Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/OODEVYmwTbOCRiKS8-3U0ZKS7iQ.roa
File:                     OODEVYmwTbOCRiKS8-3U0ZKS7iQ.roa (raw, json)
Hash identifier:          /3R97ObwNqalVwJp1bO70PHRKIpQ+r/vbgNGTFBpvvc=
Subject key identifier:   38:E0:C4:55:89:B0:4D:B3:82:46:22:92:F3:ED:D4:D1:92:92:EE:24
Certificate issuer:       /CN=562f8141b307dc948c5dfb232c668da5a626fa22
Certificate serial:       664B1B
Authority key identifier: 56:2F:81:41:B3:07:DC:94:8C:5D:FB:23:2C:66:8D:A5:A6:26:FA:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vi-BQbMH3JSMXfsjLGaNpaYm-iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/OODEVYmwTbOCRiKS8-3U0ZKS7iQ.roa
Signing time:             Sat 01 Jan 2022 02:00:27 +0000
ROA not before:           Sat 01 Jan 2022 02:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6703899 (0x664b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562f8141b307dc948c5dfb232c668da5a626fa22
        Validity
            Not Before: Jan  1 02:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38e0c45589b04db382462292f3edd4d19292ee24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:a2:cf:1e:cc:20:f0:38:0a:66:52:92:2e:
                    97:fb:05:70:88:1b:72:70:5c:fc:90:93:ba:d5:31:
                    19:62:99:d4:10:d3:6e:d2:8a:0b:0b:07:f2:aa:e9:
                    fa:d2:4d:d3:f9:f7:98:49:f3:2f:a9:42:0c:68:23:
                    e6:b5:12:0c:95:5f:1c:d9:0a:67:e4:4a:41:18:55:
                    8d:e9:11:c3:9e:e9:78:fc:33:44:8f:16:59:21:e9:
                    cd:22:36:00:e5:33:a9:b6:0a:bd:34:04:70:c9:f1:
                    8a:37:f0:57:76:05:d5:da:7f:06:5d:31:6c:2c:50:
                    7c:e6:83:aa:d7:bb:01:04:4e:1d:d9:c7:35:b3:bd:
                    e7:b4:fd:5f:c8:10:85:56:90:ae:05:d4:1c:6b:c1:
                    9f:55:9b:ca:8e:21:d4:fe:fa:04:49:94:dd:cb:4f:
                    59:3f:eb:7a:18:e7:f9:30:c5:2e:4b:ba:f6:e2:71:
                    22:8b:cf:9f:0d:bd:79:be:17:18:38:de:60:41:f4:
                    de:30:79:58:82:fe:46:4b:3f:53:05:e9:63:e8:cf:
                    43:bb:cc:0d:2e:cf:8b:04:47:58:1f:c8:2c:21:b8:
                    84:a3:0e:d8:db:34:c6:ab:94:dd:7b:cb:27:ed:f8:
                    3a:ce:da:d7:39:89:00:74:4f:f8:77:71:e4:12:1d:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E0:C4:55:89:B0:4D:B3:82:46:22:92:F3:ED:D4:D1:92:92:EE:24
            X509v3 Authority Key Identifier:
                keyid:56:2F:81:41:B3:07:DC:94:8C:5D:FB:23:2C:66:8D:A5:A6:26:FA:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi-BQbMH3JSMXfsjLGaNpaYm-iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/OODEVYmwTbOCRiKS8-3U0ZKS7iQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/Vi-BQbMH3JSMXfsjLGaNpaYm-iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:c6:34:04:68:f9:c2:b3:ad:49:55:ed:d0:94:af:67:d6:
         f6:08:4e:cf:3e:41:83:58:56:40:6c:72:2b:fb:30:60:9f:5b:
         ea:54:b6:c1:52:86:0a:86:87:12:79:b3:91:58:1d:5d:96:c3:
         cf:c1:a9:84:18:f6:f5:cc:5e:25:d6:17:b8:1e:23:6b:fc:93:
         6f:52:7c:00:10:d6:d4:ef:47:f3:9d:6a:14:99:fc:6d:be:67:
         96:d1:d6:e1:53:cd:c8:5f:b7:e6:4b:e3:c6:ee:47:fb:a6:13:
         66:88:b6:65:6f:99:6e:2d:85:30:9e:1c:b0:16:b5:91:1b:52:
         ba:e6:be:88:a1:fa:f6:63:7e:e2:7f:87:93:91:5b:e6:6e:15:
         bc:5e:ea:03:7e:2c:be:b3:f5:3b:10:72:6e:96:02:0e:1d:64:
         1b:6a:50:da:c0:67:4b:c8:17:7c:d8:c2:c1:11:c4:ad:cf:d8:
         2a:61:a9:92:a1:d5:ea:68:5d:fb:dc:cd:eb:77:50:2c:76:6a:
         d1:0a:14:c9:70:96:db:89:fa:b8:8f:f2:a5:a2:02:6a:40:3c:
         05:41:7f:54:78:e6:b4:7a:38:14:df:e1:cb:c2:d1:1e:80:67:
         1d:e8:24:74:0c:98:7f:86:e4:6a:a5:af:db:57:27:9e:ce:da:
         8c:c2:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org