Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/q_AnN0USshBiKM8Fa68kuo2Ggaw.roa
File:                     q_AnN0USshBiKM8Fa68kuo2Ggaw.roa (raw, json)
Hash identifier:          xthbGJ00NbCZLSLGOfE2pPwOyUFSngK8rFU2JDWz1YI=
Subject key identifier:   AB:F0:27:37:45:12:B2:10:62:28:CF:05:6B:AF:24:BA:8D:86:81:AC
Certificate issuer:       /CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Certificate serial:       5FD6C5
Authority key identifier: 6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/q_AnN0USshBiKM8Fa68kuo2Ggaw.roa
Signing time:             Sat 01 Jan 2022 01:52:17 +0000
ROA not before:           Sat 01 Jan 2022 01:52:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6280901 (0x5fd6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
        Validity
            Not Before: Jan  1 01:52:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abf027374512b2106228cf056baf24ba8d8681ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:23:39:42:73:17:3f:d8:11:77:15:ae:76:
                    0e:39:fc:95:3c:17:e5:4e:19:30:42:1e:7e:44:14:
                    27:5f:fb:05:e0:9e:a0:79:9a:6a:6e:7f:1d:bd:06:
                    c6:10:d6:7c:3b:9b:96:88:11:f8:23:b5:fd:ad:2e:
                    e4:c0:5a:6c:45:38:f6:0b:56:96:5f:96:70:fe:60:
                    20:b9:76:72:9e:b1:5b:a1:5f:70:59:8a:96:c4:c2:
                    03:cc:d4:73:a2:07:aa:47:1a:9f:9b:3f:23:1d:f5:
                    8e:2a:b5:ba:d6:fa:32:d7:e9:85:88:df:69:9b:d3:
                    a3:c0:2e:9d:bf:d6:85:31:67:84:38:62:32:f5:57:
                    cc:1f:90:ce:b1:20:01:f6:35:57:91:7c:c3:9b:7b:
                    f0:17:78:31:7f:ab:56:38:1b:0b:4f:87:ae:88:84:
                    39:71:ce:92:aa:9c:72:d0:4b:ef:21:ac:34:c9:ec:
                    85:f9:d7:20:0e:86:bf:6c:ce:7f:66:bb:55:c5:16:
                    f2:33:2a:02:9e:a6:3d:c6:f5:cf:6d:13:6d:98:82:
                    11:1f:9e:a8:2e:17:f1:e4:fa:47:bd:0c:6f:dc:42:
                    2f:ff:71:bc:c0:d4:fb:f8:4a:e7:5f:ab:e8:a7:dc:
                    a0:cc:de:b8:77:17:b7:e7:86:4c:2d:90:d9:71:29:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:27:37:45:12:B2:10:62:28:CF:05:6B:AF:24:BA:8D:86:81:AC
            X509v3 Authority Key Identifier:
                keyid:6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/q_AnN0USshBiKM8Fa68kuo2Ggaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:eb:6c:3c:bd:6f:ea:3d:f7:9f:ef:9a:2e:9f:93:43:aa:
         32:8c:ed:55:c5:1f:15:b8:11:4b:77:61:41:c5:75:4a:27:d4:
         89:65:93:8e:65:c5:e3:5f:0c:fc:bc:64:35:b3:76:99:b6:87:
         a3:5d:e8:30:e3:a4:31:5e:69:05:36:41:7d:d8:e6:b6:f8:07:
         9b:75:11:9e:17:26:33:59:7e:07:1b:d9:c4:0e:3f:8e:03:6d:
         c9:51:05:b1:82:ef:bc:aa:dc:8d:fd:0f:fe:f6:9f:86:fa:7c:
         37:37:8b:01:a8:4a:2b:ae:f1:6b:60:a1:1f:69:fe:fa:2d:ed:
         60:0d:9b:34:0e:85:d0:94:f7:b7:88:37:04:a4:e3:da:e7:47:
         5b:69:8b:f9:b3:76:a5:6d:3a:b5:59:d5:bb:0f:1f:6d:10:0e:
         a9:53:f0:aa:98:1f:ba:d8:71:ce:0c:e3:01:b2:ce:c4:97:1e:
         a0:e6:6e:00:bb:a4:67:1d:3a:62:d6:94:07:db:39:a2:cf:77:
         79:79:93:f6:b0:09:ce:45:12:3a:2a:e3:92:a5:28:c7:64:95:
         5c:0c:bb:e6:70:17:ed:11:fd:06:20:4f:06:dc:cd:37:9f:01:
         2c:5c:6c:00:d5:50:e0:b8:8d:46:ea:17:8b:5b:32:3d:f8:8a:
         26:2a:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org