Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/vqxOTAYpbRuYOFu3MyQmOiBKtU4.roa
File:                     vqxOTAYpbRuYOFu3MyQmOiBKtU4.roa (raw, json)
Hash identifier:          LsptJdXM2q5POXn/bsHXCmgsceFYJVGWsu6NePB34KI=
Subject key identifier:   BE:AC:4E:4C:06:29:6D:1B:98:38:5B:B7:33:24:26:3A:20:4A:B5:4E
Certificate issuer:       /CN=c1bd4614506868ecbdd896e2cd4bb2ad5d3cb41f
Certificate serial:       0185710C06C90D07F4F8559F9345B3B6C83A
Authority key identifier: C1:BD:46:14:50:68:68:EC:BD:D8:96:E2:CD:4B:B2:AD:5D:3C:B4:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb1GFFBoaOy92JbizUuyrV08tB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/vqxOTAYpbRuYOFu3MyQmOiBKtU4.roa
Signing time:             Mon 02 Jan 2023 05:54:51 +0000
ROA not before:           Mon 02 Jan 2023 05:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202448
IP address blocks:        194.26.213.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:06:c9:0d:07:f4:f8:55:9f:93:45:b3:b6:c8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bd4614506868ecbdd896e2cd4bb2ad5d3cb41f
        Validity
            Not Before: Jan  2 05:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=beac4e4c06296d1b98385bb73324263a204ab54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:1f:66:73:c7:81:82:58:f9:f5:2a:51:8a:
                    6e:5c:e9:e3:41:f3:2f:d7:e9:63:95:eb:f2:86:25:
                    f6:9e:f0:d3:4d:cd:aa:d6:fe:ac:1b:32:cb:df:df:
                    b6:68:d0:66:84:a7:35:5b:cd:20:48:a5:5b:e2:06:
                    46:9d:52:d1:43:76:69:bf:d0:b2:2e:6c:4b:01:49:
                    eb:4f:b5:ba:a5:e0:b7:05:ed:a1:43:50:04:ef:c4:
                    cf:c3:d6:dc:e5:73:82:38:94:6a:cc:1a:05:96:36:
                    a8:c2:be:2d:45:d3:47:f9:7f:7c:3f:52:a4:26:4f:
                    ce:54:db:4d:ef:5b:c4:d2:5c:5c:f2:90:23:24:32:
                    18:99:32:26:5b:fe:30:7d:52:e0:4f:bf:05:b3:0c:
                    6a:00:cb:f7:e7:4b:8b:42:6e:2c:63:ba:ab:5e:08:
                    57:38:7e:16:6f:3e:36:34:a8:69:6b:bf:f9:97:f4:
                    3c:7d:d9:ea:26:9b:9a:ee:64:d1:ca:2b:4c:ab:df:
                    dd:f0:5c:d1:24:6d:df:9b:6d:fe:11:f6:93:3b:cd:
                    78:b2:49:27:0a:8d:64:3e:7e:ba:6b:88:3f:2d:df:
                    0e:fe:23:13:cd:ca:58:fd:97:de:3a:e6:68:2c:4b:
                    b4:59:99:da:09:29:d8:b4:0e:fa:04:75:2a:58:6b:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:4E:4C:06:29:6D:1B:98:38:5B:B7:33:24:26:3A:20:4A:B5:4E
            X509v3 Authority Key Identifier:
                keyid:C1:BD:46:14:50:68:68:EC:BD:D8:96:E2:CD:4B:B2:AD:5D:3C:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb1GFFBoaOy92JbizUuyrV08tB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/vqxOTAYpbRuYOFu3MyQmOiBKtU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/wb1GFFBoaOy92JbizUuyrV08tB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:f4:07:35:bf:7d:df:81:ec:c2:ce:b8:0f:ac:91:b2:7e:
         d7:ad:af:6d:1c:63:8c:74:75:f3:6d:86:28:28:2f:20:d6:0e:
         9c:26:02:52:3a:cd:ae:52:e0:fa:c6:56:34:b8:e0:54:a3:3a:
         95:e8:73:9b:b2:29:11:83:43:78:64:f0:b4:9e:4e:97:d9:19:
         3e:a4:a0:7e:12:64:85:6e:2c:9d:8f:9e:d0:82:b1:a4:6b:e2:
         0d:90:8f:7d:93:7c:7f:3d:f7:92:32:97:42:cb:d8:25:5e:25:
         d9:70:77:59:1f:33:a2:19:a8:d2:29:4c:0f:c9:78:8d:85:b8:
         30:c8:ff:5b:1d:53:c1:82:e5:7f:23:94:02:5a:fe:1d:a5:1d:
         e1:ef:b5:8d:f1:f2:ab:f1:ce:a1:60:b0:3e:2e:a3:93:cf:1b:
         fe:2a:95:c1:d7:49:90:a1:97:1b:09:0d:97:54:89:ba:fc:3b:
         a9:b6:99:6f:6a:4c:72:4b:85:1b:d2:e0:4b:bc:cc:ba:ec:8e:
         11:84:0c:29:74:31:20:e9:38:61:14:de:0c:55:21:f3:45:f6:
         d4:ae:92:d7:04:17:19:26:7a:79:84:db:46:24:67:64:58:c6:
         da:b6:5a:9c:bf:89:1f:85:49:c4:ec:67:8d:de:d4:7c:84:7c:
         b0:ad:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:15 2024 by rpki-client on console-ams.rpki-client.org