Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/Ze_RNbJTDcVqN3dCZne3wCgbUs8.roa
File:                     Ze_RNbJTDcVqN3dCZne3wCgbUs8.roa (raw, json)
Hash identifier:          yHVFzrxitvF6k1qo9Q1lwWf22Yv+TO5qkTV6y0Gz8q8=
Subject key identifier:   65:EF:D1:35:B2:53:0D:C5:6A:37:77:42:66:77:B7:C0:28:1B:52:CF
Certificate issuer:       /CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
Certificate serial:       03E26BFC
Authority key identifier: 6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/Ze_RNbJTDcVqN3dCZne3wCgbUs8.roa
Signing time:             Fri 18 Feb 2022 21:02:05 +0000
ROA not before:           Fri 18 Feb 2022 21:02:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        109.236.54.0/24 maxlen: 24
                          109.236.53.0/24 maxlen: 24
                          109.236.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65170428 (0x3e26bfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
        Validity
            Not Before: Feb 18 21:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65efd135b2530dc56a3777426677b7c0281b52cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:46:a7:1e:3b:61:96:40:2c:4a:30:f5:3d:
                    fd:ff:19:98:bf:98:a3:60:02:f6:cd:96:a9:93:79:
                    e3:92:91:2e:56:94:3b:c7:53:fd:12:ce:4c:83:c2:
                    92:36:7f:88:fe:e5:d4:7c:ef:fe:c0:06:21:42:2a:
                    38:c8:01:78:bc:52:66:7d:88:3f:7b:04:8c:c6:6f:
                    c7:1c:12:12:5b:9d:f4:a2:47:d7:93:52:ed:5b:d1:
                    6d:21:93:6c:8b:0d:16:18:43:33:03:44:85:14:88:
                    ff:b9:b0:f4:7d:42:f3:22:da:fc:e2:f4:8a:a8:ac:
                    bc:77:ac:2e:b1:e1:58:c8:b1:e9:12:d1:39:9a:bf:
                    ff:1e:e7:e2:5b:61:4c:fc:b6:45:06:8b:24:ba:bf:
                    ac:e4:9d:f5:1e:6a:46:af:04:e3:f7:75:20:30:d2:
                    f1:bf:c6:d7:d7:af:63:55:c7:0e:53:36:d2:71:ad:
                    bb:8a:f7:7f:fa:e2:6d:b4:77:70:3b:95:d6:23:36:
                    2b:a0:df:67:ce:29:1f:66:63:c1:17:2d:34:f1:a3:
                    86:1a:90:37:55:d5:b0:0c:26:56:77:ce:eb:a8:b1:
                    18:cd:4b:2a:da:6a:3c:89:45:65:b2:0f:c4:9e:72:
                    f8:ce:58:5a:42:6d:0f:63:6d:28:e5:f6:fd:e3:5e:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EF:D1:35:B2:53:0D:C5:6A:37:77:42:66:77:B7:C0:28:1B:52:CF
            X509v3 Authority Key Identifier:
                keyid:6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/Ze_RNbJTDcVqN3dCZne3wCgbUs8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.236.52.0-109.236.54.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:e5:02:d2:c4:af:47:45:ee:54:af:8f:a0:be:5c:68:fc:74:
         22:b1:1a:0a:95:37:f4:2c:50:90:f5:cb:f6:e2:2d:db:f6:aa:
         bc:06:66:fe:f4:f4:ad:ca:8e:51:39:54:f6:b6:27:de:59:ce:
         2c:bb:87:5f:12:0e:fb:50:c4:a8:22:57:f3:14:0c:e2:44:f2:
         65:6f:27:ed:ca:96:6d:19:e6:d2:cc:b8:3f:79:58:41:90:8e:
         fe:01:a2:f4:1d:46:cb:d4:84:65:54:e7:5b:cb:45:f2:07:bc:
         82:ac:c2:f4:64:7d:4d:fc:17:b0:ec:af:ad:e3:14:52:c4:8f:
         51:30:6c:e5:ba:a2:91:26:cd:82:0f:cc:87:65:85:d8:79:e9:
         29:a2:cd:04:51:d8:68:db:46:25:cf:7e:18:bd:86:f2:5c:6c:
         59:ca:e3:cf:89:19:bf:af:9d:e4:e6:04:9b:76:f7:f7:57:26:
         e6:3d:fc:c9:47:f7:ad:b0:5a:57:c7:3b:d7:78:e8:47:de:ae:
         92:50:23:80:2b:e6:51:63:28:7a:36:5b:1a:f7:a0:e4:c7:19:
         71:48:42:32:a7:f4:09:ad:b2:05:3d:4e:1e:67:3f:73:ac:ee:
         32:b3:d7:1f:27:96:e7:17:c4:f1:27:25:3b:4e:7e:f7:dd:5c:
         76:39:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:51 2024 by rpki-client on console-ams.rpki-client.org