Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/JB16T7-TW_J22c-PQ4LJiJDDjdI.roa
File:                     JB16T7-TW_J22c-PQ4LJiJDDjdI.roa (raw, json)
Hash identifier:          N0n2RHaolakUIHkY9e+50nSR2d49j7S9HBFA9Vy0WBU=
Subject key identifier:   24:1D:7A:4F:BF:93:5B:F2:76:D9:CF:8F:43:82:C9:88:90:C3:8D:D2
Certificate issuer:       /CN=499f94c7536f68ef3e8053cd7316f3e9bd54d257
Certificate serial:       0239A021
Authority key identifier: 49:9F:94:C7:53:6F:68:EF:3E:80:53:CD:73:16:F3:E9:BD:54:D2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/JB16T7-TW_J22c-PQ4LJiJDDjdI.roa
Signing time:             Sat 01 Jan 2022 13:54:18 +0000
ROA not before:           Sat 01 Jan 2022 13:54:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197696
IP address blocks:        213.232.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37330977 (0x239a021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499f94c7536f68ef3e8053cd7316f3e9bd54d257
        Validity
            Not Before: Jan  1 13:54:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=241d7a4fbf935bf276d9cf8f4382c98890c38dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:8c:d4:74:0d:e4:59:b6:43:48:02:3e:e5:
                    05:89:5d:36:02:2a:ae:17:f7:2b:49:f9:77:5d:69:
                    9e:fe:3f:c8:d8:a2:96:3d:5f:7b:df:4e:eb:90:84:
                    86:8f:e3:c7:67:68:b0:d2:60:46:2c:00:dd:e6:51:
                    67:6d:02:aa:5e:f6:89:8b:50:83:34:2a:2a:37:6f:
                    d9:36:83:d4:04:6c:92:f1:08:b0:5e:0d:fb:e4:10:
                    a7:e5:1b:ed:c6:e9:0a:07:5c:c6:78:21:d8:09:35:
                    b5:e7:e6:ba:40:31:0c:f7:3d:d7:34:4d:a8:84:c8:
                    54:b9:02:e2:36:30:d4:c3:5d:a9:37:91:57:02:f2:
                    31:de:9d:74:21:00:c7:29:d6:f1:ee:fc:f7:30:7e:
                    f4:95:73:5f:18:39:0c:a9:ea:7e:3f:51:fb:30:6e:
                    05:26:7a:c8:01:c0:d4:f5:be:2d:31:fa:f1:9f:6f:
                    21:79:b8:be:47:09:e7:22:9e:80:77:b4:b4:c7:d8:
                    7d:f7:06:73:9d:0b:52:db:95:be:bd:d1:eb:47:39:
                    64:79:f8:aa:05:b5:b8:cb:5a:52:11:13:55:ac:cc:
                    98:22:68:90:9b:62:fa:b3:22:1e:34:d8:3f:cc:c0:
                    b0:21:61:66:71:3d:76:97:ec:f2:fa:5b:ef:0b:0b:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:7A:4F:BF:93:5B:F2:76:D9:CF:8F:43:82:C9:88:90:C3:8D:D2
            X509v3 Authority Key Identifier:
                keyid:49:9F:94:C7:53:6F:68:EF:3E:80:53:CD:73:16:F3:E9:BD:54:D2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/JB16T7-TW_J22c-PQ4LJiJDDjdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:ef:66:8a:f5:bc:64:44:c3:8a:9b:ee:94:ff:18:d7:1b:
         71:5f:87:5b:40:12:82:31:36:31:87:3f:79:2f:b7:5a:02:5b:
         cf:af:06:48:e1:64:ec:a1:9b:83:bd:4c:ba:a5:5d:4f:cb:21:
         e7:07:0d:a6:bb:c4:49:3a:d1:e2:e1:df:7d:0e:bb:61:a9:53:
         99:e7:56:c8:6e:8e:67:63:09:ff:5e:df:d3:e1:94:04:80:73:
         64:98:54:54:48:08:cf:e8:51:b0:eb:2a:fc:e2:3e:9f:f6:4b:
         86:44:24:3b:3a:7e:ad:76:42:36:2e:3a:3b:37:6a:20:ab:29:
         90:06:d5:48:c1:38:72:38:81:44:26:44:b3:66:ee:a5:6f:38:
         e8:38:6a:d2:d6:1c:d3:0c:f0:2b:f4:fc:35:a8:12:be:f6:02:
         89:9d:08:50:02:ca:1b:30:47:df:c6:97:9c:9d:4f:ad:01:13:
         c6:75:ec:33:dc:ee:fc:e0:01:cc:b8:cf:d8:2f:06:ff:d7:c8:
         ce:f3:a2:c9:8e:84:2b:8e:92:a3:f5:b5:57:8d:3b:e1:58:c5:
         a4:37:df:0d:e2:0d:99:50:cc:22:95:8b:43:27:d9:64:a2:15:
         ba:d1:16:f4:f8:c6:1d:fa:2a:78:06:ce:31:44:a1:26:9c:58:
         b9:a6:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org