Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/eM4aIqiAm25zI_nVI_cbPvYw4O0.roa
File:                     eM4aIqiAm25zI_nVI_cbPvYw4O0.roa (raw, json)
Hash identifier:          fPvgvUnSxWZb/E668DqDz6fpH6CjtrTVZTyy62v/t94=
Subject key identifier:   78:CE:1A:22:A8:80:9B:6E:73:23:F9:D5:23:F7:1B:3E:F6:30:E0:ED
Certificate issuer:       /CN=eff57861da5eaf3ccf0f18c1f101bbf4def3ad82
Certificate serial:       01856C0A41812AA49896581EC103BD719265
Authority key identifier: EF:F5:78:61:DA:5E:AF:3C:CF:0F:18:C1:F1:01:BB:F4:DE:F3:AD:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_V4YdperzzPDxjB8QG79N7zrYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/eM4aIqiAm25zI_nVI_cbPvYw4O0.roa
Signing time:             Sun 01 Jan 2023 06:34:49 +0000
ROA not before:           Sun 01 Jan 2023 06:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59253
IP address blocks:        146.19.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:0a:41:81:2a:a4:98:96:58:1e:c1:03:bd:71:92:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff57861da5eaf3ccf0f18c1f101bbf4def3ad82
        Validity
            Not Before: Jan  1 06:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78ce1a22a8809b6e7323f9d523f71b3ef630e0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:3d:bc:21:c1:b7:1c:a2:e2:d0:2f:8a:58:
                    a0:c0:1a:59:ac:49:28:e4:d8:f4:85:ae:3a:8f:7a:
                    be:38:a3:1c:b3:30:3b:a9:f4:91:b0:4b:61:dd:f9:
                    c8:36:00:26:74:e4:7a:69:a1:d6:48:6f:03:ab:71:
                    b8:2b:b1:6e:78:7a:23:38:96:9e:ea:66:4b:9c:52:
                    67:ec:67:38:bf:ac:5c:b1:0d:b6:50:87:f7:80:2b:
                    62:47:41:3b:02:16:e8:03:d1:f8:be:d4:9d:2b:69:
                    b9:ae:1b:e0:15:79:2a:8c:93:49:f3:a6:3e:dc:2a:
                    cf:6e:4e:d2:5f:1f:1b:8e:85:69:17:89:41:98:aa:
                    1b:5d:c5:04:ab:81:4d:c5:f8:18:84:60:11:ab:26:
                    63:6a:a9:60:7d:cf:50:b9:50:f4:cc:b7:60:fc:ed:
                    72:f0:a8:58:a5:af:dc:0d:7e:fd:5d:3a:30:33:24:
                    97:fd:b2:d1:8a:b1:39:c5:cf:d3:49:59:5a:4d:47:
                    d7:23:dc:d4:50:8b:a2:5c:dd:7c:72:dd:94:70:5e:
                    29:d2:10:47:06:d9:cb:a6:33:ac:64:08:c2:ff:be:
                    a6:5d:74:88:89:21:c4:2a:5b:57:1a:a0:69:ff:2b:
                    96:9a:bf:c1:2e:7f:bb:51:59:c8:8d:eb:43:ac:ca:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:1A:22:A8:80:9B:6E:73:23:F9:D5:23:F7:1B:3E:F6:30:E0:ED
            X509v3 Authority Key Identifier:
                keyid:EF:F5:78:61:DA:5E:AF:3C:CF:0F:18:C1:F1:01:BB:F4:DE:F3:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_V4YdperzzPDxjB8QG79N7zrYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/eM4aIqiAm25zI_nVI_cbPvYw4O0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/7_V4YdperzzPDxjB8QG79N7zrYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:7d:d9:30:32:14:66:cb:64:8b:b8:f8:45:0e:19:7d:89:
         57:bd:13:8d:93:58:03:14:f7:b1:84:65:36:2e:83:7e:58:6f:
         e4:b6:9e:2d:bd:0b:6b:b5:89:b0:a6:ed:e8:d3:16:bf:96:22:
         12:30:cb:35:ad:5e:1e:64:fa:51:f1:b4:b2:f4:b2:27:ce:4e:
         53:67:1e:9e:c6:50:25:2b:d2:70:ff:65:fa:3c:30:15:9c:fa:
         58:5a:ad:a6:ac:17:6c:d3:c2:71:1d:e8:03:e8:15:c5:ae:e3:
         16:60:75:3e:3e:77:b7:1b:b5:af:e2:50:d0:8d:32:8c:ca:07:
         11:d0:ab:bf:66:cb:3c:40:25:79:08:01:f0:60:2f:b9:c2:1b:
         21:6e:3f:c7:0d:33:3c:8a:29:79:be:0c:46:f9:92:19:88:db:
         32:87:76:07:71:7e:93:90:45:5a:71:03:bf:0a:ed:e9:5d:eb:
         2e:ab:4c:2f:04:13:dd:02:3b:ad:36:17:5f:43:49:ef:6c:34:
         5c:9d:e3:70:ab:05:b8:8d:65:de:7a:82:c6:9b:05:b2:64:2b:
         2f:13:ef:b1:6c:ac:43:fa:1d:7e:4e:c8:0f:d0:7b:7f:4e:ef:
         a3:51:6c:a0:0f:8c:6e:0c:a3:b7:f4:82:4a:4e:49:5c:25:6c:
         4d:96:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org