Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/VODosRdfc9RkWtCe8e3K3R11JQY.roa
File:                     VODosRdfc9RkWtCe8e3K3R11JQY.roa (raw, json)
Hash identifier:          7RdOkoOe6udpy1xLbG0icQQQW/ajbrPVpwE/aEkrXm0=
Subject key identifier:   54:E0:E8:B1:17:5F:73:D4:64:5A:D0:9E:F1:ED:CA:DD:1D:75:25:06
Certificate issuer:       /CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Certificate serial:       6DA7F5
Authority key identifier: C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/VODosRdfc9RkWtCe8e3K3R11JQY.roa
Signing time:             Sat 01 Jan 2022 01:54:17 +0000
ROA not before:           Sat 01 Jan 2022 01:54:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.19.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7186421 (0x6da7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
        Validity
            Not Before: Jan  1 01:54:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54e0e8b1175f73d4645ad09ef1edcadd1d752506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:a5:73:8d:7a:bf:56:ba:be:e4:fe:95:33:
                    e2:09:00:0e:2a:b9:e2:d1:2b:11:e8:e0:33:ff:9a:
                    25:ab:3f:b4:e3:38:1d:d5:a8:98:ee:4f:6e:1f:e8:
                    10:12:1c:16:f1:93:d8:b1:c2:1e:44:aa:9f:72:bf:
                    cf:c8:3c:df:93:05:e0:38:77:93:24:ac:91:73:e6:
                    39:ab:c0:8c:e0:85:13:1a:57:8f:13:f5:38:d6:1e:
                    c6:b3:46:3f:c8:da:07:20:00:fb:10:8b:f6:37:ff:
                    72:98:b8:28:23:cd:61:bc:1b:46:12:e2:90:18:34:
                    50:8b:07:4d:49:a4:39:4e:07:83:a3:0c:1b:d4:b0:
                    5d:c9:6b:6e:f9:dd:82:b6:c0:6d:2d:d8:99:14:c6:
                    34:15:c1:78:8d:55:ec:6e:a9:ca:eb:ad:4e:ce:83:
                    2e:6f:df:12:1a:45:fe:73:b7:73:1f:01:42:dd:03:
                    5f:d2:1b:c7:54:1f:b9:13:ef:bf:f1:b4:3b:e8:f6:
                    da:78:b6:e8:7d:4d:9e:d5:db:a0:08:99:2c:03:dd:
                    50:99:9b:bf:6f:a2:3e:29:2e:e7:23:61:cb:56:75:
                    6c:64:c7:48:62:18:07:7f:f0:77:88:84:f1:ed:c7:
                    95:9e:1f:17:65:00:45:1e:45:7a:34:e8:bc:fd:c3:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:E8:B1:17:5F:73:D4:64:5A:D0:9E:F1:ED:CA:DD:1D:75:25:06
            X509v3 Authority Key Identifier:
                keyid:C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/VODosRdfc9RkWtCe8e3K3R11JQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:58:55:30:6d:39:fb:3f:b3:a8:b4:08:16:42:3b:58:0e:f2:
         f2:41:d8:b3:fb:bd:80:11:dd:a1:13:2e:8d:e4:22:b0:e3:a6:
         98:0a:f2:01:77:57:eb:27:b6:ab:f9:a7:4b:1c:73:24:9f:88:
         96:32:c8:4d:c7:f0:16:14:bf:5a:d2:8a:d7:ad:80:ea:5e:46:
         ec:8e:09:9f:80:35:fd:1e:15:a0:43:fd:b7:cd:ea:11:e1:13:
         be:1a:b1:9b:26:6c:59:1a:34:f6:60:a1:52:ea:36:84:0a:b9:
         67:29:ee:c0:c5:2a:50:5d:73:10:2a:bf:5f:69:c7:3d:f9:0b:
         56:6a:20:45:58:91:ae:bc:44:6a:1b:5b:de:74:25:90:05:b9:
         73:78:98:c7:49:9b:c9:84:7d:d0:a9:df:19:6c:fc:12:df:5b:
         ce:71:e8:8f:55:30:18:f1:6e:93:42:a2:5d:dc:2d:5b:cd:2f:
         b5:12:b3:09:ab:66:f5:be:91:91:75:d1:6b:84:69:0e:6a:f3:
         45:9e:11:70:0c:c7:23:46:ae:f1:69:07:79:31:0c:28:66:c3:
         0e:e0:13:39:b7:a6:64:7d:78:9a:9d:0c:c6:a7:75:7e:97:8f:
         6c:47:8e:63:e6:03:a4:a1:46:87:ed:31:c2:b6:31:fb:04:1d:
         3a:db:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org