Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/uE0mfiS23pS0eTT99JRz50AiFiY.roa
File:                     uE0mfiS23pS0eTT99JRz50AiFiY.roa (raw, json)
Hash identifier:          nuHvbg9oVjV/HVDLXCPyzGYbAk+5C0VMgtGy/RocShI=
Subject key identifier:   B8:4D:26:7E:24:B6:DE:94:B4:79:34:FD:F4:94:73:E7:40:22:16:26
Certificate issuer:       /CN=19f726559adb811cef149b7204e2218ba7a8d5bb
Certificate serial:       0187744C4841B0A72EE975222562A8185A61
Authority key identifier: 19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/uE0mfiS23pS0eTT99JRz50AiFiY.roa
Signing time:             Wed 12 Apr 2023 07:09:28 +0000
ROA not before:           Wed 12 Apr 2023 07:09:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211415
IP address blocks:        217.119.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:74:4c:48:41:b0:a7:2e:e9:75:22:25:62:a8:18:5a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f726559adb811cef149b7204e2218ba7a8d5bb
        Validity
            Not Before: Apr 12 07:09:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b84d267e24b6de94b47934fdf49473e740221626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2e:25:ea:69:76:8b:3d:73:20:7e:72:49:26:
                    49:40:dd:19:cc:7c:7c:f0:ae:75:cd:1f:ca:bd:0e:
                    61:b4:cb:5c:c6:a2:11:3c:c2:9e:d2:50:d0:d1:eb:
                    8f:4c:79:ad:85:a2:51:9d:3b:73:52:fa:7c:45:26:
                    02:7b:0f:8c:48:27:ac:00:f3:1f:d1:11:97:cf:bf:
                    b8:d5:2b:d0:90:42:28:4b:f8:55:2f:be:2b:73:44:
                    04:08:e7:b9:62:b5:c0:41:4a:68:56:70:05:56:4b:
                    3b:29:49:fd:b0:bf:5e:c6:17:97:a4:47:6e:b4:a7:
                    e8:0a:37:eb:a7:c7:40:ed:0a:ad:a0:a2:ea:53:bc:
                    9f:2c:ec:44:a6:18:24:d0:bf:b9:fa:69:fb:b7:48:
                    21:a4:f3:6e:5e:a0:53:cd:11:98:9d:bc:f1:d5:8f:
                    65:20:47:ea:ba:20:32:c2:af:c5:8d:63:dc:c0:5e:
                    f0:42:03:47:dd:89:28:ee:06:b6:53:f1:6e:ee:2d:
                    de:6c:b6:dd:a3:ce:7b:36:3f:97:33:06:0e:38:b9:
                    86:82:50:cb:33:64:37:f5:86:86:24:d6:cf:d5:43:
                    23:20:72:24:66:66:e9:44:0f:ea:a3:4e:29:49:eb:
                    14:7a:ed:42:19:5d:aa:04:98:80:44:2b:ba:bb:ea:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:26:7E:24:B6:DE:94:B4:79:34:FD:F4:94:73:E7:40:22:16:26
            X509v3 Authority Key Identifier:
                keyid:19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/uE0mfiS23pS0eTT99JRz50AiFiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.119.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:61:fa:29:2e:b5:a4:28:01:a8:ef:23:1e:59:b2:12:e4:
         6e:25:a5:ee:36:bc:3b:22:57:3f:9d:43:49:46:15:3d:18:20:
         83:56:aa:49:85:9f:4a:41:2d:08:2c:74:54:ff:c6:11:9f:13:
         d9:c1:d9:06:4e:47:b0:f9:5a:58:2f:f5:68:aa:6f:ec:4d:69:
         ac:61:73:f9:53:d5:df:35:b0:0b:28:13:59:18:f8:42:d0:74:
         82:a0:45:b7:51:4f:82:d4:12:ab:55:64:04:92:1b:8e:2a:5f:
         3f:55:3c:e2:db:9b:bf:b0:ab:47:e1:c4:29:58:ea:fb:50:32:
         40:56:68:8e:13:ee:bc:91:86:37:f0:7a:e6:ab:5e:51:33:7a:
         b6:5e:72:87:08:e7:e7:f0:93:b7:54:64:27:47:b6:f3:49:44:
         4a:6f:92:de:fb:64:86:7a:3d:58:a5:c8:0d:c3:22:73:fb:70:
         3d:f8:c7:b4:38:71:64:06:9c:a9:ed:09:0e:c5:b9:e4:5e:3f:
         cf:1a:d2:0e:51:9a:7b:af:2d:33:85:dd:cf:95:fc:4e:b5:a8:
         ed:6f:dd:f2:3c:7b:f1:39:cc:74:0f:d5:6b:e6:cf:89:19:81:
         64:e6:c0:ec:c0:55:1f:61:04:52:24:ae:af:54:cf:29:5e:57:
         54:c6:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:00 2024 by rpki-client on console-ams.rpki-client.org