Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/bTjJaerluWEadjvheionv2_ssgg.roa
File:                     bTjJaerluWEadjvheionv2_ssgg.roa (raw, json)
Hash identifier:          nk7x7R69JVnhJ5KLHnP/Wn5osbM1nhrKQKiUZipPfpY=
Subject key identifier:   6D:38:C9:69:EA:E5:B9:61:1A:76:3B:E1:7A:2A:27:BF:6F:EC:B2:08
Certificate issuer:       /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial:       018A6F08D8457FFECBA2BFA1513333369951
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/bTjJaerluWEadjvheionv2_ssgg.roa
Signing time:             Thu 07 Sep 2023 09:46:05 +0000
ROA not before:           Thu 07 Sep 2023 09:46:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62206
IP address blocks:        146.19.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6f:08:d8:45:7f:fe:cb:a2:bf:a1:51:33:33:36:99:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
        Validity
            Not Before: Sep  7 09:46:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6d38c969eae5b9611a763be17a2a27bf6fecb208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:5a:13:16:9c:25:75:44:f2:db:e5:01:96:
                    5e:e3:24:a6:6c:eb:68:f6:f3:2b:82:ab:63:e4:1c:
                    38:90:a3:c1:d9:c8:4f:b0:0f:cc:13:c4:50:cc:23:
                    db:e4:39:7d:e7:0a:b0:6b:58:99:3c:a2:5b:bc:3d:
                    a5:7f:af:1f:a3:53:64:15:e3:4c:93:e7:e3:e7:9a:
                    36:75:d8:43:05:0f:51:aa:2e:6f:bb:d1:48:fb:a4:
                    8f:06:c9:3d:75:96:e4:3a:3b:8d:35:de:da:29:12:
                    0f:0c:8d:6d:da:b4:56:fa:78:c4:98:47:c9:44:7d:
                    c6:52:d9:35:63:b6:75:86:11:00:8f:0e:a8:58:d8:
                    2d:8c:58:55:96:0f:7a:dd:40:95:97:87:02:73:1a:
                    e3:3a:f3:f0:4c:d0:ff:7c:84:59:64:e3:2d:bb:c6:
                    2b:a7:8f:d5:ed:fa:d6:35:8b:ed:ac:89:cd:66:6f:
                    84:39:aa:07:4a:b8:22:8b:76:83:80:c3:02:ad:7d:
                    bf:50:cb:8f:5c:50:ef:30:3f:80:e8:78:cb:72:28:
                    8c:1a:a2:e7:59:f3:22:93:c0:c1:45:a8:7e:b9:f8:
                    87:89:c1:57:1e:35:48:af:08:10:c4:85:a0:7c:38:
                    64:7e:2a:67:a5:ef:bc:df:48:69:83:cb:26:8c:25:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:C9:69:EA:E5:B9:61:1A:76:3B:E1:7A:2A:27:BF:6F:EC:B2:08
            X509v3 Authority Key Identifier:
                keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/bTjJaerluWEadjvheionv2_ssgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:66:19:39:03:76:95:90:c2:3c:0f:6a:ea:b3:0c:49:27:
         8b:21:2f:68:08:d5:bc:e2:44:74:53:38:cf:c1:eb:e4:3a:2e:
         9c:39:e5:5f:f2:90:fd:6d:f7:04:87:d5:4f:a0:50:39:e1:66:
         15:0d:2e:fc:95:7a:76:f0:ca:ea:48:d2:a7:4e:d9:38:86:39:
         66:31:f2:36:1e:8d:f0:03:b9:06:ba:fa:23:11:83:1a:37:49:
         fd:ab:2b:7a:91:1d:17:6e:e7:12:b5:e0:36:11:07:ac:83:a4:
         32:3b:54:36:c6:39:47:7c:48:8c:be:36:fa:96:5d:e6:c7:77:
         05:6a:93:52:8e:de:1d:4a:89:32:69:dd:90:69:9f:0b:a6:ef:
         46:3d:07:43:91:f2:8e:c0:c4:d8:28:5d:49:e5:67:0e:b2:3b:
         4d:35:f2:c4:eb:0f:c1:df:cf:97:8e:96:7b:e0:75:08:71:f9:
         e3:bf:73:32:5a:a6:80:9a:f4:3f:aa:d3:2b:d3:5f:07:bb:72:
         aa:1d:3d:2c:e4:e3:63:46:e6:97:d6:1e:93:f6:6e:bd:18:32:
         c2:56:12:b5:60:e4:cb:cb:dd:5a:ab:ff:6a:b0:d1:c4:c2:ed:
         72:c6:e3:a8:db:97:5d:06:29:bb:4b:99:dd:9a:82:0c:f7:79:
         60:6f:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:25 2024 by rpki-client on console-ams.rpki-client.org