Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ap-FZvI9a19ZDGyoSprurpk1g9E.roa
File:                     Ap-FZvI9a19ZDGyoSprurpk1g9E.roa (raw, json)
Hash identifier:          QICYzH6z/qcSjXSP4/OBjpaUPN88m9xvlH1ap9G54Qg=
Subject key identifier:   02:9F:85:66:F2:3D:6B:5F:59:0C:6C:A8:4A:9A:EE:AE:99:35:83:D1
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       03D18EAD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ap-FZvI9a19ZDGyoSprurpk1g9E.roa
Signing time:             Mon 11 Apr 2022 12:52:50 +0000
ROA not before:           Mon 11 Apr 2022 12:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211936
IP address blocks:        141.11.71.0/24 maxlen: 24
                          141.11.12.0/22 maxlen: 24
                          141.11.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64065197 (0x3d18ead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 11 12:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=029f8566f23d6b5f590c6ca84a9aeeae993583d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:f6:00:3c:1e:ed:cf:32:ad:1d:65:97:bb:
                    c8:8e:7a:47:ad:6b:4a:38:7d:89:5e:77:7c:8d:02:
                    d0:57:53:a6:ca:7a:e4:5f:30:44:83:c4:13:e1:74:
                    e6:dc:25:1e:71:d3:3c:ef:79:88:65:f4:86:1a:b0:
                    a9:1e:fe:52:52:75:9d:7b:23:3e:1e:01:d4:20:65:
                    dc:cc:31:d6:49:41:a0:e8:75:bf:be:4d:18:17:60:
                    17:aa:f3:89:b8:b9:43:b3:61:4e:f9:2e:cb:b3:b2:
                    43:30:36:13:ba:c3:8a:06:e1:bd:16:28:44:d7:74:
                    cd:e3:1c:e9:bb:9b:ba:4e:2e:30:bf:14:45:08:8e:
                    ab:56:36:96:fe:55:80:bb:3d:9a:4c:81:69:e1:96:
                    e3:d1:a7:18:12:f3:f0:8c:e6:46:b7:64:92:2a:b1:
                    71:f0:19:09:43:37:ed:c2:a3:b7:46:32:d9:5f:9c:
                    79:33:1e:66:f1:e4:3c:b5:ef:5d:aa:bc:78:01:09:
                    7f:50:d3:16:11:ab:52:5e:c5:08:fe:5d:81:4d:c7:
                    fb:f2:5d:2c:09:5e:eb:11:48:d7:98:56:4a:7c:ff:
                    34:94:9b:f3:54:e8:3e:5d:85:49:0d:da:1b:24:b0:
                    8a:97:0d:64:3b:cb:f2:d1:14:da:83:b9:2d:3f:69:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9F:85:66:F2:3D:6B:5F:59:0C:6C:A8:4A:9A:EE:AE:99:35:83:D1
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ap-FZvI9a19ZDGyoSprurpk1g9E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.12.0/22
                  141.11.26.0/24
                  141.11.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:22:fc:3f:76:aa:c4:bb:d7:41:d3:f5:a1:5f:6e:6b:7c:99:
         22:93:43:dd:36:c8:08:1f:24:61:d3:0c:9e:2b:9a:ad:ea:e7:
         e4:7e:11:d5:f4:1c:f4:20:b6:98:69:39:90:86:e1:4d:fe:7f:
         d8:66:8c:0f:7b:86:ac:8a:e0:51:76:7f:bc:23:8e:be:fe:72:
         5f:ae:0d:cb:2a:64:d2:c6:13:b3:1d:3b:ac:ec:78:66:06:a1:
         13:5a:e9:ee:27:77:64:2a:d6:b0:4c:cf:be:72:cd:aa:a9:42:
         dd:d7:f8:b4:34:ba:09:af:a3:58:8d:44:69:c6:2a:3c:8d:29:
         f5:96:a8:ae:ce:8b:38:3f:3a:8b:89:3c:6f:16:39:f8:6a:29:
         ab:76:8f:16:ee:22:c9:35:a2:a3:4e:53:60:b1:6c:85:7e:fe:
         52:03:6d:e0:88:d7:03:69:74:86:4c:6a:9a:01:eb:7c:ac:e7:
         f4:f5:9f:f0:90:20:7b:54:b5:01:2d:49:e1:f6:c2:26:5a:4b:
         49:ed:b7:22:0b:a7:4a:7b:b4:19:27:74:d5:4a:23:4d:c7:39:
         38:8d:a7:ac:73:af:a3:c2:d0:1a:f9:d1:97:43:af:df:f3:1d:
         be:98:d5:a9:95:2c:0f:e2:ef:12:85:f8:b0:a5:ef:b6:f4:47:
         95:74:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org