Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/rsOOVlJ-CssWUR1m8ts0DXF7uyQ.roa
File:                     rsOOVlJ-CssWUR1m8ts0DXF7uyQ.roa (raw, json)
Hash identifier:          6FLX0FjqGT1wTvYxFNd/G0753frHycz19WzJ13pwiFI=
Subject key identifier:   AE:C3:8E:56:52:7E:0A:CB:16:51:1D:66:F2:DB:34:0D:71:7B:BB:24
Certificate issuer:       /CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
Certificate serial:       6C89FE
Authority key identifier: 1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/rsOOVlJ-CssWUR1m8ts0DXF7uyQ.roa
Signing time:             Sat 01 Jan 2022 00:53:38 +0000
ROA not before:           Sat 01 Jan 2022 00:53:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7113214 (0x6c89fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
        Validity
            Not Before: Jan  1 00:53:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aec38e56527e0acb16511d66f2db340d717bbb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:77:dc:9d:5b:ee:61:b2:a2:5c:20:45:64:
                    6e:19:dd:49:fb:a4:cc:82:43:96:9b:38:14:9e:d1:
                    31:a3:df:5c:c0:f0:27:d3:d9:b4:50:50:c1:1c:d0:
                    9b:a0:5b:9b:e1:35:c2:8f:d2:ad:03:b0:a2:08:98:
                    0d:7a:05:06:ea:1c:b6:42:09:46:0a:45:19:3d:98:
                    6b:f8:94:4b:39:a6:5f:1d:e4:89:06:d3:e5:d6:76:
                    87:82:04:18:68:ce:1a:54:da:8a:f6:bc:f1:62:f6:
                    bd:58:5f:21:d5:0a:7e:ff:76:4d:65:2c:30:7c:09:
                    17:7e:d1:3e:13:fb:6a:7c:dd:c2:8e:e3:9c:4f:1e:
                    5e:0e:74:cb:b5:d3:c2:45:79:96:7c:5f:b3:1c:5d:
                    1e:cb:9a:89:c5:a6:10:78:9e:24:13:84:84:93:8e:
                    bb:77:1d:53:f3:c4:25:20:de:ed:04:d9:6e:89:65:
                    3e:85:61:64:13:57:54:16:aa:71:18:e9:80:52:e2:
                    4b:66:c0:75:b1:f4:0b:d7:ec:69:88:d0:12:ad:6f:
                    97:8b:47:c9:c4:94:b7:48:08:a9:7d:b4:9b:0a:10:
                    22:c7:d0:fb:9e:ef:b5:79:a5:da:36:d0:8c:38:7c:
                    63:37:9b:f2:e8:4e:ff:db:ad:10:67:72:1e:54:8f:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C3:8E:56:52:7E:0A:CB:16:51:1D:66:F2:DB:34:0D:71:7B:BB:24
            X509v3 Authority Key Identifier:
                keyid:1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/rsOOVlJ-CssWUR1m8ts0DXF7uyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/Htm8xpq2z0zGGk9EcBILzb81WVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:6a:4d:cd:4f:ed:c9:3f:d9:4b:aa:19:11:cd:17:2e:9a:d3:
         53:5d:bd:28:e9:c5:27:26:58:0a:8c:48:78:11:c9:1a:2a:d1:
         30:18:c7:0b:b7:2a:2b:9d:a6:91:2e:a6:ed:76:e8:42:42:af:
         43:46:dc:19:69:e8:7b:ef:8a:ad:27:80:13:15:2e:1f:ae:8d:
         2c:84:e1:d6:8c:7a:cd:fa:e1:4b:c8:3a:14:67:d0:0d:37:f7:
         59:77:9f:ac:d3:3c:79:78:ba:fb:27:82:22:5b:df:18:4f:f2:
         1e:7e:69:aa:43:b9:91:29:6c:05:53:dd:3f:59:d5:47:5f:4e:
         e8:4c:34:4d:6b:f3:4a:75:83:8b:c9:30:89:05:8b:ae:ba:3a:
         c3:26:58:fe:db:61:dc:1b:c5:e3:a1:08:57:c9:d4:67:12:2a:
         77:9b:2f:1d:65:f0:8b:04:71:c4:b9:4b:00:91:d5:bb:d9:49:
         75:f1:3d:d3:11:67:09:5e:46:27:e2:d1:8d:95:15:29:2d:7b:
         ac:56:3f:24:64:14:2e:02:29:de:1a:54:96:15:a4:ea:19:3c:
         cf:87:e0:2b:5a:c3:4d:28:da:ef:e1:14:82:9e:56:c6:02:4c:
         98:61:b7:be:b0:29:57:1c:8c:51:94:22:a3:48:c0:ef:61:fe:
         93:2e:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:35 2024 by rpki-client on console-ams.rpki-client.org