Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/5MgXhfqfrD2TUS6Z-zpJ12JibAc.roa
File:                     5MgXhfqfrD2TUS6Z-zpJ12JibAc.roa (raw, json)
Hash identifier:          u6URNEzqxJuMoLF2za2Ih8z6ksOHp/Y8sBJuIPXfpJw=
Subject key identifier:   E4:C8:17:85:FA:9F:AC:3D:93:51:2E:99:FB:3A:49:D7:62:62:6C:07
Certificate issuer:       /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial:       04D2E0F8
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/5MgXhfqfrD2TUS6Z-zpJ12JibAc.roa
Signing time:             Thu 30 Jun 2022 09:26:02 +0000
ROA not before:           Thu 30 Jun 2022 09:26:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204693
IP address blocks:        2a06:5ec0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80929016 (0x4d2e0f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
        Validity
            Not Before: Jun 30 09:26:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4c81785fa9fac3d93512e99fb3a49d762626c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:90:cd:f1:4d:32:cd:9f:79:f7:86:34:26:
                    e8:0c:d4:17:55:42:5d:59:67:60:6a:1d:63:95:e9:
                    25:bd:ee:28:c8:7b:c9:47:38:f3:52:51:00:05:1d:
                    7f:ba:dd:0c:dc:09:4d:09:b7:49:6b:1d:cd:65:e6:
                    0c:88:51:74:47:13:87:2b:79:f9:05:ce:67:44:92:
                    1e:dc:dd:cf:78:67:d9:56:94:0a:b1:65:db:8e:0d:
                    ca:cc:6c:10:43:11:d8:d0:06:44:19:b5:5f:38:2c:
                    52:16:bf:b9:38:77:f5:20:2e:7c:94:0a:ac:78:b0:
                    99:ea:aa:c6:6f:04:f7:b2:7d:63:bd:a1:b3:80:af:
                    20:5f:43:72:ea:92:3b:ab:25:9d:50:84:1e:ea:22:
                    12:7e:c8:f5:69:29:db:22:71:61:a5:33:c9:b2:5e:
                    00:ed:0d:4f:ac:b6:84:c6:19:78:60:62:d7:13:98:
                    54:3d:d7:8a:af:90:e2:7a:98:85:47:ee:1c:99:22:
                    13:93:42:8f:69:19:06:90:23:5a:16:8f:48:51:3d:
                    61:70:ef:11:a5:a4:0e:0a:8e:fd:a3:cc:c5:f4:39:
                    7e:bd:59:bc:97:86:65:9d:48:29:a6:6d:37:d4:3a:
                    dc:7b:3f:52:28:96:cb:d5:97:7b:cc:f4:57:97:80:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:17:85:FA:9F:AC:3D:93:51:2E:99:FB:3A:49:D7:62:62:6C:07
            X509v3 Authority Key Identifier:
                keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/5MgXhfqfrD2TUS6Z-zpJ12JibAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:5ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:0e:95:3c:3f:a1:30:b4:9b:21:c7:07:5b:02:56:c3:5a:
         36:41:d7:0e:e6:60:db:09:43:08:73:d5:78:ff:38:ca:8f:29:
         d1:7f:dc:a7:d5:5f:47:31:ee:12:fb:3c:f8:66:43:c9:11:cb:
         e1:0c:b6:10:64:2f:77:ec:0f:b0:7e:be:d0:dd:e9:2c:06:6b:
         54:f6:27:17:4b:7c:be:3d:13:4e:a4:a7:e3:07:4f:2c:79:d1:
         27:b2:a9:e8:0d:8a:33:67:fc:bb:cf:81:e0:a3:f5:21:2f:cb:
         08:99:42:a1:54:1a:92:e6:fb:dc:60:89:36:eb:46:d4:79:60:
         37:d0:e8:79:9c:3f:b1:fb:c3:22:a5:ff:34:5e:67:0e:7a:be:
         29:02:be:f8:0c:a3:12:1d:49:13:91:bc:67:fa:30:41:e6:68:
         67:cc:33:27:76:88:9a:7d:a8:e5:40:3b:ad:a7:17:14:85:08:
         a0:58:08:fa:ad:9f:93:f8:98:13:9f:1c:cd:24:2b:2c:2c:fb:
         bc:6b:a1:b8:db:a2:ce:93:73:d2:67:3f:0d:e7:37:4a:1b:a5:
         59:72:17:77:61:7f:02:1c:04:91:eb:05:38:f4:3f:f8:0d:10:
         bd:d8:e6:c0:8a:21:e9:53:23:94:c1:34:19:f4:dc:be:1e:f5:
         b6:d8:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org