Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/kTwoM4rcyN8rPZ8wEwTcU3Dw2R8.roa
File:                     kTwoM4rcyN8rPZ8wEwTcU3Dw2R8.roa (raw, json)
Hash identifier:          kbFM2zFcFGwBVYPSEGL05BHVAUDJdDQTwiHGUZfhgUs=
Subject key identifier:   91:3C:28:33:8A:DC:C8:DF:2B:3D:9F:30:13:04:DC:53:70:F0:D9:1F
Certificate issuer:       /CN=ab8caf72807eb34cebc12c14bb4a9452b497aca0
Certificate serial:       D27A68
Authority key identifier: AB:8C:AF:72:80:7E:B3:4C:EB:C1:2C:14:BB:4A:94:52:B4:97:AC:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4yvcoB-s0zrwSwUu0qUUrSXrKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/kTwoM4rcyN8rPZ8wEwTcU3Dw2R8.roa
Signing time:             Sat 01 Jan 2022 11:04:57 +0000
ROA not before:           Sat 01 Jan 2022 11:04:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        194.104.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13793896 (0xd27a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8caf72807eb34cebc12c14bb4a9452b497aca0
        Validity
            Not Before: Jan  1 11:04:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=913c28338adcc8df2b3d9f301304dc5370f0d91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:b2:a1:c5:ea:83:97:b4:aa:11:87:c9:62:
                    88:b0:07:7f:01:7f:f5:7b:8c:12:e9:4b:1b:5c:3f:
                    33:51:da:23:c7:32:36:eb:62:f9:66:eb:d0:df:57:
                    e8:70:c5:f0:7c:6c:b5:6b:39:5b:90:81:28:ca:e8:
                    a3:41:ab:7c:b7:68:8b:5c:9d:90:33:76:dd:87:c2:
                    e5:77:25:96:6d:b6:7a:46:55:95:7e:6d:2a:9e:97:
                    df:34:4c:df:6e:70:ce:84:f0:6d:14:68:8d:dc:8b:
                    8a:12:9d:9c:bf:bd:fe:59:a9:a8:4d:04:b1:3a:5f:
                    91:8a:73:49:88:44:32:a1:0f:26:1c:62:b5:7d:5d:
                    ff:17:34:21:df:95:78:e1:7f:9c:16:bc:a3:a7:14:
                    bd:7b:d0:2f:55:1f:31:b5:d1:c7:a4:de:89:e6:91:
                    ca:8c:2b:ae:02:ce:7d:6e:0e:fa:fa:a1:7e:70:70:
                    c7:1d:1f:ef:82:cd:82:82:d9:1a:1e:55:0e:11:66:
                    39:b5:aa:78:67:5c:83:a9:cb:6e:a1:da:88:0f:48:
                    17:e7:5b:51:98:dc:f2:48:5d:e6:88:b9:88:81:b5:
                    2f:51:b9:b3:7b:3d:44:6d:7f:09:ec:bd:e0:7a:e9:
                    66:02:c9:2d:5a:28:be:03:2e:92:49:a1:d4:6a:db:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3C:28:33:8A:DC:C8:DF:2B:3D:9F:30:13:04:DC:53:70:F0:D9:1F
            X509v3 Authority Key Identifier:
                keyid:AB:8C:AF:72:80:7E:B3:4C:EB:C1:2C:14:BB:4A:94:52:B4:97:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4yvcoB-s0zrwSwUu0qUUrSXrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/kTwoM4rcyN8rPZ8wEwTcU3Dw2R8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/q4yvcoB-s0zrwSwUu0qUUrSXrKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:c4:6d:9a:2b:e5:04:25:f4:98:dc:87:67:b0:1a:14:1c:
         f9:72:82:27:a5:b4:7d:6a:b6:6c:af:7e:8a:0d:a6:15:6d:e6:
         81:f1:c2:65:17:11:03:18:41:ac:b6:f3:40:7c:69:37:2d:81:
         98:66:9b:77:05:3f:8e:24:f4:01:ec:86:01:95:c5:f7:4f:95:
         e8:4e:cd:08:e1:51:07:b8:97:e1:1c:98:61:a7:0a:70:f4:e8:
         dc:e2:d5:5b:61:0a:a8:3d:37:ad:0f:d4:20:b9:f8:9d:fc:ef:
         43:9c:97:99:05:f8:81:80:5b:f0:1d:95:45:5a:a5:40:56:27:
         38:79:2b:e3:6d:23:d6:8c:16:08:eb:06:88:6b:76:15:2a:43:
         d5:6f:49:7e:8c:ce:a7:05:f4:40:17:c8:08:a2:46:be:18:c2:
         19:a4:84:bb:7c:49:e9:70:ea:ed:ce:6f:e5:67:a3:41:a4:f1:
         f7:74:8a:c0:57:cb:b0:8d:66:e4:10:2b:5e:50:c8:29:4a:fe:
         8d:68:c8:b9:c8:4d:24:c7:88:f4:8a:34:a9:ef:29:75:d8:2e:
         50:bc:ed:86:ed:15:aa:67:4e:83:26:78:66:cd:b6:21:e9:c5:
         ea:73:c5:98:8c:27:be:4f:e7:25:8b:e2:aa:f5:10:5a:7d:be:
         e2:d5:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:10 2024 by rpki-client on console-ams.rpki-client.org