Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa
File:                     TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa (raw, json)
Hash identifier:          SsrHvv23wg2jTS5yQMJ2xApBs4LdXa/DSVqZ0Mrrdnk=
Subject key identifier:   4D:22:B2:93:BA:EA:89:09:14:62:43:6A:47:12:14:D0:45:0D:66:92
Certificate issuer:       /CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Certificate serial:       0104CEBC
Authority key identifier: 77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa
Signing time:             Mon 07 Mar 2022 17:31:10 +0000
ROA not before:           Mon 07 Mar 2022 17:31:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17092284 (0x104cebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
        Validity
            Not Before: Mar  7 17:31:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d22b293baea89091462436a471214d0450d6692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:4f:54:fd:f1:93:a5:b4:2f:89:9a:34:f2:
                    61:e0:1a:c7:1a:20:c6:07:57:22:aa:ea:fa:98:23:
                    cf:92:b3:d9:24:16:19:23:ff:f9:e1:fa:4d:0d:6c:
                    2c:0e:d3:01:46:34:e7:1f:44:05:eb:59:b5:89:c0:
                    ca:80:3c:b2:0d:80:2f:11:fc:dd:ad:65:28:24:54:
                    c0:29:e2:f1:72:64:05:67:9a:54:f1:f4:f4:81:5b:
                    1b:8b:05:ee:c2:4b:bb:a9:05:62:f3:9f:86:39:3d:
                    57:c3:ea:c4:b6:7d:50:9d:13:b4:8f:de:50:e7:94:
                    cc:69:94:f0:16:65:47:b4:20:e5:79:a9:3c:cd:b3:
                    65:c9:10:b0:85:c2:95:ec:a3:5a:4b:54:72:6a:34:
                    00:8f:7e:e2:be:10:92:54:f5:dd:b8:74:28:ff:0b:
                    bf:55:00:d1:25:b1:83:d7:07:db:24:3d:76:25:b0:
                    6b:ac:2e:b5:b8:e0:6a:f6:fd:91:7e:eb:53:5f:9e:
                    73:52:a3:71:8b:d8:72:ac:46:25:67:d9:0b:87:ba:
                    cb:fe:51:60:e1:dd:b8:ff:83:25:07:84:0c:8a:d6:
                    c1:46:2d:bf:9f:70:62:fe:a9:54:27:f2:40:ad:00:
                    7d:a0:26:d6:6a:d5:d6:86:13:2d:4f:89:75:7e:3f:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:B2:93:BA:EA:89:09:14:62:43:6A:47:12:14:D0:45:0D:66:92
            X509v3 Authority Key Identifier:
                keyid:77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:33:0f:d7:43:e2:8d:df:dc:2b:92:62:db:6b:55:92:74:
         56:e2:aa:f3:81:41:08:77:c4:50:49:81:af:27:f2:bf:d2:04:
         e9:43:bf:3e:a6:85:e8:8e:dc:1f:42:fe:d4:df:a6:55:e2:48:
         bf:36:b2:50:e3:93:0f:51:32:31:26:5d:df:64:04:d5:40:9b:
         06:bb:f2:46:03:e1:80:99:e3:3c:ec:db:8b:33:00:43:f2:2a:
         44:5d:9d:91:8a:4b:48:10:12:01:19:62:7c:7c:0c:af:cb:a9:
         31:68:aa:69:c1:24:77:3a:ab:dd:5c:17:b5:37:5e:f1:32:b3:
         d4:38:9e:78:2a:6f:54:c8:c6:53:7f:f9:03:58:5d:5f:17:c0:
         cb:22:4a:b8:26:4d:95:17:a2:5e:fa:04:11:54:a5:8c:f4:5e:
         e2:d6:3b:d6:a9:0f:37:70:2d:c7:a5:3e:96:49:58:69:90:1b:
         f6:3e:4e:6f:dd:27:58:b7:16:3d:ca:0b:49:32:02:17:77:c4:
         d8:2f:7d:28:65:ed:22:fa:b4:e5:dc:93:51:91:2c:87:35:61:
         58:ae:91:03:2d:40:ab:3c:19:f9:66:e7:2f:05:12:2a:b6:7b:
         9d:f2:5c:60:3a:be:7f:67:e7:b0:6b:39:40:05:e4:b0:8b:ec:
         9c:ec:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:04 2024 by rpki-client on console-ams.rpki-client.org