Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/w3E5-Ddhn6-Y8yyomjkllUsTa7I.roa
File:                     w3E5-Ddhn6-Y8yyomjkllUsTa7I.roa (raw, json)
Hash identifier:          zHtxWIo34PXNZBSCZzPD6TgGYktF32TH/u6uopSmCGg=
Subject key identifier:   C3:71:39:F8:37:61:9F:AF:98:F3:2C:A8:9A:39:25:95:4B:13:6B:B2
Certificate issuer:       /CN=2e4dd492aba37802f99020379b0daa49f101b7da
Certificate serial:       047EB6
Authority key identifier: 2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/w3E5-Ddhn6-Y8yyomjkllUsTa7I.roa
Signing time:             Thu 21 Apr 2022 11:41:31 +0000
ROA not before:           Thu 21 Apr 2022 11:41:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        194.15.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294582 (0x47eb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4dd492aba37802f99020379b0daa49f101b7da
        Validity
            Not Before: Apr 21 11:41:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c37139f837619faf98f32ca89a3925954b136bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:30:f1:30:68:34:40:a0:a4:82:46:95:46:
                    06:06:94:6e:6d:f7:61:5c:64:8f:18:a5:fe:c6:8c:
                    9d:ba:40:3c:2b:f8:e3:4f:10:6f:27:bd:ef:9d:90:
                    cd:ff:4b:9c:13:96:44:d5:6f:5b:c6:5f:53:e8:35:
                    8d:b9:cc:6b:03:e9:dd:9f:16:ac:47:bb:14:84:76:
                    dd:b2:74:84:a1:19:75:22:53:a4:d2:f6:3b:3c:90:
                    58:9b:2f:38:44:42:35:6f:3d:6a:bc:bf:30:2e:b1:
                    74:91:1b:98:4a:f7:14:2e:83:bf:46:75:15:a9:87:
                    88:72:05:a0:28:76:df:c5:fb:9e:66:58:7d:e1:6e:
                    36:bb:3c:9b:7b:2d:b6:96:91:ae:80:b9:49:93:d4:
                    c8:7f:5c:d8:e3:2b:63:56:fb:49:db:17:a8:cf:79:
                    cf:10:40:eb:0b:30:ed:00:0a:ef:fe:70:65:11:85:
                    46:d9:63:1b:df:c9:78:61:79:9b:21:fa:2c:c6:b9:
                    30:f1:2b:34:9c:5f:01:4f:a9:ef:e3:84:f7:be:da:
                    e1:c9:91:52:96:ef:43:62:6b:3b:86:e8:eb:cf:df:
                    01:1e:27:99:e8:ba:7e:02:24:96:ae:4b:00:f3:ec:
                    03:4f:04:d7:03:00:b5:06:03:7c:b5:91:c7:1c:c1:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:39:F8:37:61:9F:AF:98:F3:2C:A8:9A:39:25:95:4B:13:6B:B2
            X509v3 Authority Key Identifier:
                keyid:2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/w3E5-Ddhn6-Y8yyomjkllUsTa7I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Lk3UkqujeAL5kCA3mw2qSfEBt9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:da:0a:b5:dc:0b:80:5c:93:04:ae:65:38:ce:c2:1b:e0:
         58:7a:20:5c:d5:b6:35:ff:f3:3f:43:47:b9:bf:41:c5:70:c0:
         17:cd:0d:dd:b0:62:23:08:b5:bd:d5:5f:f3:02:d3:45:41:dd:
         22:5d:5b:9d:9b:35:49:89:2e:e4:36:d7:03:d6:25:aa:70:96:
         4e:a8:b2:48:25:ee:5d:e1:22:86:b2:d6:73:bb:d0:d6:d9:48:
         51:ba:b6:09:97:7f:24:33:f3:46:83:2e:08:c0:c4:8f:85:92:
         77:9f:6f:3d:a0:a7:13:c1:73:64:8e:ef:1c:54:cd:ad:d4:6c:
         9e:70:8a:27:be:64:15:66:98:32:72:8a:ff:f3:88:ed:7e:62:
         68:e2:d1:4f:f3:ef:80:9a:b5:16:13:e7:a0:82:4f:4c:7c:73:
         2c:fd:04:8b:0d:1d:52:d0:94:fe:b5:51:35:56:42:c7:1c:36:
         b3:ec:d7:a0:59:bb:86:57:da:ff:b8:7c:7b:6b:cd:7f:fb:83:
         c7:cd:9a:e6:2e:28:66:21:df:7a:33:7c:2b:2b:72:59:c5:c3:
         25:b8:d3:f5:50:87:a5:a5:20:25:33:f4:e4:e4:72:79:77:81:
         2f:e2:02:00:68:84:60:9d:2f:57:05:92:66:ea:83:91:65:ce:
         31:a5:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:43 2024 by rpki-client on console-ams.rpki-client.org