Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/akx6Eh3DCmi2GmvSRpzNPPcDv9Y.roa
File:                     akx6Eh3DCmi2GmvSRpzNPPcDv9Y.roa (raw, json)
Hash identifier:          7GPJLuut6JQ//MHEXXZs5QgaeBLvL+8R54k2ozOVZXY=
Subject key identifier:   6A:4C:7A:12:1D:C3:0A:68:B6:1A:6B:D2:46:9C:CD:3C:F7:03:BF:D6
Certificate issuer:       /CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Certificate serial:       018571B0DF4BBF6DC38CB3EE13CCC7020EA4
Authority key identifier: B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/akx6Eh3DCmi2GmvSRpzNPPcDv9Y.roa
Signing time:             Mon 02 Jan 2023 08:54:54 +0000
ROA not before:           Mon 02 Jan 2023 08:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398465
IP address blocks:        194.26.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b0:df:4b:bf:6d:c3:8c:b3:ee:13:cc:c7:02:0e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
        Validity
            Not Before: Jan  2 08:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a4c7a121dc30a68b61a6bd2469ccd3cf703bfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:5b:02:0d:39:0c:97:51:d2:ce:7a:ca:d4:
                    6a:25:a1:05:ed:0b:62:b9:93:4a:3e:3a:15:5f:91:
                    4e:6f:59:68:17:21:56:fb:b1:88:26:a6:5a:b4:62:
                    29:73:0d:1f:95:21:2b:c8:34:f7:52:96:5e:ff:6a:
                    8e:1e:21:0d:6b:78:fc:91:36:b3:4c:82:af:68:e7:
                    8a:0e:fd:25:13:e2:74:08:15:45:40:dc:6c:c3:a6:
                    8d:3c:1b:23:3a:02:5b:e1:f7:34:05:cd:42:a7:9d:
                    38:03:17:75:a2:67:ca:ce:94:2b:9e:3f:7b:43:88:
                    f4:af:22:ea:3a:6d:10:ba:78:a8:76:f8:7a:67:75:
                    b9:3a:c8:a8:e7:c4:39:bf:51:83:05:a7:0e:4d:11:
                    47:84:2c:80:97:17:ab:eb:8e:27:6e:7d:21:01:c3:
                    52:78:23:f5:29:07:59:ab:ee:44:e6:3d:0c:e6:ad:
                    36:52:a1:ec:9d:5a:62:4e:d4:69:bf:f1:ca:17:3b:
                    f0:c8:59:78:03:3c:8f:ed:1b:05:a5:e3:43:99:13:
                    24:cc:9d:1e:46:c8:b7:6d:13:50:d5:b9:c7:33:87:
                    93:f7:fd:6d:89:1a:ec:7d:32:40:3b:e3:b3:03:38:
                    d1:a4:74:6f:09:04:cf:bf:67:44:e5:06:86:fd:0c:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4C:7A:12:1D:C3:0A:68:B6:1A:6B:D2:46:9C:CD:3C:F7:03:BF:D6
            X509v3 Authority Key Identifier:
                keyid:B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/akx6Eh3DCmi2GmvSRpzNPPcDv9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/s-_qOnL68N9DIs2quaE2153oo-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:02:d6:5e:53:20:dd:3d:8d:e9:6d:d6:0b:7f:a8:11:60:
         57:92:53:92:51:38:b5:00:6f:c2:69:a3:ef:83:e3:59:78:4d:
         e1:de:40:0c:bc:02:3b:66:7b:e5:5c:fa:bc:d0:91:db:ca:af:
         90:71:4d:20:4b:92:0b:5d:3a:d6:7e:86:28:22:c4:4f:2a:aa:
         a0:a5:aa:a0:3d:b5:3b:c0:8b:13:2e:18:51:94:04:f9:72:4c:
         cc:d5:8f:bb:78:46:fb:a0:5a:ce:ba:9f:84:7a:dc:82:e4:59:
         99:3b:e4:ea:99:29:e9:ff:1c:c0:f3:db:63:e1:49:ee:8a:34:
         56:36:e6:3f:ed:07:20:a5:cc:94:93:59:3b:4c:ce:84:3b:e1:
         f1:81:de:66:0a:26:21:75:ee:66:8a:7b:2c:6c:16:03:57:6f:
         da:c8:19:f1:77:2c:f0:1d:34:42:51:78:09:b4:d3:d2:6f:4e:
         e3:74:1e:ad:5e:85:46:b2:2c:8e:03:13:42:29:a4:37:ab:63:
         bf:f5:a5:96:f8:7e:41:97:b8:4a:07:6b:e4:0e:5c:8b:24:09:
         06:07:bf:07:b6:88:35:26:82:55:77:f3:75:a8:88:2b:f5:29:
         32:49:e0:36:7d:b2:cd:bf:92:5c:c9:92:0e:77:3a:a3:5b:13:
         da:f4:05:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org