Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/pywUeFRcEetVNSDon7v6hY7Xevk.roa
File:                     pywUeFRcEetVNSDon7v6hY7Xevk.roa (raw, json)
Hash identifier:          rWdfhThuAhxlvZiD2gZLGLe+4KWIPQnx3ueQ14DItFw=
Subject key identifier:   A7:2C:14:78:54:5C:11:EB:55:35:20:E8:9F:BB:FA:85:8E:D7:7A:F9
Certificate issuer:       /CN=a84233ad498882a916f223956b585e5bb409c2c5
Certificate serial:       04F919
Authority key identifier: A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/pywUeFRcEetVNSDon7v6hY7Xevk.roa
Signing time:             Wed 29 Jun 2022 08:40:02 +0000
ROA not before:           Wed 29 Jun 2022 08:40:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47638
IP address blocks:        185.161.132.0/22 maxlen: 24
                          2a0f:cd40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325913 (0x4f919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84233ad498882a916f223956b585e5bb409c2c5
        Validity
            Not Before: Jun 29 08:40:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a72c1478545c11eb553520e89fbbfa858ed77af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:57:e8:17:8e:13:7b:63:53:e0:2f:91:c4:
                    99:83:2e:6d:e5:68:31:e5:36:e1:58:2c:5f:a7:7c:
                    19:04:a2:1b:f2:46:87:fa:33:cd:6b:70:24:98:b9:
                    b1:cb:57:98:5e:ab:fe:5e:ca:80:06:90:1d:d6:55:
                    c7:3b:a5:9d:48:4f:7a:1d:f5:52:9b:1f:9e:c5:10:
                    f4:41:8a:b9:36:0b:66:10:c4:31:0c:c8:a1:0c:c4:
                    ab:df:36:8f:ff:51:e1:32:65:9d:a1:13:36:cc:fe:
                    74:6e:b5:1e:c8:a4:59:ae:ec:b6:8c:83:81:4f:42:
                    5a:29:b3:8f:3f:12:6e:58:e3:06:b5:25:9a:60:63:
                    f2:32:1f:48:7e:24:63:f6:7d:8f:3e:1b:3f:70:9d:
                    ea:fc:a1:e1:13:1f:20:c7:fb:a9:48:7e:43:8c:00:
                    b2:28:bd:a9:b1:6e:33:1f:e8:93:7e:cf:49:ae:9b:
                    b2:69:eb:77:c6:21:58:5b:a8:a2:9a:b0:13:d2:01:
                    50:59:f3:a6:65:ed:89:e1:c1:ca:9d:fa:e6:49:34:
                    f6:69:78:be:31:51:89:5e:96:d6:e2:15:7b:57:de:
                    68:0e:94:82:d9:32:cf:9b:84:f5:6b:da:d1:4b:97:
                    80:e5:07:6e:15:19:57:06:95:da:13:a5:a7:b5:16:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:14:78:54:5C:11:EB:55:35:20:E8:9F:BB:FA:85:8E:D7:7A:F9
            X509v3 Authority Key Identifier:
                keyid:A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/pywUeFRcEetVNSDon7v6hY7Xevk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/qEIzrUmIgqkW8iOVa1heW7QJwsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.132.0/22
                IPv6:
                  2a0f:cd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:b4:df:37:e1:2e:f1:7a:12:91:bd:45:39:99:4a:70:b4:
         a4:fe:0d:06:8c:bd:3c:33:9f:f0:1c:7b:0e:1c:d7:ff:07:96:
         f6:67:a3:9f:03:51:c4:be:24:27:4b:2d:21:70:fb:ed:04:8a:
         74:c8:17:99:34:7a:04:eb:9f:3b:6b:a7:0c:61:a6:a1:9a:2b:
         1b:99:6c:81:61:12:83:d3:4d:2d:41:9a:91:62:cf:d2:4d:62:
         87:c9:c6:44:5e:71:cb:33:05:93:03:8b:bc:30:52:c9:a6:17:
         c9:62:d6:3e:91:ec:04:95:06:2d:36:da:16:4b:99:2d:89:31:
         15:02:ab:42:b5:68:8d:c1:8c:57:df:22:23:80:9d:de:a5:06:
         b0:76:9c:97:d3:f9:c3:35:8f:40:d8:3d:14:ed:53:1a:f5:b8:
         17:ee:e6:71:0a:e1:ed:17:76:3e:21:2f:01:4b:97:93:a1:58:
         b1:f0:71:87:56:20:11:5c:ad:cf:75:80:7b:02:6c:df:85:b8:
         34:35:81:5f:25:e1:90:03:6c:47:6f:e5:79:73:3e:9b:56:7c:
         83:06:08:19:e0:a9:6f:bf:f5:23:3e:56:24:6d:4a:bf:56:dd:
         e9:11:5a:79:22:11:55:ab:32:59:67:a5:d5:01:8b:5c:26:b2:
         94:c5:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org