Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/cn6cZuhTIEXUaWT6pxXXqNrf19M.roa
File:                     cn6cZuhTIEXUaWT6pxXXqNrf19M.roa (raw, json)
Hash identifier:          R6pStboi43lp2ZPkpeDsoJDW7mErYIXgCG/sTjufakY=
Subject key identifier:   72:7E:9C:66:E8:53:20:45:D4:69:64:FA:A7:15:D7:A8:DA:DF:D7:D3
Certificate issuer:       /CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Certificate serial:       0754A111
Authority key identifier: C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/cn6cZuhTIEXUaWT6pxXXqNrf19M.roa
Signing time:             Mon 30 May 2022 18:09:13 +0000
ROA not before:           Mon 30 May 2022 18:09:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20454
IP address blocks:        194.48.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122986769 (0x754a111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
        Validity
            Not Before: May 30 18:09:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=727e9c66e8532045d46964faa715d7a8dadfd7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:6d:4d:57:38:d0:58:ba:56:d0:00:40:b7:
                    67:83:58:32:34:2a:f6:2b:26:af:09:7b:1c:5f:82:
                    ae:2d:12:95:40:fb:03:0a:e5:21:9b:c3:92:ce:5a:
                    74:03:c5:1d:43:ad:e6:f4:7c:2c:a7:22:01:34:54:
                    84:fa:1b:c2:2d:e0:d2:92:d3:01:48:fc:c0:02:8f:
                    a5:b4:79:ef:c9:dd:42:1a:55:94:34:79:cb:78:41:
                    46:2f:8c:ca:08:9c:f3:83:82:9d:86:97:21:c3:df:
                    c5:b5:8c:e5:70:fc:65:5a:4d:ef:08:99:2a:ed:b3:
                    f8:45:50:4c:41:ed:06:42:05:a8:f0:b9:7f:c2:ca:
                    e3:76:f5:97:06:8a:8c:4f:fc:d5:25:8e:c1:e7:65:
                    6f:5c:9d:ff:90:f0:2f:2f:22:e9:58:27:24:4d:a5:
                    b1:3e:4c:57:fa:78:04:40:8b:67:ff:0e:b0:7c:7c:
                    76:d8:44:59:06:30:a2:bf:7a:e6:0b:ba:9c:64:48:
                    06:16:86:25:d6:4e:bf:b5:03:08:7b:62:eb:72:b3:
                    e0:dd:a5:81:2f:d9:51:12:df:c8:1c:e6:c2:dd:1f:
                    76:0a:02:16:4d:de:b7:05:12:53:3a:cb:84:37:12:
                    be:09:c1:f1:70:8d:9c:f4:04:84:b3:34:68:0f:88:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:9C:66:E8:53:20:45:D4:69:64:FA:A7:15:D7:A8:DA:DF:D7:D3
            X509v3 Authority Key Identifier:
                keyid:C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/cn6cZuhTIEXUaWT6pxXXqNrf19M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/yaNv36QcdGnOc9yLvs6UYty4yCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:6f:72:5f:ae:05:56:fd:46:8a:9c:c9:84:bf:56:e2:47:
         9c:69:e2:45:27:65:35:76:ef:89:5c:b7:62:f8:e5:d9:4f:43:
         8d:b9:28:0b:41:3e:b1:9c:f3:27:cc:75:19:6d:8d:75:41:c8:
         a5:05:13:99:f3:74:83:08:86:a5:5a:25:ee:eb:9f:f7:c8:e4:
         af:e7:f1:f0:3b:23:72:8b:ae:7c:68:e3:43:71:5e:88:90:02:
         42:48:c5:b0:58:21:82:58:25:4b:69:2f:38:36:31:76:29:d6:
         32:45:cd:35:db:b4:83:1d:37:c2:09:db:14:30:21:3f:47:9f:
         5c:f7:c0:ac:a9:8e:97:1f:ee:38:cd:a0:e3:62:52:a0:06:40:
         3b:bf:52:dd:0b:99:37:f9:bb:fd:d6:31:c2:bf:ac:5f:94:fe:
         69:bd:e8:15:2b:dc:dd:ca:8d:8e:ee:1e:a8:45:7b:b2:a8:59:
         6f:6e:94:50:be:b6:6a:68:d6:31:af:5d:2b:05:85:2c:91:c8:
         9a:8d:e6:4b:20:16:07:e7:dd:d1:8e:b5:cf:ea:9c:ab:8b:49:
         0e:af:5d:49:df:e5:eb:37:52:bb:28:49:20:3d:e8:8e:5b:db:
         6f:b1:4a:13:25:80:2d:93:6b:b2:7d:99:4d:2a:b7:14:d1:be:
         be:7c:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:56 2024 by rpki-client on console-ams.rpki-client.org