Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/vFxiGOo37HT19z4mzKgT3DnBd7M.roa
File:                     vFxiGOo37HT19z4mzKgT3DnBd7M.roa (raw, json)
Hash identifier:          IPwyvBz4t9OOHr/lIxUbEy+1r9UwtnzXE10RZ/nL0dE=
Subject key identifier:   BC:5C:62:18:EA:37:EC:74:F5:F7:3E:26:CC:A8:13:DC:39:C1:77:B3
Certificate issuer:       /CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
Certificate serial:       CE7946
Authority key identifier: CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/vFxiGOo37HT19z4mzKgT3DnBd7M.roa
Signing time:             Sat 01 Jan 2022 05:01:35 +0000
ROA not before:           Sat 01 Jan 2022 05:01:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        213.109.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13531462 (0xce7946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
        Validity
            Not Before: Jan  1 05:01:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc5c6218ea37ec74f5f73e26cca813dc39c177b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:16:1e:41:6d:56:c5:44:09:20:15:51:52:
                    53:6a:dc:01:24:80:22:6a:b3:45:5d:86:6d:ed:09:
                    e7:27:e9:80:f3:7b:13:8c:ee:2c:9a:be:36:bb:10:
                    d8:14:e2:ea:9c:d3:8a:31:9a:5e:4b:56:0c:f6:be:
                    16:b9:90:33:ad:35:ac:1e:b8:f5:e5:1d:17:c5:7a:
                    c8:31:5f:14:fc:d1:52:b2:ee:40:0d:34:d9:b2:07:
                    bc:5d:62:ff:13:94:cf:00:c0:ef:28:ef:cd:26:57:
                    b2:86:41:a5:4f:ec:26:fe:fe:bf:39:fc:08:16:91:
                    bf:cd:f8:f9:09:91:b5:e3:19:15:f3:9c:37:53:16:
                    ac:9f:08:07:ed:4c:86:87:f2:36:11:68:d6:cc:6b:
                    a6:cf:5c:71:40:6a:0e:c3:90:65:94:21:7f:12:81:
                    4d:07:e0:fa:5b:2d:a0:7e:ba:1c:a2:2f:7c:89:f0:
                    92:c3:d2:d2:f6:24:02:3f:1e:53:de:c3:b4:20:3c:
                    e4:77:f9:d9:7c:68:a1:b6:9c:be:16:55:3a:5b:c5:
                    e7:c2:02:bf:35:9d:dd:7e:19:63:da:8c:96:89:de:
                    12:74:6a:87:0b:9e:75:fd:57:1a:27:4c:8d:9e:d5:
                    ee:21:5e:75:29:ba:39:24:ee:74:4b:d5:6b:4a:fa:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5C:62:18:EA:37:EC:74:F5:F7:3E:26:CC:A8:13:DC:39:C1:77:B3
            X509v3 Authority Key Identifier:
                keyid:CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/vFxiGOo37HT19z4mzKgT3DnBd7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:57:ba:0f:99:bc:c9:44:4a:f6:e9:98:bb:2d:16:76:75:a6:
         39:31:bd:9e:0d:3b:d6:ca:0f:e8:b0:55:5d:47:37:ea:d6:16:
         5f:1d:d2:8f:e1:33:e5:20:e3:4f:e2:1a:81:d1:40:29:52:86:
         0f:fe:ae:d8:42:03:1c:a6:12:6b:d8:41:3a:8f:3c:20:83:5c:
         37:63:b7:7d:24:ba:69:60:e9:8d:94:8c:0f:90:c0:a9:3b:c7:
         24:30:81:42:1b:97:25:a8:5d:b8:8d:8a:2e:3d:d8:39:f3:a7:
         16:d3:6e:89:69:10:a5:7b:dd:ee:67:98:36:25:41:54:44:a3:
         0b:40:97:28:5f:3e:15:bd:79:b5:1e:c6:59:9f:ca:96:82:3b:
         36:0f:32:ee:41:10:f5:5a:cd:e1:e2:d0:d9:5d:3f:3c:47:70:
         6d:4d:ad:f4:78:98:63:63:54:9e:8d:50:c3:d0:e2:b2:78:7a:
         00:e8:79:eb:bc:10:7c:de:29:86:cd:31:06:4b:2a:b4:ea:e6:
         12:54:05:09:e5:25:56:94:df:0e:58:61:6e:5c:6e:7a:37:73:
         ad:83:7d:8d:9f:a4:ad:f6:14:fa:6e:c8:48:5a:f0:70:97:14:
         c9:40:c6:77:ad:fd:4e:54:ae:e7:9d:ad:d4:24:4d:36:61:64:
         79:6b:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:15 2024 by rpki-client on console-ams.rpki-client.org