Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/LUYpPNjIpZG-zny9YO2ge2BjMUM.roa
File:                     LUYpPNjIpZG-zny9YO2ge2BjMUM.roa (raw, json)
Hash identifier:          +XVAmAhcN3Yhu2c22mzb/kJlPj+uUX01X3wJRr2lvY8=
Subject key identifier:   2D:46:29:3C:D8:C8:A5:91:BE:CE:7C:BD:60:ED:A0:7B:60:63:31:43
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       017B8C3E
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/LUYpPNjIpZG-zny9YO2ge2BjMUM.roa
Signing time:             Tue 15 Feb 2022 07:49:57 +0000
ROA not before:           Tue 15 Feb 2022 07:49:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        2a0b:a4c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24874046 (0x17b8c3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Feb 15 07:49:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d46293cd8c8a591bece7cbd60eda07b60633143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:b7:ab:b7:9a:11:4d:7b:f6:a6:24:97:c6:
                    bb:1d:c7:73:16:3f:5b:fa:ad:3b:de:ef:35:87:cd:
                    87:7f:2b:30:e3:03:49:76:1f:10:b7:40:c3:58:71:
                    2b:48:d0:f1:a2:c5:a6:d1:14:f3:1a:1f:b7:fc:75:
                    66:6b:44:71:61:9e:bd:71:41:27:05:02:5e:31:5f:
                    4e:b7:2c:e9:a3:8d:21:1c:7f:1a:b2:23:9f:e4:a4:
                    ec:9a:18:21:58:06:05:2b:9b:0c:2f:09:10:f7:1b:
                    92:f9:60:38:be:9c:14:3f:5f:4b:c2:5b:fc:05:f2:
                    71:d6:e8:e4:e2:81:71:e6:2f:18:f4:88:59:ba:78:
                    39:6e:f4:47:f6:93:69:0d:4f:eb:8a:ad:66:86:8e:
                    4d:71:0c:d7:26:67:b0:dd:d7:b1:7d:a0:cd:5f:58:
                    f4:37:6f:1f:18:3f:bf:24:a6:3a:57:88:da:25:d7:
                    0b:bb:49:c9:48:f1:82:df:e6:60:14:14:85:01:b4:
                    07:14:67:50:7f:dc:72:80:9b:60:28:62:ff:e3:4f:
                    e4:54:a5:d6:41:f8:72:82:93:7c:5e:e6:09:bc:c7:
                    84:72:71:9d:3b:ac:24:b0:b8:7e:f4:42:62:a7:16:
                    4d:39:cf:e9:3c:52:8a:f1:ad:26:eb:c1:b6:d9:fa:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:29:3C:D8:C8:A5:91:BE:CE:7C:BD:60:ED:A0:7B:60:63:31:43
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/LUYpPNjIpZG-zny9YO2ge2BjMUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:a4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:d7:cc:9c:96:5a:9e:0e:2c:f8:ea:bd:75:df:8a:fc:e4:
         c0:43:da:8c:f2:02:e0:57:66:26:d5:4f:95:00:59:c9:6c:e6:
         cf:59:c1:11:82:b0:dc:d6:22:a3:58:e6:a7:18:53:d0:f5:9a:
         2c:9d:73:00:c8:33:33:8c:d3:82:d6:96:ae:75:88:7e:e8:47:
         0f:63:c7:1d:71:de:81:33:bf:a7:1d:41:5d:4c:17:1a:73:73:
         99:81:45:c4:6d:aa:b0:e2:ee:e7:1f:fc:32:3d:d8:a0:39:b5:
         04:56:d4:ed:33:00:a8:52:b3:41:43:37:4c:20:5f:ea:0f:3e:
         32:6a:82:11:e4:75:39:d2:58:88:79:19:99:d5:81:dc:76:ae:
         18:df:1b:b7:8a:17:1f:b5:6d:c6:0b:29:b4:ba:40:bc:d9:39:
         54:ce:49:41:98:07:60:e8:23:fc:2e:32:cc:20:d6:88:cf:87:
         8f:e2:6f:80:0b:54:85:6c:9b:a7:c8:63:f8:7a:d7:bc:6a:80:
         00:db:30:75:a3:c5:8e:e5:74:1a:a9:35:6f:27:04:e3:7d:52:
         cf:3c:3c:e8:ab:11:7d:9e:e4:1d:9e:7d:8c:41:df:a8:c4:fe:
         7e:e2:46:5d:34:62:6b:0c:1b:54:89:af:a5:ef:ea:fc:5d:62:
         21:e5:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org