Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/uKQm2gvOPRG3qflqiiBNWlZ6AzM.roa
File:                     uKQm2gvOPRG3qflqiiBNWlZ6AzM.roa (raw, json)
Hash identifier:          Us9oknwulKhBSQ/yfciankn9+vA8nyyGWBL3r+c0D/8=
Subject key identifier:   B8:A4:26:DA:0B:CE:3D:11:B7:A9:F9:6A:8A:20:4D:5A:56:7A:03:33
Certificate issuer:       /CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
Certificate serial:       08236857
Authority key identifier: 87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/uKQm2gvOPRG3qflqiiBNWlZ6AzM.roa
Signing time:             Sat 01 Jan 2022 02:53:20 +0000
ROA not before:           Sat 01 Jan 2022 02:53:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41164
IP address blocks:        46.212.0.0/17 maxlen: 17
                          46.212.128.0/17 maxlen: 17
                          178.232.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136538199 (0x8236857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
        Validity
            Not Before: Jan  1 02:53:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8a426da0bce3d11b7a9f96a8a204d5a567a0333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:7d:29:87:3a:5a:f7:35:0a:a8:48:6a:4f:
                    d8:f4:76:df:9a:50:bd:b5:bf:7f:09:b5:41:ab:14:
                    c0:fc:48:76:6d:4c:6e:23:f3:59:b3:99:af:25:f1:
                    90:39:14:06:cd:76:94:da:72:31:88:5d:4f:35:04:
                    df:62:62:d8:14:20:4b:c4:8a:2b:fc:33:40:28:64:
                    59:66:78:f3:3e:6d:27:94:32:d3:d7:9f:d3:47:b0:
                    c0:30:42:2b:75:4a:9f:a8:71:22:75:3f:9a:d9:97:
                    9d:e2:13:42:9e:9b:ca:71:64:cd:9d:75:d9:8b:9f:
                    a1:c1:01:65:95:cc:db:e3:ac:79:e7:99:66:51:08:
                    90:cb:86:b2:b6:8c:7e:24:cf:a7:81:a2:af:39:97:
                    aa:12:40:08:d6:b0:c0:30:25:b7:00:e4:05:95:b2:
                    1e:a8:8c:16:ec:e2:33:15:31:31:7d:83:3d:bf:77:
                    04:25:54:99:92:f8:76:e0:0b:fe:3b:49:60:85:90:
                    10:fc:6c:f1:03:a3:40:ba:6b:ab:f1:ac:c6:01:3a:
                    bb:a6:b5:72:e3:f6:3a:86:12:59:6a:57:02:f5:ae:
                    39:0f:69:b1:80:4f:ba:92:cc:ea:8a:81:03:b4:15:
                    b1:fb:78:04:da:65:72:67:79:54:e5:0b:61:f4:59:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A4:26:DA:0B:CE:3D:11:B7:A9:F9:6A:8A:20:4D:5A:56:7A:03:33
            X509v3 Authority Key Identifier:
                keyid:87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/uKQm2gvOPRG3qflqiiBNWlZ6AzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.212.0.0/16
                  178.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cc:91:28:de:76:a7:5d:5c:1a:a8:1d:90:db:57:16:ca:50:2e:
         af:26:ca:8d:76:ea:c2:f5:18:f7:06:88:b8:d2:3a:36:4e:d8:
         38:29:68:d0:0a:99:2f:f5:df:a2:8e:f2:e5:19:de:8b:56:d6:
         1f:30:95:7a:af:f8:40:7d:25:d1:b4:a6:e2:0d:ea:45:d5:bc:
         94:f7:3d:54:ca:ab:53:0b:31:23:2d:db:3d:e6:7e:65:2d:9a:
         b6:13:c3:7c:17:5d:c6:79:e4:2e:ec:2e:1d:bd:7d:22:6e:91:
         92:dd:7f:e9:ab:30:da:53:82:b5:af:ec:bd:67:38:ae:c5:be:
         36:82:8e:ca:21:7c:40:6d:61:8a:0a:7a:22:27:97:dc:d9:a4:
         c2:03:eb:ea:6d:ea:b4:14:6c:c1:88:15:70:d2:69:cf:f7:5a:
         09:0f:3f:52:e3:fd:09:5f:a6:cb:13:d5:88:cc:3c:6d:ee:0a:
         52:84:5b:1e:49:f0:e0:04:27:ca:93:af:73:60:d3:74:1b:01:
         8c:95:25:09:e0:2e:43:bc:34:90:1f:bd:d6:4b:c0:40:f0:9f:
         bd:10:0d:5a:23:ae:8b:75:6e:5f:da:28:fa:73:f8:dd:f2:bb:
         76:f4:e9:f0:56:13:7b:a4:84:dc:b9:dc:1b:8b:b7:2a:c6:b2:
         5b:bc:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org