Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/YwdN2No2Y0cgh79C6sajh-gSRMI.roa
File:                     YwdN2No2Y0cgh79C6sajh-gSRMI.roa (raw, json)
Hash identifier:          snH75mqCPJZO66dUA4ZID8mC3Ia+/DcoppqJ9OTB+jo=
Subject key identifier:   63:07:4D:D8:DA:36:63:47:20:87:BF:42:EA:C6:A3:87:E8:12:44:C2
Certificate issuer:       /CN=73afc75778e90802d1d2db2872533d19099f13fc
Certificate serial:       01856F0B4544137FB038962E3A36BD39C637
Authority key identifier: 73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/YwdN2No2Y0cgh79C6sajh-gSRMI.roa
Signing time:             Sun 01 Jan 2023 20:34:47 +0000
ROA not before:           Sun 01 Jan 2023 20:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44592
IP address blocks:        146.19.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:45:44:13:7f:b0:38:96:2e:3a:36:bd:39:c6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73afc75778e90802d1d2db2872533d19099f13fc
        Validity
            Not Before: Jan  1 20:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=63074dd8da3663472087bf42eac6a387e81244c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ca:7a:4e:d9:89:9e:0d:ae:87:80:56:e5:9e:
                    38:29:2e:09:c4:fd:bd:70:d7:3d:3e:2e:4a:62:96:
                    47:82:c6:12:5c:de:dc:90:a4:10:77:f7:2f:7e:fd:
                    30:f7:cf:13:41:90:5f:52:87:5a:8c:83:17:74:8e:
                    b6:20:f3:13:8f:46:24:0a:6a:5a:e0:82:b2:24:7a:
                    56:52:c9:94:c3:0c:a8:27:e1:2f:46:5a:8e:6e:33:
                    85:dc:50:97:fc:20:43:31:4b:91:2b:70:28:69:34:
                    a1:f3:4f:2d:74:03:57:98:e8:84:cf:16:24:05:a4:
                    9c:ab:7d:07:f7:dc:c5:14:b8:93:b0:ae:1e:a9:3b:
                    b3:6a:23:6d:96:e9:f0:80:ec:d0:fc:bc:82:80:67:
                    df:e9:74:2b:80:d4:3e:f1:b7:ec:ce:b4:d8:a1:ab:
                    85:81:8d:38:0e:63:26:b4:ac:39:f1:f4:6b:88:dc:
                    80:04:0e:21:9b:36:2c:73:2b:6a:7f:d2:9c:db:cf:
                    36:16:c9:30:2a:20:ff:2f:14:de:01:55:31:ab:e3:
                    15:0b:f8:d3:f3:78:4e:b2:bf:0b:33:93:68:35:85:
                    c4:38:2f:5a:12:3b:a3:f0:f8:84:ea:4b:3d:fd:1f:
                    87:82:0c:31:df:d4:82:6e:bb:d3:ab:f6:c2:5e:b7:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:4D:D8:DA:36:63:47:20:87:BF:42:EA:C6:A3:87:E8:12:44:C2
            X509v3 Authority Key Identifier:
                keyid:73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/YwdN2No2Y0cgh79C6sajh-gSRMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:c5:c7:ae:26:52:07:0f:08:63:ac:40:e6:ed:06:aa:ed:d3:
         9b:0c:a1:51:3a:4a:cd:82:82:3b:2b:8b:0d:d3:ca:22:db:ba:
         54:58:e1:34:8c:9f:10:7c:bb:35:95:ad:05:a1:de:65:dd:80:
         af:2f:73:ee:93:13:bb:26:21:fa:1e:f0:ba:bf:10:e2:11:34:
         aa:01:a5:1a:6e:28:28:1b:b4:83:bf:49:47:c1:17:7e:4b:ae:
         c5:fb:39:ea:ef:64:29:d0:ed:a3:83:95:0d:1c:72:5e:bf:48:
         07:50:da:09:8d:c1:f4:03:1e:4f:7e:40:03:05:79:14:58:a5:
         10:7e:3d:e8:0e:fc:02:4b:db:ea:77:dd:34:d2:36:62:e9:7e:
         7f:bc:70:fe:30:db:b8:a2:1d:95:25:77:a1:f8:cf:a0:b8:50:
         69:70:26:df:47:97:fa:78:5d:f4:fe:3a:fc:a8:d4:f3:e8:59:
         59:df:2e:02:3c:c0:31:69:53:a7:77:55:56:d4:d6:9b:40:8c:
         cd:72:30:cf:86:3e:c9:91:14:72:f8:4d:36:2a:75:d3:44:51:
         8c:88:7a:14:18:4f:ec:fe:3a:b6:21:22:e1:d2:44:2a:92:da:
         bb:83:26:67:df:06:2b:03:93:a8:7a:c9:dd:db:55:f0:46:1a:
         53:90:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org