Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/IiD4K7l6S36_WKyxMZNDNPumO8w.roa
File:                     IiD4K7l6S36_WKyxMZNDNPumO8w.roa (raw, json)
Hash identifier:          He/N310NOVMa/UAAe7hgGNRTP/cY9TZB4UXJbTbg07Q=
Subject key identifier:   22:20:F8:2B:B9:7A:4B:7E:BF:58:AC:B1:31:93:43:34:FB:A6:3B:CC
Certificate issuer:       /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial:       689CD7
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/IiD4K7l6S36_WKyxMZNDNPumO8w.roa
Signing time:             Sat 01 Jan 2022 01:01:14 +0000
ROA not before:           Sat 01 Jan 2022 01:01:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.19.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6855895 (0x689cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
        Validity
            Not Before: Jan  1 01:01:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2220f82bb97a4b7ebf58acb131934334fba63bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:8a:81:0d:08:28:51:c5:17:b3:e5:a1:6f:
                    00:88:4d:ec:67:f4:36:62:54:8c:f6:04:c5:9a:70:
                    57:48:91:95:b5:1f:96:82:97:38:58:3d:89:23:5f:
                    f4:b9:fd:02:6c:a7:58:28:09:5d:c4:f5:06:c6:2e:
                    07:b2:24:ad:76:16:d9:d4:17:61:4c:31:e9:bb:80:
                    f3:85:a4:05:1e:77:53:bd:5f:2b:a8:28:35:54:ab:
                    9d:46:51:ec:e1:d7:fb:bb:73:d2:1b:a7:69:f7:2a:
                    94:ad:31:6e:a0:94:51:84:a3:07:66:74:a0:8b:3a:
                    2c:29:8b:c4:ed:9c:24:54:6f:8b:5d:9a:d8:db:2b:
                    9a:9f:b2:39:26:66:dd:39:a3:05:52:e9:df:d1:4e:
                    6d:2c:1e:cd:71:14:74:95:5e:55:63:0b:60:f9:13:
                    72:90:3d:0c:d5:7a:d6:5b:b5:f1:d9:61:0b:ba:27:
                    2c:83:e7:38:e2:26:56:ee:6d:8d:33:00:dc:7a:31:
                    22:92:d0:83:00:38:0c:de:c2:80:b0:80:50:b5:42:
                    21:57:16:0c:11:5b:f7:52:b9:f0:9d:c8:59:60:41:
                    c3:75:b6:8a:2c:bd:06:44:f1:99:2a:6d:0e:ff:0a:
                    b6:39:6f:d7:9f:86:c0:de:de:06:ce:22:0e:df:fb:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:F8:2B:B9:7A:4B:7E:BF:58:AC:B1:31:93:43:34:FB:A6:3B:CC
            X509v3 Authority Key Identifier:
                keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/IiD4K7l6S36_WKyxMZNDNPumO8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:e1:43:f8:f1:76:6c:35:a8:17:c0:19:8c:78:96:97:b1:
         c4:b6:3c:fa:e5:a5:4e:8c:a1:b0:e1:b7:f3:aa:14:c6:66:37:
         50:94:8b:82:e4:ed:0c:4e:b0:e8:89:20:46:2e:2a:98:94:cb:
         03:b5:05:d3:4e:dd:40:9a:04:5a:4f:36:e3:df:3a:1b:98:85:
         bc:b3:c4:95:6d:c4:01:09:44:07:9a:ce:48:17:d3:dd:50:8d:
         63:62:3c:c7:b5:11:80:c8:04:34:94:62:2b:23:2c:25:b1:da:
         38:2c:39:6f:dc:d4:0b:15:e8:7d:a7:98:06:a7:1a:c2:4f:57:
         ea:5f:d7:63:01:32:70:9a:83:43:af:e7:36:23:35:0c:cd:dd:
         9a:0a:09:59:33:8b:60:e9:02:af:47:75:56:97:11:33:d6:32:
         e1:b5:b2:05:3c:7a:00:7f:79:1e:6b:ad:8f:c2:99:24:53:4b:
         f8:82:46:53:68:fd:25:d8:4f:0f:e9:b3:26:48:b3:ff:c8:69:
         bd:2b:a9:82:b3:7c:8f:9e:79:b7:71:a3:0a:bc:ed:29:5a:75:
         8b:9f:26:0a:e2:9e:9d:c4:d2:8e:88:5b:33:bf:2d:97:09:80:
         1e:41:ba:41:b8:6b:6d:b6:11:05:b5:e5:ee:97:bc:1d:85:b4:
         3b:bb:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:26 2024 by rpki-client on console-ams.rpki-client.org