Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/5HLJcLrSBidUeEis1Gz7JLZ-Ve0.roa
File:                     5HLJcLrSBidUeEis1Gz7JLZ-Ve0.roa (raw, json)
Hash identifier:          rYPI7TWIj4Yy8/LJJLDKs9rs0cU2Kn967X/Z4S41dEc=
Subject key identifier:   E4:72:C9:70:BA:D2:06:27:54:78:48:AC:D4:6C:FB:24:B6:7E:55:ED
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       01857169BC68A2E1E618CE16F3435EC43BF4
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/5HLJcLrSBidUeEis1Gz7JLZ-Ve0.roa
Signing time:             Mon 02 Jan 2023 07:37:12 +0000
ROA not before:           Mon 02 Jan 2023 07:37:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        46.254.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:bc:68:a2:e1:e6:18:ce:16:f3:43:5e:c4:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  2 07:37:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e472c970bad20627547848acd46cfb24b67e55ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:94:b3:86:2c:7f:d4:07:81:51:de:b0:e2:
                    e9:4a:0b:51:a6:43:c0:7b:d3:c7:66:e2:05:dd:22:
                    eb:7a:34:36:bf:7e:cd:90:24:58:d2:65:f5:0c:cf:
                    a8:7f:1f:8e:52:67:0d:50:cd:b6:91:f1:ee:e1:83:
                    0a:fd:a2:36:fa:77:cd:b9:f9:2b:a1:b3:e8:27:36:
                    ee:2d:fb:1c:d0:91:25:e4:5d:13:76:bb:f2:0b:dc:
                    5d:c6:9f:4d:aa:d5:a6:b4:65:ff:88:e4:55:0c:4c:
                    f4:ec:d7:b9:d1:f9:ea:d4:83:6d:bc:0f:99:2a:82:
                    5c:89:29:f4:ee:63:ae:e4:55:4e:3e:f2:af:28:31:
                    f2:72:73:cc:ca:cb:24:60:db:3d:51:bc:2c:57:6b:
                    21:e1:ce:7e:85:58:52:ab:06:30:70:14:17:57:f8:
                    63:12:b5:5d:c4:c7:d5:fb:bc:74:ef:ce:e9:39:fb:
                    4a:19:90:00:ef:68:ad:e9:b2:df:fe:1d:c2:35:c4:
                    b9:42:ed:de:ab:c0:ef:d8:97:7c:7b:b8:cc:ca:29:
                    c9:5d:0f:86:25:5f:1b:b1:86:a3:95:67:59:99:9d:
                    cb:1f:57:94:0b:a0:a8:04:ed:03:97:90:27:ba:47:
                    27:d2:1f:d8:8b:b5:2f:bc:55:10:16:40:f5:07:f6:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:C9:70:BA:D2:06:27:54:78:48:AC:D4:6C:FB:24:B6:7E:55:ED
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/5HLJcLrSBidUeEis1Gz7JLZ-Ve0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:47:a3:fa:d6:77:55:18:fe:73:31:55:1c:3a:27:b4:1a:
         a9:4b:c1:f6:01:b2:4d:1a:98:85:84:63:7a:a6:cd:f4:ad:a1:
         ab:1a:e8:5c:0c:ff:82:64:78:14:99:3a:c1:22:7e:4c:db:8f:
         6e:f2:aa:06:c5:27:dd:72:1a:4e:a3:03:b7:16:78:ad:32:b4:
         fc:03:2c:08:57:9a:2e:da:c6:a3:82:25:6e:5b:78:af:ef:6c:
         32:42:76:3d:be:46:fc:f9:8b:f2:00:25:e5:38:d2:1a:03:21:
         ba:65:04:db:f7:f7:8b:2b:a8:7d:82:9f:40:00:d9:40:68:f1:
         93:e6:70:13:6a:43:35:b1:8f:11:92:d1:ee:d6:a2:d3:60:85:
         40:b3:33:76:a7:d6:12:f1:ad:7d:e2:f2:3d:7e:43:cc:3f:d1:
         a2:9b:ce:e8:f3:a9:b0:d1:2a:eb:8e:f1:35:5c:78:80:d5:14:
         d1:6c:12:39:d7:64:17:fa:dc:f8:fa:49:a7:bd:9e:88:64:e4:
         e2:9a:80:84:da:8d:a8:f1:10:38:be:df:ce:96:8a:65:1e:29:
         74:1a:0c:ba:13:cc:6c:54:4b:84:28:d0:4a:10:e5:49:c0:95:
         76:ce:7d:9c:bd:d4:3d:2d:10:82:d3:74:65:54:aa:0b:87:02:
         24:ca:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org