Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/_u3lzm-flkIZyUQsCAtTmEOZhUs.roa
File:                     _u3lzm-flkIZyUQsCAtTmEOZhUs.roa (raw, json)
Hash identifier:          j02X3cteLNVDwfdti+PMJjmeCN1ePWH38VPgqNOmVHw=
Subject key identifier:   FE:ED:E5:CE:6F:9F:96:42:19:C9:44:2C:08:0B:53:98:43:99:85:4B
Certificate issuer:       /CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Certificate serial:       0187D9CADB7E92FDEFA1F5A844E40F65408E
Authority key identifier: 69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/_u3lzm-flkIZyUQsCAtTmEOZhUs.roa
Signing time:             Tue 02 May 2023 00:09:23 +0000
ROA not before:           Tue 02 May 2023 00:09:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208911
IP address blocks:        2a11:8280::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d9:ca:db:7e:92:fd:ef:a1:f5:a8:44:e4:0f:65:40:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
        Validity
            Not Before: May  2 00:09:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=feede5ce6f9f964219c9442c080b53984399854b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:f8:64:cf:9a:01:3c:25:39:38:80:3d:1b:
                    bf:71:29:3b:ff:1e:e9:29:dc:15:88:6d:c4:95:f5:
                    27:b5:7c:20:e3:61:28:0a:52:4f:77:ff:71:4e:79:
                    be:93:4d:4b:32:bd:8d:26:58:bb:62:65:cd:e5:ec:
                    77:1e:d4:7a:d6:74:dc:e2:07:ed:4e:ba:88:32:f2:
                    24:a4:a2:5a:aa:b8:cb:2f:40:18:25:91:72:63:25:
                    c9:13:26:6a:fd:25:85:2f:69:9a:63:be:59:04:d9:
                    3b:ef:4c:b4:e7:cb:6a:db:b8:33:17:33:4a:9a:2a:
                    3b:8e:eb:81:d1:e5:d5:2f:6b:db:5f:cf:ab:8c:44:
                    2c:b0:96:eb:02:fc:ec:49:cf:c5:ad:3d:f4:dc:b8:
                    0f:76:30:b6:00:e0:f4:51:91:34:85:e6:02:d7:f8:
                    ad:26:b0:5d:6b:71:df:91:eb:4d:af:12:d8:79:6d:
                    38:cf:8f:f7:e4:29:08:0c:70:81:ed:54:80:33:cb:
                    20:1a:6f:e8:ef:3c:c4:85:36:c2:a0:b1:2d:cb:69:
                    5c:0e:3b:03:55:d3:0c:9e:68:b0:27:d7:69:e3:69:
                    34:29:ae:d1:c0:a4:bf:97:06:ec:2a:80:2d:e2:c3:
                    4c:ff:44:67:b7:89:63:c8:16:b4:88:d2:d2:ac:37:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:ED:E5:CE:6F:9F:96:42:19:C9:44:2C:08:0B:53:98:43:99:85:4B
            X509v3 Authority Key Identifier:
                keyid:69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/_u3lzm-flkIZyUQsCAtTmEOZhUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8280::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:60:7c:75:6a:a4:32:12:ce:ec:a8:38:39:1a:25:1d:53:32:
         61:09:56:d6:93:44:4b:4f:ee:3e:dc:06:6d:f2:68:45:71:7d:
         25:fa:1c:e6:ed:61:1e:c6:6a:3b:d4:6a:55:ec:a8:7f:00:5f:
         48:a9:0a:0f:18:9e:a2:8b:78:df:20:85:1f:54:cc:3b:86:7c:
         20:3f:d3:0d:61:4f:70:db:49:1c:bb:b6:78:7f:b7:bf:2f:34:
         61:41:22:89:03:6f:e2:7b:8b:90:a4:4f:c7:5e:6d:67:c3:3a:
         94:c3:92:05:79:af:fe:83:99:dc:24:90:09:62:95:db:97:e3:
         25:05:7d:04:2b:7c:66:67:c7:22:92:1a:09:8a:db:91:75:36:
         ac:1e:75:c5:32:2c:30:a1:08:47:f4:04:6a:76:d4:64:9d:36:
         bd:ad:13:5d:2b:aa:f4:8a:79:13:d9:99:fe:5e:55:05:3e:30:
         ff:ed:d3:77:f9:b3:ed:23:40:7d:12:90:96:62:14:54:20:9b:
         bd:32:62:23:12:33:e0:64:7d:41:ec:e4:18:1d:a3:bc:fb:e9:
         c5:00:cf:91:cd:93:8d:f9:62:fc:53:e5:eb:25:92:6b:0c:a0:
         7e:7e:e2:05:56:be:cf:ed:d6:a2:a6:c1:e2:cc:82:8f:e3:55:
         67:e4:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:37 2024 by rpki-client on console-ams.rpki-client.org