Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/7rYrpl360K-SFCLDvkQzKBF8wcU.roa
File:                     7rYrpl360K-SFCLDvkQzKBF8wcU.roa (raw, json)
Hash identifier:          GjSMNI0OQTv+pAswmOaO/j4gB1eqpeup23G0W7JhYhY=
Subject key identifier:   EE:B6:2B:A6:5D:FA:D0:AF:92:14:22:C3:BE:44:33:28:11:7C:C1:C5
Certificate issuer:       /CN=d57d321483d9493d9a265b276da3e65bcbfe6400
Certificate serial:       62B405
Authority key identifier: D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/7rYrpl360K-SFCLDvkQzKBF8wcU.roa
Signing time:             Sat 01 Jan 2022 02:54:34 +0000
ROA not before:           Sat 01 Jan 2022 02:54:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6468613 (0x62b405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57d321483d9493d9a265b276da3e65bcbfe6400
        Validity
            Not Before: Jan  1 02:54:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eeb62ba65dfad0af921422c3be443328117cc1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:fd:e7:e0:e4:7f:ea:55:27:d2:5d:2d:09:
                    f4:b9:85:e4:7a:f4:73:09:21:04:2d:6f:42:fd:3e:
                    e8:47:69:a5:b1:37:43:95:92:6c:2a:07:47:cc:50:
                    45:9f:19:ea:6e:44:ef:47:c1:dd:a0:74:0d:8a:2d:
                    8d:42:af:7c:fb:db:c5:7d:6d:a5:de:e4:10:99:ad:
                    c8:f6:f3:ae:69:e8:d6:30:65:a3:b4:70:3c:8c:c4:
                    1e:42:ab:f9:da:c2:06:d0:78:fb:1d:af:50:56:27:
                    c2:7f:b3:e7:80:29:b6:6a:76:0a:94:66:8a:9a:75:
                    6f:1b:42:c0:3d:4b:5c:a1:fa:6d:aa:09:84:8e:76:
                    6f:5b:25:11:d4:f4:12:d4:68:1e:c4:80:0b:65:08:
                    c8:ec:64:dd:3d:a4:02:9c:fb:91:81:70:60:e9:d8:
                    31:4f:58:bb:e1:a1:18:0a:58:b9:0b:ec:30:26:da:
                    3f:53:31:d6:87:69:34:84:99:be:45:b1:a8:78:64:
                    31:ef:53:93:fa:0e:ba:66:3a:a9:e9:3a:ac:49:4a:
                    b6:6c:1f:82:ba:74:88:72:c1:38:b8:3c:7b:89:79:
                    fc:00:42:85:a2:55:3b:db:6c:c4:d3:94:49:94:ad:
                    88:32:47:b1:52:82:4d:f4:7b:bb:38:07:22:5c:82:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B6:2B:A6:5D:FA:D0:AF:92:14:22:C3:BE:44:33:28:11:7C:C1:C5
            X509v3 Authority Key Identifier:
                keyid:D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/7rYrpl360K-SFCLDvkQzKBF8wcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/1X0yFIPZST2aJlsnbaPmW8v-ZAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:a2:3f:16:12:56:d5:23:09:bb:9b:0d:a9:53:c7:c5:a3:
         fa:ff:1f:0f:c2:4f:8b:d8:88:86:fa:84:95:f5:5a:05:17:d6:
         bc:af:f5:5d:a5:d6:a3:29:ac:13:90:71:e6:48:0b:3f:4d:67:
         c1:b0:fd:e1:64:4d:0c:0a:0f:5f:7d:15:01:67:20:2f:59:dc:
         66:dc:84:09:e5:c5:13:c6:10:6d:fa:f7:7d:84:90:46:96:bf:
         6f:b4:70:3a:8c:ca:54:86:3d:a7:19:7b:24:c0:80:28:9b:ac:
         b5:37:ce:63:ae:4e:04:25:1f:73:99:a5:a6:65:6a:60:f5:8b:
         77:c8:4d:ed:04:fa:0d:0b:d6:f4:aa:26:15:c1:f6:52:62:42:
         45:4d:2c:6e:14:05:32:9f:9f:b8:c8:6d:9b:0f:eb:15:bd:98:
         f3:b2:b7:9c:f3:0d:3d:f2:82:71:56:06:2d:f9:75:c9:30:90:
         91:3a:0f:3c:d8:8f:b6:02:cb:b2:5a:9b:50:11:08:cb:5c:86:
         4a:d4:6c:62:ac:7c:02:da:3e:96:bd:da:cc:e1:11:8a:ab:77:
         8e:ce:96:ff:43:c9:f0:21:e5:19:66:dc:26:5a:a1:35:bd:b2:
         14:20:f1:75:da:73:42:9e:f4:93:05:f2:55:1b:97:8c:b4:ad:
         a7:04:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org