Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/0TwftThygtOSj4DZ95iXuVCQQVQ.roa
File:                     0TwftThygtOSj4DZ95iXuVCQQVQ.roa (raw, json)
Hash identifier:          05+7GXa3hcQG6UZhTY7N+ECi+mtLe8D+oaZrQmZ3KB4=
Subject key identifier:   D1:3C:1F:B5:38:72:82:D3:92:8F:80:D9:F7:98:97:B9:50:90:41:54
Certificate issuer:       /CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Certificate serial:       0BB206
Authority key identifier: 50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/0TwftThygtOSj4DZ95iXuVCQQVQ.roa
Signing time:             Tue 17 May 2022 06:35:29 +0000
ROA not before:           Tue 17 May 2022 06:35:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        146.19.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766470 (0xbb206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
        Validity
            Not Before: May 17 06:35:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d13c1fb5387282d3928f80d9f79897b950904154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:25:0d:c3:a0:b8:fc:16:24:8c:83:66:61:
                    d7:fa:a0:a1:a3:89:2f:86:46:e1:64:62:8f:a0:54:
                    9a:7a:c8:ca:6b:10:44:bc:04:00:af:79:95:d6:d6:
                    76:54:32:c7:dd:95:b7:2a:26:cd:e6:ef:d6:17:74:
                    8d:73:ed:9f:a5:7c:e6:2e:a8:da:a4:d0:78:c5:01:
                    f0:89:70:9e:c9:20:d7:ca:53:8a:95:3a:d9:f6:30:
                    fe:e6:33:09:3d:03:ba:ce:71:92:e6:89:be:69:51:
                    cc:35:e2:fe:d1:7c:23:de:a5:89:96:fe:9d:d8:6b:
                    1c:6f:38:c2:2f:ef:37:5c:d8:4f:8c:4f:9e:6b:86:
                    20:01:4f:e5:f2:1f:46:6f:12:54:9e:87:f5:14:a6:
                    7e:2c:23:c8:4d:25:da:a2:0a:44:62:81:25:e0:49:
                    ce:0c:2f:5c:72:f8:59:11:7e:9f:64:ab:ad:12:0c:
                    33:a8:39:f7:7f:7f:e1:b4:fc:72:c1:cd:be:b1:bd:
                    17:99:5d:db:2c:29:05:38:d6:f7:22:c3:8e:c2:38:
                    9a:89:a3:59:72:84:18:44:25:c0:3e:af:d5:85:f7:
                    d6:b5:5b:9e:fb:10:4b:71:89:9d:4a:7a:35:a1:b5:
                    5b:e0:7f:4d:5e:fc:cd:97:58:68:47:9c:0e:75:15:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3C:1F:B5:38:72:82:D3:92:8F:80:D9:F7:98:97:B9:50:90:41:54
            X509v3 Authority Key Identifier:
                keyid:50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/0TwftThygtOSj4DZ95iXuVCQQVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:f1:65:e7:21:59:fc:3e:eb:1a:6e:68:bd:95:c9:34:90:
         96:fa:49:ea:f9:5b:1f:21:1a:bb:7a:d4:ad:d9:d5:bf:3e:73:
         1d:97:6c:6d:a3:ad:69:a7:6b:2a:37:60:91:e7:d9:ec:a9:e6:
         f7:e4:a9:08:43:6d:58:73:8c:46:1b:0c:f5:f2:8d:b6:2e:54:
         2a:5c:69:ab:a8:6f:5b:2b:25:24:9c:66:5a:80:39:25:d8:d9:
         38:ed:7d:fd:7c:24:7f:64:2a:d7:99:2d:21:d9:ac:29:3c:42:
         1a:eb:2d:b4:45:a8:43:5e:ed:6b:4a:e8:5a:a6:ae:fe:89:81:
         4b:f6:eb:dd:ab:67:77:2e:03:9c:72:e3:b6:a9:62:7c:dd:f9:
         20:2b:d7:34:33:d5:0c:d3:56:81:ce:2d:45:25:4e:1f:18:d4:
         18:79:a0:da:85:63:03:81:af:b9:5d:86:4c:f6:f4:8f:6d:80:
         30:87:dd:6c:8c:a6:fb:e4:93:a9:e3:8f:b7:a3:41:fb:12:3a:
         fb:66:a5:fa:43:fb:73:1a:0a:46:9d:4c:c4:bc:9c:90:72:f9:
         72:ec:1d:25:e3:4f:b6:f3:97:08:e8:4c:1c:7a:64:a1:3f:d0:
         13:d8:2e:0f:6e:83:cd:ea:0e:2b:30:9d:11:d5:7a:5b:0f:7d:
         59:bd:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:13 2024 by rpki-client on console-ams.rpki-client.org