Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/6xVp50nRd_urDkq9NM0VB04Vx40.roa
File:                     6xVp50nRd_urDkq9NM0VB04Vx40.roa (raw, json)
Hash identifier:          Jc6ytLGpc7wEn0bXArbhtGXI2QHG5QGDub4EjpOEWZQ=
Subject key identifier:   EB:15:69:E7:49:D1:77:FB:AB:0E:4A:BD:34:CD:15:07:4E:15:C7:8D
Certificate issuer:       /CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Certificate serial:       71ABD9
Authority key identifier: A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/6xVp50nRd_urDkq9NM0VB04Vx40.roa
Signing time:             Sat 01 Jan 2022 02:58:23 +0000
ROA not before:           Sat 01 Jan 2022 02:58:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        146.19.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7449561 (0x71abd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
        Validity
            Not Before: Jan  1 02:58:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb1569e749d177fbab0e4abd34cd15074e15c78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:a2:54:ef:f4:70:4e:ae:b1:fa:85:9a:90:
                    fd:7f:0d:73:9d:1e:28:af:fe:af:d0:5a:c8:f0:3d:
                    8b:cb:0b:56:7e:7c:b6:b1:b2:55:3f:0f:0c:0c:08:
                    6f:9a:68:91:cd:e3:2a:fa:9a:d1:85:7c:c2:f5:c3:
                    45:5e:be:7a:22:4a:2c:58:63:f2:c8:2c:53:34:23:
                    27:c2:aa:7a:5e:52:80:6d:bc:da:07:8f:5c:23:6a:
                    01:28:05:50:4a:33:07:c1:41:86:cd:13:5f:9d:ea:
                    86:8d:90:dc:ca:d9:8e:0a:bb:f8:5d:1e:ea:cd:88:
                    28:f3:7e:43:23:c9:60:f9:7d:a6:e6:be:be:15:90:
                    09:b4:d6:d6:5c:b5:df:63:50:80:3f:51:c6:9f:c2:
                    b9:ac:bb:92:b3:d4:40:d8:6a:36:34:16:dc:ce:9a:
                    05:74:73:75:4e:dd:58:02:62:2f:ab:82:25:f2:97:
                    f7:ec:b7:0c:16:1f:34:ef:7f:40:fd:63:cd:be:44:
                    26:33:fd:14:23:55:9c:21:41:3b:f3:44:cb:37:d7:
                    18:a8:38:b2:00:f4:0a:93:e8:23:45:aa:ac:1d:61:
                    01:cb:2e:e6:5d:a6:00:b1:a3:67:21:7a:46:df:fd:
                    ec:8c:ed:12:40:e9:fb:83:b7:2b:d0:ef:73:90:e6:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:69:E7:49:D1:77:FB:AB:0E:4A:BD:34:CD:15:07:4E:15:C7:8D
            X509v3 Authority Key Identifier:
                keyid:A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/6xVp50nRd_urDkq9NM0VB04Vx40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:87:15:d7:4b:5c:2d:63:5c:0b:86:7d:c7:0f:79:d9:4a:61:
         ab:ac:17:74:7b:4b:64:f0:5c:34:62:8e:3b:fb:36:a2:7e:d9:
         5d:db:79:e2:09:df:08:d8:1f:cb:e9:11:9f:3d:be:ae:6f:ab:
         fc:63:0d:d9:56:7c:6e:d0:49:4c:a7:5e:fd:8a:8f:ff:6b:b0:
         eb:15:40:26:26:ee:3f:1e:7a:ac:7b:28:7a:f2:a6:39:ac:95:
         e1:b4:de:76:e7:3f:06:c2:f6:96:4e:6b:ad:be:92:f2:7c:6b:
         4c:9c:66:33:c5:4e:d3:15:36:00:26:78:94:54:38:85:a8:c1:
         3a:a7:2b:fb:5a:36:55:e0:c1:cd:07:6d:6d:90:48:f3:e3:20:
         31:c6:7e:d6:41:50:70:9b:46:4c:c2:66:78:77:bc:2f:d6:d5:
         7a:f9:38:da:11:70:39:2b:96:08:6b:de:de:ce:6d:dc:89:d9:
         9b:a6:8e:aa:be:7e:01:e6:a6:f6:0d:6d:79:de:ab:34:b3:15:
         9e:dc:8a:1d:28:da:47:e5:26:b6:a1:56:f6:d1:de:9c:55:7b:
         af:66:0e:df:55:0e:98:b3:de:be:d2:5a:01:1a:e9:00:c6:5a:
         7c:3f:12:ea:94:52:63:bc:e7:b1:f5:be:94:c4:a7:84:f5:ec:
         69:84:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:51 2024 by rpki-client on console-ams.rpki-client.org