Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/VMeWrWIcfZrzthkmuAjMYgXMBiQ.roa
File:                     VMeWrWIcfZrzthkmuAjMYgXMBiQ.roa (raw, json)
Hash identifier:          txUy+WftRKHet4zdONlVqdL4n5nBKcvxvaST3FP3Y48=
Subject key identifier:   54:C7:96:AD:62:1C:7D:9A:F3:B6:19:26:B8:08:CC:62:05:CC:06:24
Certificate issuer:       /CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Certificate serial:       01856DEF5EB48D9FD323B1BD489345D66F68
Authority key identifier: 6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/VMeWrWIcfZrzthkmuAjMYgXMBiQ.roa
Signing time:             Sun 01 Jan 2023 15:24:41 +0000
ROA not before:           Sun 01 Jan 2023 15:24:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16235
IP address blocks:        194.9.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ef:5e:b4:8d:9f:d3:23:b1:bd:48:93:45:d6:6f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
        Validity
            Not Before: Jan  1 15:24:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=54c796ad621c7d9af3b61926b808cc6205cc0624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:a0:f1:1a:db:35:cb:44:97:ca:ab:5c:65:
                    2c:0d:ba:07:74:66:93:cf:c5:33:54:9b:cb:17:9c:
                    6a:88:08:71:fe:74:44:31:a9:95:b1:10:84:78:7d:
                    0c:3e:15:eb:2f:48:1a:71:eb:d9:c6:84:72:7e:83:
                    4b:e0:7e:3b:28:53:bb:07:ad:e2:31:90:d5:67:fb:
                    44:83:fe:b0:90:32:77:3b:a3:06:2b:03:20:2d:14:
                    ad:29:26:96:34:c1:ea:98:de:50:48:2f:9a:33:1d:
                    54:14:15:48:d8:d4:28:43:1e:07:61:19:9d:00:cc:
                    a9:15:4d:c3:f6:00:04:2b:a7:0f:68:25:8c:4c:3c:
                    6f:1e:5c:19:71:51:54:fc:2a:7b:a3:5e:40:84:9f:
                    84:db:fd:40:d5:9e:c0:8a:3c:79:f0:0c:ac:07:c8:
                    00:3f:44:a8:d0:21:34:88:3c:4b:84:76:0e:f7:7b:
                    ed:1c:27:09:65:a3:15:30:21:5f:8d:90:fc:85:85:
                    10:21:e7:0f:bd:94:e3:06:da:0b:7a:ff:a9:6d:b3:
                    af:ea:ec:ea:9d:e1:ee:4e:46:fa:c3:19:b4:97:98:
                    b4:9e:58:e8:26:23:a3:0e:12:fb:cd:da:60:fc:95:
                    3c:74:ff:99:bc:5e:41:28:d3:f4:f2:d4:5f:83:f3:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C7:96:AD:62:1C:7D:9A:F3:B6:19:26:B8:08:CC:62:05:CC:06:24
            X509v3 Authority Key Identifier:
                keyid:6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/VMeWrWIcfZrzthkmuAjMYgXMBiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:57:1c:fe:45:e6:63:29:6f:29:18:ba:56:c8:ee:b4:fd:
         bf:50:78:5c:f2:b9:4c:84:2d:74:54:0a:8f:d8:0b:a8:5f:9f:
         4f:98:c0:1c:df:ed:22:38:78:b5:04:a3:d7:52:7b:7c:c0:4c:
         0c:37:4b:cc:4b:c2:cd:d7:b6:fd:2c:4c:5e:77:d8:b8:2d:df:
         20:cf:b7:65:d9:94:07:ee:fd:0d:1e:ec:47:6b:7d:db:53:de:
         34:47:c0:5e:ae:55:f6:3d:79:10:7f:ff:51:78:11:47:50:42:
         08:5c:c3:40:18:d0:89:ce:c8:d5:56:5c:70:06:11:b6:48:a4:
         0b:4f:20:7c:c9:68:06:98:8c:dd:80:40:5f:9b:39:0b:03:84:
         6b:aa:01:ff:b5:3d:cb:51:3c:cd:7f:74:9a:10:91:c5:08:30:
         66:54:29:f0:cf:a7:ff:fa:64:2a:95:f4:e8:9e:75:ba:bb:03:
         b1:76:f3:92:e8:23:eb:b6:3d:3f:bb:6e:23:22:70:f0:66:81:
         b0:55:11:8e:8d:66:ce:7a:78:50:b3:82:ae:57:7b:db:10:ad:
         5e:fa:96:c8:06:68:61:74:1c:2a:5e:3b:f6:1a:b7:fe:72:c2:
         8e:62:d9:c7:bd:38:ff:dd:5d:5a:5e:ad:49:85:26:1d:53:31:
         0c:ca:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org