Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/c6SgvTV1GXUYLh9DSlrYGCYF8u8.roa
File:                     c6SgvTV1GXUYLh9DSlrYGCYF8u8.roa (raw, json)
Hash identifier:          uWweJvBPNR2tatIOaGziIRyf6jZEdsqPBhInG0WJdTY=
Subject key identifier:   73:A4:A0:BD:35:75:19:75:18:2E:1F:43:4A:5A:D8:18:26:05:F2:EF
Certificate issuer:       /CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Certificate serial:       FCD36F
Authority key identifier: 74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/c6SgvTV1GXUYLh9DSlrYGCYF8u8.roa
Signing time:             Sat 01 Jan 2022 07:53:05 +0000
ROA not before:           Sat 01 Jan 2022 07:53:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        37.140.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16569199 (0xfcd36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
        Validity
            Not Before: Jan  1 07:53:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73a4a0bd35751975182e1f434a5ad8182605f2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:05:e0:82:88:a3:c3:6f:55:91:39:60:d5:
                    46:b9:05:b5:e9:a6:d2:68:d7:37:7c:ec:4e:da:8b:
                    fe:ed:60:78:3e:57:08:d3:ac:57:2f:05:f3:de:31:
                    74:5b:72:5f:fc:cd:a7:cf:0a:dc:bd:ac:98:a9:06:
                    a4:b7:78:43:38:e8:5c:d9:e5:53:a5:b6:0a:e7:5d:
                    83:3a:a7:4c:c0:bc:cf:aa:5f:0d:02:c3:6d:de:81:
                    7d:4f:62:46:fa:5d:b8:dd:53:7f:93:bb:77:9f:dc:
                    85:de:6f:d4:e6:d4:20:0e:1a:db:f7:7e:bb:2a:b5:
                    d7:5b:ae:01:28:f4:04:fe:3d:bb:15:92:e1:d9:b6:
                    39:62:2c:90:09:58:08:f4:30:13:91:6e:1e:c7:14:
                    fa:ba:ce:1e:ca:b1:58:34:04:dd:f0:50:12:93:5d:
                    8a:52:4e:4a:9a:ff:b3:92:d8:7d:f7:df:ee:7d:8c:
                    07:ec:5a:45:69:aa:81:4a:4a:03:f4:11:eb:5d:bc:
                    c7:53:f3:21:6e:fa:17:50:97:2f:41:03:ef:b3:e4:
                    ad:aa:8a:26:31:23:b1:e6:67:40:42:77:ec:6b:be:
                    ac:d3:b6:3c:ae:24:42:ef:2c:1c:50:f1:58:7f:3a:
                    73:de:d2:69:1c:61:28:8c:c0:05:67:8c:94:f1:24:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:A0:BD:35:75:19:75:18:2E:1F:43:4A:5A:D8:18:26:05:F2:EF
            X509v3 Authority Key Identifier:
                keyid:74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/c6SgvTV1GXUYLh9DSlrYGCYF8u8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8c:9f:62:9f:ac:26:d9:e9:2e:d9:29:a7:82:d7:a8:a2:39:
         34:4b:6d:e0:06:c2:92:0e:e7:a3:3f:cf:fb:34:39:f0:5e:66:
         f8:08:3a:a6:b5:9b:f9:28:61:76:58:8b:8c:4d:ce:55:7c:f3:
         32:b1:b0:3f:2f:e7:50:6f:77:2c:c0:56:8c:f3:01:6b:35:4d:
         1d:cb:ee:79:40:f0:03:bb:4f:f1:eb:a3:48:4b:b4:51:08:ae:
         c2:60:d0:3d:8f:e3:09:b0:79:e9:c0:c3:1b:0b:63:f3:6d:23:
         00:a5:02:2f:48:68:e0:2d:31:1e:b1:10:85:44:e6:37:16:cb:
         94:e0:4e:4b:e6:95:20:e0:5e:a2:b7:29:6b:5d:9a:a0:12:73:
         9f:86:8a:99:95:55:37:14:50:8c:ed:ec:99:ea:e7:19:fa:da:
         0b:68:bc:50:e2:ca:e7:a8:a9:f5:52:a3:33:eb:51:29:e7:37:
         68:74:37:40:b3:ee:4a:3b:37:c0:6a:e7:2d:5d:05:7d:4f:c5:
         53:7e:d0:57:6f:6b:07:e0:d1:93:16:34:22:c0:0a:45:91:8c:
         4d:22:c7:7a:63:15:d8:94:e3:b6:5e:68:ce:53:6f:a5:58:3a:
         69:36:b9:08:57:d1:39:23:91:be:5d:fe:99:0e:9b:e1:5c:3f:
         3e:36:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org