Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa
File:                     yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa (raw, json)
Hash identifier:          /EaxrvQwMhaZ6SbNKMEhV+oc3eqOAAugU5sbBPV4svg=
Subject key identifier:   CA:34:B5:59:B8:74:9E:68:A5:0C:87:91:2A:93:9C:34:61:67:34:08
Certificate issuer:       /CN=d57d321483d9493d9a265b276da3e65bcbfe6400
Certificate serial:       018572CCB166498139D06D3B8BAA3F88FDDE
Authority key identifier: D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa
Signing time:             Mon 02 Jan 2023 14:04:55 +0000
ROA not before:           Mon 02 Jan 2023 14:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:cc:b1:66:49:81:39:d0:6d:3b:8b:aa:3f:88:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57d321483d9493d9a265b276da3e65bcbfe6400
        Validity
            Not Before: Jan  2 14:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca34b559b8749e68a50c87912a939c3461673408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8a:92:3b:3b:81:d5:9c:4c:b3:9a:d2:64:2b:
                    42:cc:86:e3:7d:7e:08:95:81:48:c3:2e:1c:fb:47:
                    e9:62:88:82:8a:42:4b:95:4b:90:f1:44:0a:fb:17:
                    a8:07:b6:dd:8b:5d:77:fe:66:74:3a:0a:ff:21:e7:
                    1b:64:3b:ab:b0:d2:8d:2e:2f:5b:27:fd:bc:60:d0:
                    c4:af:3f:9e:e6:7c:bb:c4:6b:d6:1b:b5:53:6a:7e:
                    9d:9c:e6:f9:47:a5:b1:46:40:ea:75:c6:fc:35:61:
                    11:0f:3c:0b:86:ef:2b:c5:c6:d9:33:74:73:c6:6c:
                    7e:ba:20:a7:5c:32:81:ea:e0:ea:b7:72:48:d7:23:
                    73:19:8b:16:55:8d:47:17:dd:2c:40:eb:6f:b2:f3:
                    b3:a8:56:15:c0:88:2a:00:62:e6:2b:35:52:3f:e5:
                    b5:ea:65:40:41:aa:94:97:30:3a:db:6d:0b:cf:4f:
                    1a:82:76:dd:e3:b1:17:fc:4e:0e:a5:f9:8c:0a:8c:
                    03:43:92:8f:8a:14:fc:b9:1f:0a:24:c2:85:2d:72:
                    0c:2d:91:fb:44:28:5e:84:dc:2b:35:2c:9d:36:57:
                    e2:57:28:ec:82:e8:d6:df:c7:a4:ab:2a:ac:bd:8b:
                    dd:51:70:4b:db:ea:e6:4a:10:ac:fd:7a:85:9a:ed:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:B5:59:B8:74:9E:68:A5:0C:87:91:2A:93:9C:34:61:67:34:08
            X509v3 Authority Key Identifier:
                keyid:D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/1X0yFIPZST2aJlsnbaPmW8v-ZAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:75:36:75:9a:14:c5:f4:b8:51:ba:21:96:af:1a:f4:48:48:
         21:15:ee:8c:7f:46:88:c0:17:00:65:cb:25:2d:56:17:5f:31:
         88:db:20:e4:e2:e5:c8:cd:ed:f8:07:78:49:c0:57:de:bf:52:
         8b:17:54:8d:cc:26:2d:84:85:1b:45:28:24:de:ec:78:5e:22:
         50:6c:e9:6a:a6:e2:43:08:fc:f5:28:a4:d7:e8:f1:69:f6:fe:
         93:a6:fb:86:c9:e4:63:54:71:ed:b7:c9:c4:21:56:33:2e:b3:
         05:2a:28:6d:93:24:70:c6:09:6f:90:b9:50:f9:7c:73:18:06:
         7d:c5:e1:91:62:10:d9:93:79:94:df:8b:2c:4a:f5:cf:fd:ed:
         f0:d9:9d:d9:c9:29:f2:8e:2d:09:1d:7d:28:99:79:b4:93:f9:
         af:86:11:23:32:d9:65:69:63:27:7a:cc:d3:08:c3:99:66:b6:
         f9:d1:88:55:49:ee:67:00:d0:09:97:04:5f:33:52:e5:8c:12:
         b2:c5:88:97:39:17:a0:b2:d9:c0:b7:29:4e:81:b0:42:f2:c8:
         9e:36:20:56:54:92:83:a9:a0:bd:2c:04:cf:81:e5:3f:3a:69:
         7d:18:14:88:e3:7f:89:f6:bc:17:f8:db:1b:e8:5d:be:bd:5d:
         c6:73:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org