Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/791XDkRWxuAmRC49pFpl0lK1frY.roa
File:                     791XDkRWxuAmRC49pFpl0lK1frY.roa (raw, json)
Hash identifier:          BfjHYpbWNuxWTkNpMGzbrzS0gGbUVKke1fblHZfu4FM=
Subject key identifier:   EF:DD:57:0E:44:56:C6:E0:26:44:2E:3D:A4:5A:65:D2:52:B5:7E:B6
Certificate issuer:       /CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
Certificate serial:       036A7DAD
Authority key identifier: 6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/791XDkRWxuAmRC49pFpl0lK1frY.roa
Signing time:             Sat 01 Jan 2022 13:05:22 +0000
ROA not before:           Sat 01 Jan 2022 13:05:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44094
IP address blocks:        193.201.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57310637 (0x36a7dad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
        Validity
            Not Before: Jan  1 13:05:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efdd570e4456c6e026442e3da45a65d252b57eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:be:70:84:a6:92:c0:5b:4e:63:fd:3a:2f:
                    87:fb:48:35:bc:6a:c1:42:45:90:95:81:ad:53:97:
                    fb:90:34:c6:01:95:a5:0b:73:99:5b:8e:48:38:de:
                    bb:73:6c:bc:30:4b:ca:fa:d3:99:1e:a7:4a:53:34:
                    78:f9:c6:2e:d4:23:79:2b:47:b3:be:c1:da:17:8b:
                    16:e2:40:f5:b0:a4:94:4c:6f:33:13:b3:a0:69:a0:
                    03:f3:ec:cf:94:d1:a7:16:bd:19:c0:49:fa:ba:1c:
                    7e:ab:c5:16:ce:fe:99:aa:d8:08:86:68:1a:35:2f:
                    31:81:ea:93:c0:25:6b:7f:e6:b2:6f:a1:4d:5f:3d:
                    53:0d:4f:79:35:9f:1b:a4:a2:f6:b3:96:fd:31:3d:
                    96:8d:93:ba:0b:6c:7b:76:1d:48:46:ca:7c:2a:78:
                    81:ea:50:50:07:ad:10:29:69:a5:f8:d7:b5:64:b1:
                    6e:3d:3e:42:7f:cd:12:ce:56:4d:49:f8:ec:b6:b8:
                    07:0f:95:40:4d:49:f3:ca:fb:51:57:4f:f1:b1:c9:
                    d6:84:00:34:ad:42:64:1a:d5:28:21:f0:6a:63:58:
                    3c:76:d8:b8:19:d1:13:3d:0f:0a:6d:16:a9:86:fa:
                    43:fc:a9:54:38:60:33:06:0d:4e:a4:22:44:86:0d:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:57:0E:44:56:C6:E0:26:44:2E:3D:A4:5A:65:D2:52:B5:7E:B6
            X509v3 Authority Key Identifier:
                keyid:6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/791XDkRWxuAmRC49pFpl0lK1frY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7f:5b:ec:e6:5e:0e:cb:eb:63:b2:64:f5:5e:8e:29:a7:9c:
         9e:76:df:4a:d4:ca:7f:48:91:ad:d2:ca:7b:53:41:6a:86:d2:
         e7:8d:b6:5e:0c:6e:3f:d5:d1:4a:22:fa:95:d4:10:58:34:30:
         a9:68:f5:e2:29:47:e6:80:ce:bd:7b:7e:e5:ee:cb:f6:8b:63:
         bc:2b:31:9f:65:a9:c6:a5:bc:46:e1:c7:db:29:c5:d2:8e:bb:
         6f:74:ca:96:70:a6:35:47:e9:49:fa:9c:65:bb:cf:6d:fa:cf:
         6c:e0:00:32:7c:c0:4c:b6:c0:bf:8c:dc:ba:ae:9f:d3:83:51:
         4e:f0:79:3f:a8:c9:2d:4c:ee:d9:82:18:17:86:62:21:8b:8b:
         c1:e5:b9:8c:79:79:29:58:f0:91:91:dc:50:23:fc:ff:36:95:
         b0:e4:df:03:9e:ad:10:4f:bb:76:00:ac:08:af:6d:c3:88:1d:
         b0:48:57:2f:94:69:26:72:6b:6c:a6:98:af:72:09:0a:5d:fd:
         41:ea:44:65:35:10:0d:a8:f8:1a:fc:b8:ac:06:38:30:28:d2:
         df:c2:40:ef:1c:12:44:4c:e2:88:88:3a:d1:d4:d9:40:74:12:
         62:45:4f:d7:c1:53:22:9f:08:03:2a:04:bf:e4:d6:90:6b:12:
         ce:0b:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:51 2024 by rpki-client on console-ams.rpki-client.org