Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/F10CTcKOhcimitoSaGkZW9C__ww.roa
File:                     F10CTcKOhcimitoSaGkZW9C__ww.roa (raw, json)
Hash identifier:          1Zfc1AzZHC8hVoYN741m669k/UWD5CtjWi0SRZWbPDU=
Subject key identifier:   17:5D:02:4D:C2:8E:85:C8:A6:8A:DA:12:68:69:19:5B:D0:BF:FF:0C
Certificate issuer:       /CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Certificate serial:       17F85268
Authority key identifier: 6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/F10CTcKOhcimitoSaGkZW9C__ww.roa
Signing time:             Sat 01 Jan 2022 16:11:19 +0000
ROA not before:           Sat 01 Jan 2022 16:11:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5524
IP address blocks:        46.231.40.0/21 maxlen: 21
                          2a03:8100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402149992 (0x17f85268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
        Validity
            Not Before: Jan  1 16:11:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=175d024dc28e85c8a68ada126869195bd0bfff0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:fd:90:b0:ed:4d:59:f4:76:13:72:42:02:
                    80:1a:ac:41:a0:34:c8:04:3c:42:70:60:57:67:52:
                    68:4a:26:44:fe:5a:c3:69:2f:32:a4:3f:1b:76:a1:
                    05:4b:6a:35:7c:b7:84:19:20:a1:4c:0d:42:c7:32:
                    45:60:fd:6d:d6:c0:5d:50:29:ec:57:75:38:79:27:
                    fe:11:1e:44:cb:78:59:b4:7d:8d:c7:b6:84:79:89:
                    eb:c4:50:03:3b:31:d1:b9:8a:71:f2:4b:b5:ad:f2:
                    62:7d:0b:dd:cf:ea:57:f0:31:82:36:27:58:5e:df:
                    02:ad:af:cf:5a:2b:cd:23:e0:35:b1:59:e1:f4:e8:
                    77:da:7b:60:18:cc:ca:af:2f:56:ff:3b:44:2b:bc:
                    3e:08:c9:5e:eb:a3:d9:47:11:c6:ed:d0:f6:2a:45:
                    f4:0e:c9:77:a7:a8:cd:a5:e7:0d:8b:c2:c9:dd:94:
                    be:b9:08:45:c4:28:ea:8b:17:08:2c:4b:28:d4:5f:
                    ff:0b:80:f3:ff:4f:3a:69:f6:65:e3:41:f9:f0:b0:
                    2e:b5:70:80:4a:54:a7:bd:95:f1:21:8f:a9:ca:8c:
                    b8:fe:ef:2f:4c:fc:48:49:90:19:d1:49:66:9d:3e:
                    f6:c0:26:64:3f:2a:1d:3d:6c:b9:8d:0a:06:a3:23:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5D:02:4D:C2:8E:85:C8:A6:8A:DA:12:68:69:19:5B:D0:BF:FF:0C
            X509v3 Authority Key Identifier:
                keyid:6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/F10CTcKOhcimitoSaGkZW9C__ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/bdV5eOXS8mVMl_3rwNVHzPtYbbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.231.40.0/21
                IPv6:
                  2a03:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b8:75:69:ff:38:54:e0:c9:0c:38:1d:34:66:42:7f:0b:39:
         55:89:65:8b:20:d4:b3:cf:1b:64:62:ab:de:17:76:72:17:17:
         2e:48:e1:f6:d3:10:4a:b1:15:67:0d:d5:9f:4a:6b:24:f2:33:
         fa:45:b9:83:41:31:ef:10:b6:8b:8a:48:4a:50:b1:b5:0f:fe:
         38:4a:67:59:05:97:eb:30:ee:ca:58:fb:cd:66:55:f0:22:db:
         e1:e6:28:79:a4:89:97:5e:bc:6b:e9:18:68:05:b6:8b:25:e0:
         05:8c:fe:99:71:07:00:66:f2:53:c4:7d:a1:1e:1e:fd:fb:e0:
         a6:44:c8:1d:5a:35:0c:62:9c:ff:77:ab:7b:d4:c5:e6:7f:6e:
         0f:bb:97:01:fe:b9:0c:69:6f:da:7e:52:2a:23:e8:4a:f6:df:
         16:44:25:28:f4:be:8f:a0:23:63:3c:11:17:9f:0d:51:56:18:
         06:b4:9b:fd:c9:dc:dd:9b:d4:70:d2:68:d6:61:d7:8e:f4:f2:
         17:df:61:85:09:ab:b4:27:39:8c:9d:4c:55:16:58:60:c4:77:
         44:26:f0:d8:b8:76:98:e9:70:8c:16:94:a1:53:3b:c9:8d:86:
         42:26:f8:8a:3f:11:b9:bb:8f:d7:a8:90:a9:33:25:2e:cd:75:
         cc:f8:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:16 2024 by rpki-client on console-ams.rpki-client.org