Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/TZPXRJFyI8xGgQGxBsXistMKtyc.roa
File:                     TZPXRJFyI8xGgQGxBsXistMKtyc.roa (raw, json)
Hash identifier:          l0uxN8zaIqsb/6uyg4JJFc1YdCQCM/4ybE5uM3SzTq0=
Subject key identifier:   4D:93:D7:44:91:72:23:CC:46:81:01:B1:06:C5:E2:B2:D3:0A:B7:27
Certificate issuer:       /CN=eff57861da5eaf3ccf0f18c1f101bbf4def3ad82
Certificate serial:       77D415
Authority key identifier: EF:F5:78:61:DA:5E:AF:3C:CF:0F:18:C1:F1:01:BB:F4:DE:F3:AD:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_V4YdperzzPDxjB8QG79N7zrYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/TZPXRJFyI8xGgQGxBsXistMKtyc.roa
Signing time:             Sat 01 Jan 2022 01:50:34 +0000
ROA not before:           Sat 01 Jan 2022 01:50:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7853077 (0x77d415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff57861da5eaf3ccf0f18c1f101bbf4def3ad82
        Validity
            Not Before: Jan  1 01:50:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d93d744917223cc468101b106c5e2b2d30ab727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:58:49:ea:c2:8a:ca:72:c1:8d:80:8e:e7:21:
                    52:46:da:61:c1:a3:67:0b:75:53:f7:64:32:dc:7e:
                    b0:a3:2d:a5:cf:05:7e:59:d6:14:ff:fb:e5:f7:71:
                    4f:59:65:cf:51:3d:0a:1f:64:d0:10:ac:e9:03:e2:
                    4e:70:9b:c9:e2:13:6a:81:c9:5c:bc:a9:08:d1:04:
                    49:13:36:8f:d1:60:a5:0d:4a:76:52:21:d4:3d:43:
                    a2:01:4d:37:0a:b6:c5:f4:c0:41:36:6e:9f:93:35:
                    bc:4f:c9:56:6e:22:6d:98:d1:dd:f7:17:47:78:87:
                    a1:c9:7c:c6:59:7b:5d:76:91:5e:54:5d:e1:71:a3:
                    6a:aa:b8:54:96:ed:9b:a2:ad:e6:4c:b4:85:dc:87:
                    4d:8f:fb:bd:ce:a0:1d:85:18:a0:dc:da:b0:a6:5e:
                    e5:8a:8d:76:33:23:a1:9e:40:e0:fa:21:94:dc:d5:
                    fa:26:e6:4e:31:d3:4e:0b:21:b2:cc:27:a4:a7:e7:
                    37:5f:95:7d:d0:6e:26:a2:c9:d6:51:b5:2d:6b:d2:
                    c0:43:c8:af:d9:7c:3c:5c:ff:90:e8:02:ba:d3:d6:
                    69:18:be:12:ec:8e:ff:9a:fc:5b:6e:e8:ff:73:da:
                    ee:48:57:29:a1:20:bf:42:77:2f:ff:94:21:fe:85:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:93:D7:44:91:72:23:CC:46:81:01:B1:06:C5:E2:B2:D3:0A:B7:27
            X509v3 Authority Key Identifier:
                keyid:EF:F5:78:61:DA:5E:AF:3C:CF:0F:18:C1:F1:01:BB:F4:DE:F3:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_V4YdperzzPDxjB8QG79N7zrYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/TZPXRJFyI8xGgQGxBsXistMKtyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/7_V4YdperzzPDxjB8QG79N7zrYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:19:82:27:ce:87:63:23:ce:23:c6:f4:17:08:9c:77:cc:
         24:b9:2c:00:56:18:2b:0f:a3:41:dc:95:26:1c:1a:3a:fc:7e:
         2e:c7:97:be:61:e7:84:48:59:e8:27:24:76:0d:bb:08:ce:00:
         eb:4e:b7:d0:d7:1b:f5:c8:6c:fc:dd:b6:2f:ba:97:db:68:79:
         0f:e0:9c:61:98:f6:16:80:39:97:4f:0b:58:a0:1d:1b:2e:ae:
         20:18:95:44:62:5d:64:68:6a:34:29:6a:9b:f5:f5:ef:e0:e2:
         1b:cc:f4:82:4f:92:26:2a:4f:b5:e2:d5:05:6e:cd:e5:1f:c6:
         5e:45:de:9e:49:60:6f:c2:32:53:25:4b:4d:d4:4a:08:1e:2d:
         31:b2:c0:53:b9:e0:d0:ab:4e:65:eb:31:23:08:ca:51:d3:ff:
         cf:ec:f2:ec:45:d0:27:5d:a3:c2:ea:7e:9a:35:10:b9:aa:47:
         02:16:42:92:96:16:f1:ad:e5:26:5c:fe:bb:37:d5:5a:22:35:
         f1:31:ef:10:46:b6:28:4e:44:d0:84:a4:a9:0b:ff:16:18:be:
         21:60:9f:fa:b5:3e:71:18:c4:24:bb:08:97:80:aa:87:a5:e7:
         95:e1:c4:14:44:aa:3d:84:6a:f9:b1:d4:d0:0e:c1:6d:44:9c:
         70:ad:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org