Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/cBN0uRnCN742ph3vY1cfZNqKCUM.roa
File:                     cBN0uRnCN742ph3vY1cfZNqKCUM.roa (raw, json)
Hash identifier:          j5EtDw6GRd2xc6p155+Elsa+Xat9EOEV6driLOWxk1o=
Subject key identifier:   70:13:74:B9:19:C2:37:BE:36:A6:1D:EF:63:57:1F:64:DA:8A:09:43
Certificate issuer:       /CN=56b001a946e67129d794235b515b20d9ea908a87
Certificate serial:       018486AD2198E7DF21D894206A1E5322A1A4
Authority key identifier: 56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/cBN0uRnCN742ph3vY1cfZNqKCUM.roa
Signing time:             Thu 17 Nov 2022 17:40:04 +0000
ROA not before:           Thu 17 Nov 2022 17:40:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:9cc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:ad:21:98:e7:df:21:d8:94:20:6a:1e:53:22:a1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b001a946e67129d794235b515b20d9ea908a87
        Validity
            Not Before: Nov 17 17:40:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=701374b919c237be36a61def63571f64da8a0943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:28:71:8b:4d:b2:e0:d6:40:1d:5e:c3:33:13:
                    61:b4:41:b7:48:56:43:57:df:7e:e6:6a:bb:58:7b:
                    2f:30:fe:06:84:50:27:00:36:bc:4a:13:ec:7d:77:
                    a3:bd:5c:ec:63:53:de:5f:4f:35:ec:3b:90:07:f1:
                    40:d5:61:85:a1:f6:0c:8a:dc:2a:4a:a3:93:0d:17:
                    43:05:f7:4b:c3:c6:cb:6c:a6:92:7c:8a:9a:26:91:
                    c8:a4:e8:0b:65:d0:a0:18:8f:78:68:41:e3:0f:01:
                    01:1f:c6:45:9c:08:fe:98:32:e4:9f:3f:4f:59:dd:
                    35:80:9d:bd:57:12:51:a0:6b:62:5a:94:b6:0b:cc:
                    23:ce:c9:e7:44:33:a2:4b:16:8e:8e:db:61:22:39:
                    9f:2a:65:a9:21:d6:bf:af:f9:b3:a9:4c:41:a2:3c:
                    17:d6:8d:b7:07:37:6a:55:8d:94:39:16:db:ab:19:
                    70:51:9f:5c:55:e7:bf:6a:65:11:14:fc:d1:fc:2a:
                    06:43:c5:d9:cd:27:f8:dc:24:e5:08:87:36:3b:63:
                    1d:b9:81:67:82:20:72:37:99:48:44:a4:fb:e7:0b:
                    99:e2:5a:eb:af:f8:fc:ff:5b:3b:a9:ea:3d:56:6c:
                    5c:92:26:56:8d:e2:e3:d4:de:45:8a:cc:94:bb:2f:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:74:B9:19:C2:37:BE:36:A6:1D:EF:63:57:1F:64:DA:8A:09:43
            X509v3 Authority Key Identifier:
                keyid:56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/cBN0uRnCN742ph3vY1cfZNqKCUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/VrABqUbmcSnXlCNbUVsg2eqQioc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:9cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:88:4d:f0:55:b2:d2:22:63:49:e5:f0:81:bf:21:a3:23:17:
         1a:e4:ea:6b:28:9a:4b:dc:da:f2:04:de:06:b5:76:21:24:ce:
         08:9e:17:a2:ce:cc:a6:51:f5:c5:51:d1:ae:73:18:a8:16:02:
         df:4e:ce:91:bc:65:72:5e:ae:0e:cc:6a:b8:d5:ac:5c:e8:ef:
         f8:bd:18:fe:25:57:da:48:a5:c3:4a:7f:da:32:df:1d:0c:7a:
         46:1f:2d:fb:2c:d8:95:15:9d:73:eb:9e:58:c6:bb:86:20:ff:
         f2:56:22:ea:19:30:4b:76:59:b5:ca:39:49:f1:23:44:d9:4f:
         6f:d8:bd:c2:c6:7f:65:de:79:de:e7:c3:f9:2a:bf:c8:a3:01:
         34:f2:2a:9c:b4:43:bc:70:56:4c:c4:40:e8:14:29:8d:1b:45:
         2c:65:86:4b:e2:d2:ab:42:88:e2:44:a3:27:0b:4c:ad:3f:de:
         de:03:4a:6c:31:ae:c3:a3:c2:83:0a:2c:f6:dd:64:6d:c1:db:
         d6:2d:b4:9d:17:34:7c:3d:14:b8:2c:8a:0f:91:e3:db:90:04:
         1a:ab:a6:0e:3c:50:15:7d:72:14:8b:3d:1f:17:b9:2b:da:a8:
         6c:f7:cc:b0:f9:bb:31:b1:5a:4a:ae:83:0b:28:8d:2a:f5:d9:
         b8:91:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-fra.rpki-client.org