Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/bd6wclvZdAH2Ae-2wilupJePMaU.roa
File:                     bd6wclvZdAH2Ae-2wilupJePMaU.roa (raw, json)
Hash identifier:          oo/x1jEAgg784qYC438ZQ8tOfcr/orjIokGHOHFYhqA=
Subject key identifier:   6D:DE:B0:72:5B:D9:74:01:F6:01:EF:B6:C2:29:6E:A4:97:8F:31:A5
Certificate issuer:       /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial:       325862
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/bd6wclvZdAH2Ae-2wilupJePMaU.roa
Signing time:             Wed 09 Feb 2022 12:45:26 +0000
ROA not before:           Wed 09 Feb 2022 12:45:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        5.181.182.0/24 maxlen: 24
                          5.181.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3299426 (0x325862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
        Validity
            Not Before: Feb  9 12:45:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ddeb0725bd97401f601efb6c2296ea4978f31a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:ca:c6:c3:36:4d:63:b2:b8:45:9a:0a:f8:
                    1c:90:b9:18:37:91:6e:4f:3d:ae:af:40:cc:23:b6:
                    85:b5:b8:be:0d:69:d6:fb:2d:8d:e1:bd:42:82:70:
                    7a:28:49:e1:9b:3f:89:b3:53:16:87:4a:97:c3:75:
                    da:7d:8b:cd:82:8c:68:b8:ac:86:6a:62:b4:12:1d:
                    34:64:1b:1b:13:5a:bd:90:a1:fa:b6:1e:31:14:00:
                    12:26:be:e5:d3:a4:3c:70:70:15:aa:85:85:23:b6:
                    a4:a8:6c:e6:17:6f:c8:da:a2:46:3e:e4:b0:a4:65:
                    5b:23:cc:53:5e:4d:68:3e:ab:1e:9e:7b:f5:af:71:
                    5e:6b:a8:0a:0b:cc:cd:d0:88:27:bb:e7:ea:b1:ab:
                    f6:88:78:2f:09:1c:46:53:cd:46:62:5f:16:b5:93:
                    ff:1a:2c:72:f2:79:cc:3a:7e:80:f4:9d:2a:d7:58:
                    1e:fb:a8:c1:80:45:e4:a5:0d:b7:c8:55:4d:ef:bf:
                    b7:ef:26:35:69:58:fc:bf:b5:8d:a3:24:d3:55:7e:
                    b2:35:25:5a:56:d4:ae:de:d6:a8:5a:37:31:9b:5d:
                    04:d7:b9:0d:17:ab:13:ab:fc:a0:11:7b:26:80:22:
                    17:76:25:10:38:12:20:2a:32:8e:69:0a:09:a1:26:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:B0:72:5B:D9:74:01:F6:01:EF:B6:C2:29:6E:A4:97:8F:31:A5
            X509v3 Authority Key Identifier:
                keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/bd6wclvZdAH2Ae-2wilupJePMaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.181.0-5.181.182.255

    Signature Algorithm: sha256WithRSAEncryption
         be:6b:7e:61:52:54:8a:21:a1:7a:28:d2:e2:55:ac:b8:29:8f:
         1d:e0:fb:46:bd:85:da:e4:e5:ea:2e:c8:e8:a9:16:64:98:17:
         83:80:0d:fa:00:15:a9:6f:16:e4:46:ae:40:98:f3:bc:6a:ad:
         1b:1f:06:27:fc:c3:d9:f0:ea:d5:01:2e:d0:4d:74:9f:fd:71:
         e8:a1:3b:6a:19:20:b4:5b:ac:b1:33:90:70:ac:c0:1d:59:60:
         70:3f:ee:d5:78:68:a3:06:c3:2c:85:54:06:fd:b9:d2:2e:4d:
         46:e5:00:f6:98:7e:74:67:7b:a2:50:a0:1e:a9:26:99:48:b1:
         41:13:a7:61:67:a5:14:c6:4e:b7:01:af:4b:54:e9:c1:fe:c5:
         02:9b:ec:c6:42:6f:8a:29:42:94:b2:6e:31:1c:a6:37:d0:cd:
         d8:ea:35:7e:eb:b3:78:86:a2:1d:06:6d:35:1d:af:21:c5:eb:
         49:a6:a3:d8:4c:0c:57:c4:8e:af:4e:8f:04:fd:3f:25:49:5b:
         f7:97:dd:de:1c:94:23:7d:0b:93:bc:48:30:2d:ac:73:b0:ef:
         82:6d:13:fe:70:af:03:27:59:9e:c5:60:26:96:61:e4:01:c3:
         c4:f0:fa:6e:eb:b1:99:7e:85:0b:4e:59:4c:79:4c:26:87:e1:
         5e:cc:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:44 2024 by rpki-client on console-ams.rpki-client.org