:8d:78:da:90:ce:65:
         36:1b:6a:47:fe:a7:49:65:ef:5d:f8:f9:06:be:9e:f8:75:e8:
         45:8a:f6:29:bf:77:ac:73:2f:c0:5b:08:8d:e9:dd:ca:a6:3f:
         cc:6e:42:3a:2a:a7:b7:7b:45:b8:7a:af:2e:2c:af:24:8a:4f:
         9c:b9:56:f8:5f:ae:b0:a3:90:3e:44:b8:65:12:a7:94:ca:30:
         8c:cc:44:66:84:96:43:b8:67:dd:20:bb:2b:83:65:35:44:9c:
         1d:28:a8:92:4e:9b:a2:d5:b5:3a:0e:8d:10:f5:6a:e3:c0:21:
         fe:8a:35:26:41:71:24:f2:16:c5:57:2f:30:c7:b0:a0:c2:72:
         07:79:71:97:92:ff:94:38:98:4b:f8:73:43:34:58:ed:d0:20:
         63:2f:94:27:81:a3:20:58:65:63:db:41:29:d0:51:42:d9:4b:
         01:32:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org