Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/E5J7X1c4N9oW8Tbxheq-siUtTaY.roa
File:                     E5J7X1c4N9oW8Tbxheq-siUtTaY.roa (raw, json)
Hash identifier:          N3iUbRYGQEQbv1oEfuSlJElGkSSWukY9o4zhCDjdyY8=
Subject key identifier:   13:92:7B:5F:57:38:37:DA:16:F1:36:F1:85:EA:BE:B2:25:2D:4D:A6
Certificate issuer:       /CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
Certificate serial:       036BDE3F
Authority key identifier: 6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/E5J7X1c4N9oW8Tbxheq-siUtTaY.roa
Signing time:             Sat 01 Jan 2022 13:05:22 +0000
ROA not before:           Sat 01 Jan 2022 13:05:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        193.160.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57400895 (0x36bde3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
        Validity
            Not Before: Jan  1 13:05:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13927b5f573837da16f136f185eabeb2252d4da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:e6:39:a8:6d:d3:4c:f4:03:13:32:c9:49:
                    e8:95:6b:e9:06:a9:c0:dc:87:f4:48:8c:8d:b5:88:
                    52:c4:23:ac:42:11:11:8a:87:d7:14:99:63:ef:c8:
                    bf:74:13:e3:0b:ca:02:92:48:2a:c2:3d:9a:bf:d8:
                    5a:4e:e1:9a:e9:70:de:01:a4:c0:05:61:64:c7:82:
                    c7:d2:dd:dc:98:86:f0:96:86:3e:e2:9d:26:22:5e:
                    87:34:ef:0f:06:88:95:7a:14:16:1c:e5:13:ea:09:
                    9b:bf:23:6c:c8:f1:23:a3:59:0f:4d:e5:5e:e6:b8:
                    5d:1a:a9:53:c6:7f:d9:a4:e4:08:11:f4:74:55:1f:
                    3e:e9:56:c9:3c:ed:4b:b6:9d:2e:9f:3d:36:6d:9c:
                    fa:81:7b:69:6c:76:c4:5f:6c:9a:c8:b4:b3:0d:65:
                    5e:5e:8a:8b:a3:db:72:50:a2:66:14:0b:8c:85:07:
                    af:20:aa:51:a7:02:1a:f1:96:87:97:94:43:9e:93:
                    26:78:0a:53:4d:d6:62:ae:6d:c0:77:7e:0b:45:f7:
                    40:ce:42:22:6a:45:21:54:77:2f:ef:71:7f:11:f5:
                    7a:80:9f:7f:53:14:a3:49:c0:22:df:3a:cb:cb:7e:
                    c8:06:ca:bf:90:2d:46:81:3d:0e:91:57:84:68:87:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:7B:5F:57:38:37:DA:16:F1:36:F1:85:EA:BE:B2:25:2D:4D:A6
            X509v3 Authority Key Identifier:
                keyid:6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/E5J7X1c4N9oW8Tbxheq-siUtTaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:57:7b:55:53:29:12:3c:d0:76:5a:d8:47:dd:9f:72:2c:22:
         0f:35:ec:e8:87:a1:8c:03:bd:9b:6a:1d:76:68:7a:85:7c:60:
         be:0b:9e:44:a7:34:ad:25:3f:5f:4c:9b:f8:43:26:6d:03:2c:
         07:77:b9:c6:b4:6a:e4:b7:41:c6:5f:9e:99:65:84:9a:53:62:
         b7:48:ac:4b:4a:72:dd:65:6b:f5:1f:90:7f:65:76:26:12:ab:
         36:e7:ac:3a:ca:85:2e:8c:1d:7e:42:d1:bc:47:4c:23:27:a7:
         28:be:c3:a6:d4:4e:f6:51:97:6d:c9:0d:e5:2f:9c:5e:63:00:
         7d:4f:b1:b7:25:35:59:e3:74:fb:23:b7:16:17:3a:05:25:04:
         5f:f5:c4:35:61:da:88:b9:6d:f4:8f:2d:da:7a:3d:12:92:3a:
         e2:29:d6:ff:9f:8e:9b:26:75:9b:40:24:c4:07:1f:f3:f8:4d:
         b7:be:2d:db:c9:94:ac:7b:d7:07:35:86:9b:24:55:b5:e7:a9:
         9d:76:a3:0a:ba:88:c9:91:e5:2e:1c:ac:21:77:a2:6c:13:78:
         7c:b0:f5:eb:f3:67:70:20:31:46:e6:c9:0f:f6:3a:2e:13:ba:
         a5:c6:d3:13:e3:8e:17:0d:3d:98:89:fd:bf:bc:4a:ed:b8:9c:
         b2:6b:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:39 2024 by rpki-client on console-fra.rpki-client.org