Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/miCkHkB1x9dZDw2pah6Av1_0GeY.roa
File:                     miCkHkB1x9dZDw2pah6Av1_0GeY.roa (raw, json)
Hash identifier:          dbmqDgJV7heRWR7tVfh8zg5vfFcBSUBIKj/WAaNN2xM=
Subject key identifier:   9A:20:A4:1E:40:75:C7:D7:59:0F:0D:A9:6A:1E:80:BF:5F:F4:19:E6
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       0182AFFE5E053929416D79DEFE80005A60AB
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/miCkHkB1x9dZDw2pah6Av1_0GeY.roa
Signing time:             Thu 18 Aug 2022 08:07:39 +0000
ROA not before:           Thu 18 Aug 2022 08:07:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212144
IP address blocks:        2a0f:89c0::/29 maxlen: 29
                          2a0f:e3c4::/31 maxlen: 31
                          2a10:3e84::/30 maxlen: 30
                          2a0f:63c0::/29 maxlen: 29
                          2a07:f240::/29 maxlen: 32
                          2a10:a9c0::/29 maxlen: 29
                          2a0f:9bc0::/29 maxlen: 30
                          2a0b:a4c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:af:fe:5e:05:39:29:41:6d:79:de:fe:80:00:5a:60:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Aug 18 08:07:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a20a41e4075c7d7590f0da96a1e80bf5ff419e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:fe:27:7e:54:40:0a:f2:9e:fe:6f:98:97:
                    00:71:40:49:70:d6:27:f8:06:c9:00:3d:b5:14:f9:
                    05:06:a5:3a:af:9f:f7:72:e4:80:f4:9e:ff:34:8e:
                    7f:c1:b1:8f:d8:78:86:31:78:a7:fc:a4:45:df:bb:
                    eb:05:64:8e:7d:68:cd:bf:a2:7a:16:91:74:50:df:
                    a9:8c:31:f3:26:cc:a1:d5:13:73:b5:fe:78:dc:47:
                    ce:ca:3c:5f:bb:36:ef:1a:ef:6b:95:3e:34:81:dc:
                    03:f9:6f:d0:f7:14:8d:da:5b:9d:e2:7a:da:7d:18:
                    05:f0:71:f7:fd:d1:c4:b6:fc:92:4d:7f:61:9a:77:
                    19:0d:72:82:9c:7c:db:60:0e:e0:df:94:f3:b5:29:
                    b4:8a:d4:08:e0:d9:7a:b6:67:17:e8:0d:75:8a:0c:
                    f7:05:0c:45:53:28:b4:de:f4:26:3e:da:2f:84:b8:
                    64:c0:f0:fa:a4:66:fc:4d:2d:50:ee:b9:8f:07:be:
                    ca:83:2b:0f:4e:79:2c:88:88:77:1c:86:60:4e:94:
                    df:ce:5a:1c:77:80:78:11:97:a7:bb:e1:3a:73:3c:
                    3f:b3:86:f8:56:5f:54:37:e7:56:5c:14:87:51:a3:
                    a5:88:c4:72:78:19:e9:56:47:46:a1:24:1d:73:5d:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:20:A4:1E:40:75:C7:D7:59:0F:0D:A9:6A:1E:80:BF:5F:F4:19:E6
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/miCkHkB1x9dZDw2pah6Av1_0GeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:f240::/29
                  2a0b:a4c0::/29
                  2a0f:63c0::/29
                  2a0f:89c0::/29
                  2a0f:9bc0::/29
                  2a0f:e3c4::/31
                  2a10:3e84::/30
                  2a10:a9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:a1:7f:71:ab:1f:cd:7c:89:8c:cf:fd:f4:b5:df:d9:e1:
         22:fd:ea:87:21:0c:b5:5a:3c:cc:19:d5:d0:9c:e0:05:22:a1:
         d6:b9:0b:36:82:08:6c:71:3b:d6:30:df:56:50:55:24:66:bb:
         3b:bf:29:84:d7:93:06:15:4f:8c:21:88:44:14:af:91:6b:13:
         42:13:bb:8d:81:c5:b0:21:4d:db:98:99:0c:b9:1e:40:54:d9:
         65:c1:a0:4f:a2:84:bf:6f:f7:a0:8f:84:30:8f:6d:2b:2b:27:
         6b:f1:5f:86:f5:68:91:9f:e3:ad:f5:01:db:8d:ab:6f:2c:6d:
         b5:e7:a1:db:1d:f5:ec:0a:91:3b:c3:47:9b:e6:1d:dc:17:61:
         14:81:86:1e:cb:21:00:e9:58:0d:7c:b8:01:c1:99:bc:0e:4e:
         b4:05:1c:50:27:4f:19:4d:cb:21:47:f9:a1:31:2a:e0:25:cc:
         3e:38:35:1e:74:2a:ef:38:56:ab:66:86:a3:55:aa:ac:d8:68:
         b2:a8:4f:97:ba:68:93:b1:84:38:3f:e5:3f:17:7c:b6:78:8f:
         29:c6:9b:72:dc:1f:b7:8f:e0:c3:fd:b6:66:c1:db:81:96:e3:
         0a:27:0c:ec:e7:88:18:fa:85:b6:61:91:a4:5d:9c:e3:19:65:
         99:26:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org