Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/t0dIfUdV5vYG6zEEFAQHIVlH24Y.roa
File:                     t0dIfUdV5vYG6zEEFAQHIVlH24Y.roa (raw, json)
Hash identifier:          OnlL/ocoYA5dxKrsu6OXXpHNjC3HLxhW0Afj3ygplLw=
Subject key identifier:   B7:47:48:7D:47:55:E6:F6:06:EB:31:04:14:04:07:21:59:47:DB:86
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       02AED5D4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/t0dIfUdV5vYG6zEEFAQHIVlH24Y.roa
Signing time:             Mon 17 Jan 2022 18:12:42 +0000
ROA not before:           Mon 17 Jan 2022 18:12:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        141.11.96.0/24 maxlen: 24
                          141.11.35.0/24 maxlen: 24
                          141.11.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45012436 (0x2aed5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan 17 18:12:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b747487d4755e6f606eb3104140407215947db86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:e8:8e:bb:da:22:83:7a:57:1f:68:a6:d3:
                    03:39:68:5f:5f:9c:2a:cb:43:8d:e2:7b:57:2c:36:
                    62:72:ad:f0:fd:54:d8:e7:b0:e2:87:33:4e:76:46:
                    1c:71:a0:8c:68:81:2e:dc:88:dd:c7:81:e2:66:63:
                    82:f9:21:cb:7a:56:95:ee:ee:fe:29:2a:35:3c:db:
                    b6:ae:38:81:2b:e0:4d:57:60:b2:e0:06:0a:e8:d0:
                    06:58:82:ad:bc:9d:db:30:5f:29:36:3f:d0:8e:ec:
                    27:4b:93:a5:86:d9:0b:5c:ac:36:17:8c:e2:bd:24:
                    92:3e:00:9e:1c:33:b5:a5:3e:8e:a1:6c:35:54:de:
                    b7:df:00:ec:31:d7:8e:ec:2b:4b:be:8e:6c:37:f6:
                    f9:14:a8:02:70:8f:66:56:26:fa:7b:ce:a1:25:fa:
                    91:ac:fa:e1:16:c2:a4:48:3c:b8:75:10:34:17:6c:
                    57:dc:2b:c7:02:e8:8c:de:82:e3:eb:7b:8e:fd:5c:
                    8f:f2:3a:61:bd:cc:3f:3c:f9:5d:36:2e:4e:fb:bf:
                    35:01:9e:af:9a:20:a0:72:7e:18:8c:cc:c8:fc:e5:
                    96:d2:21:bb:35:f8:cd:83:94:04:cd:63:38:f3:d7:
                    4e:9b:59:23:de:01:7d:f7:7f:a6:30:42:0f:f4:5b:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:48:7D:47:55:E6:F6:06:EB:31:04:14:04:07:21:59:47:DB:86
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/t0dIfUdV5vYG6zEEFAQHIVlH24Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.34.0/23
                  141.11.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:31:2d:d3:4f:83:65:ee:1f:cb:1a:85:0c:08:cd:33:8b:
         04:5d:83:87:c4:56:04:8d:cb:76:7a:5c:45:68:08:61:1d:aa:
         75:70:a5:4d:c6:f5:3d:14:f1:d7:0c:75:1d:00:9d:4d:1f:a0:
         67:d9:d5:63:36:6d:9b:38:12:9b:ba:c2:a1:4a:4d:fa:73:11:
         02:9d:51:28:29:11:4e:51:fc:c9:b8:30:34:ea:ff:27:82:88:
         b8:83:7a:21:6f:86:9d:d9:27:4e:5a:aa:f8:13:ce:66:30:2a:
         23:44:3d:15:49:cd:39:38:f6:b0:ad:1d:c5:bc:23:2d:4a:50:
         80:4b:84:06:38:e3:07:6f:96:3c:fb:6e:c6:34:44:24:0e:c7:
         ba:79:eb:0e:a5:36:6f:b1:a1:e9:02:80:98:b9:04:fc:d7:92:
         18:65:63:be:d3:52:43:2c:e7:66:54:f4:03:aa:ad:10:43:71:
         cf:a7:ec:92:2c:44:44:9a:71:22:61:bc:17:50:3a:8b:bb:9d:
         6e:86:9f:9f:a7:35:31:2e:76:76:96:a7:57:f8:30:c4:df:29:
         b1:b6:53:ac:9e:15:3b:39:bc:01:9f:1b:8e:ca:9f:23:a6:a6:
         15:4c:2b:5d:6c:89:c7:14:84:24:99:98:17:20:64:ed:3a:4e:
         e6:26:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org