Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/1Kic9PipFo8pwCZDv3CKN34LbfU.roa
File:                     1Kic9PipFo8pwCZDv3CKN34LbfU.roa (raw, json)
Hash identifier:          Cu+Shv949Afv6/3jR5dY8Pu9uRFMb9W/7Y3+hzY9L3g=
Subject key identifier:   D4:A8:9C:F4:F8:A9:16:8F:29:C0:26:43:BF:70:8A:37:7E:0B:6D:F5
Certificate issuer:       /CN=2f32b5d5f1b98e085eea3a016e080c859b417583
Certificate serial:       0181F4557AD0EEDFECDAA39A8F88487536C0
Authority key identifier: 2F:32:B5:D5:F1:B9:8E:08:5E:EA:3A:01:6E:08:0C:85:9B:41:75:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzK11fG5jghe6joBbggMhZtBdYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/1Kic9PipFo8pwCZDv3CKN34LbfU.roa
Signing time:             Tue 12 Jul 2022 21:34:11 +0000
ROA not before:           Tue 12 Jul 2022 21:34:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        146.19.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:55:7a:d0:ee:df:ec:da:a3:9a:8f:88:48:75:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f32b5d5f1b98e085eea3a016e080c859b417583
        Validity
            Not Before: Jul 12 21:34:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d4a89cf4f8a9168f29c02643bf708a377e0b6df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:fe:3e:15:eb:80:57:de:ee:e3:82:79:5c:
                    19:c6:90:04:d9:13:be:79:e1:ca:94:d2:df:d8:26:
                    dd:99:fe:fa:13:20:ce:5f:ab:ed:3b:71:60:ec:c0:
                    fc:0d:dc:94:14:22:f1:b6:8d:e3:49:f1:b2:05:8e:
                    2a:2e:15:0c:65:e8:e6:00:2c:26:06:c2:00:84:15:
                    6b:b9:96:73:76:36:ad:98:68:59:1a:42:85:12:bf:
                    1c:ca:f5:c1:15:23:b1:26:87:98:9f:e2:8e:b5:a2:
                    f9:b4:50:b6:bc:e8:e1:74:e6:97:c3:e7:86:17:8a:
                    20:17:91:f4:bd:49:51:c4:5a:b3:81:ca:39:52:cf:
                    cf:a4:2b:be:92:8c:77:87:a7:cc:44:fc:ef:f9:6f:
                    fb:06:4e:48:4f:0d:87:68:aa:e5:26:18:6e:fb:9e:
                    fa:1c:a9:3c:ef:e7:88:d0:5e:85:14:e9:81:f4:aa:
                    32:77:f6:a5:86:b7:cb:a4:79:72:14:9e:42:c3:62:
                    56:24:a1:52:5a:e8:8a:cf:3e:57:6e:d9:9c:7b:b9:
                    8c:c4:74:de:6e:1e:a5:60:32:04:27:32:de:0e:84:
                    39:ac:12:d0:33:ad:41:f6:08:5c:1b:a0:26:45:a8:
                    a0:d1:eb:36:78:94:79:63:a9:b3:7c:29:d6:99:dc:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:9C:F4:F8:A9:16:8F:29:C0:26:43:BF:70:8A:37:7E:0B:6D:F5
            X509v3 Authority Key Identifier:
                keyid:2F:32:B5:D5:F1:B9:8E:08:5E:EA:3A:01:6E:08:0C:85:9B:41:75:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzK11fG5jghe6joBbggMhZtBdYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/1Kic9PipFo8pwCZDv3CKN34LbfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/LzK11fG5jghe6joBbggMhZtBdYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:be:08:52:1e:a9:89:bc:88:7a:d9:e2:8e:1c:c4:66:31:
         80:be:5b:32:c5:8d:5a:5a:d5:88:1c:e6:1d:5e:82:3b:0f:01:
         1b:0f:62:03:04:37:80:16:cb:9f:40:f8:94:e4:2c:a6:ee:ca:
         85:7c:6a:63:14:f0:1c:df:2a:94:aa:f1:7f:48:e2:67:2b:5a:
         57:ca:ec:bd:b0:48:7a:a7:21:3f:bc:e6:9d:79:07:78:17:3e:
         86:da:d9:9a:2a:93:b1:dc:0d:bf:0e:36:93:89:2e:c6:bd:04:
         a0:74:36:28:cd:75:97:26:73:cc:7c:db:af:f2:2b:98:ea:c1:
         8a:b2:4f:8e:22:b5:46:63:5b:a5:c8:8b:71:60:5e:65:e0:0c:
         83:7a:7e:d7:62:17:d0:7e:0f:a0:64:43:2d:85:31:82:a4:b6:
         e3:7a:8d:d1:b5:8c:30:33:db:7c:48:67:fb:03:d8:23:3d:7a:
         04:c9:18:90:66:ea:06:eb:a2:8d:f9:46:30:92:69:6f:15:de:
         36:d4:cd:91:47:95:b2:43:0d:60:f1:a5:0a:6c:64:a9:05:97:
         46:81:c1:77:51:e6:73:fe:cb:cc:e1:59:d2:71:ea:1b:20:72:
         52:c7:89:28:a7:c2:91:c9:de:e6:eb:7e:fe:4d:84:09:b4:5a:
         41:18:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-fra.rpki-client.org