Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/vj1O0vSUXmBDA6C6RxYNIk2mAso.roa
File:                     vj1O0vSUXmBDA6C6RxYNIk2mAso.roa (raw, json)
Hash identifier:          pxdHzCnLnpxBy4R+hDLKugcodQj4stJBNen7Xj7fkrE=
Subject key identifier:   BE:3D:4E:D2:F4:94:5E:60:43:03:A0:BA:47:16:0D:22:4D:A6:02:CA
Certificate issuer:       /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial:       01856F7989E4589E0CE36B43C124E7D9F360
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/vj1O0vSUXmBDA6C6RxYNIk2mAso.roa
Signing time:             Sun 01 Jan 2023 22:35:14 +0000
ROA not before:           Sun 01 Jan 2023 22:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210505
IP address blocks:        146.19.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:89:e4:58:9e:0c:e3:6b:43:c1:24:e7:d9:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
        Validity
            Not Before: Jan  1 22:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be3d4ed2f4945e604303a0ba47160d224da602ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:66:ee:d5:b9:cd:10:f7:bb:59:37:73:04:4b:
                    93:fc:c8:ba:f3:5e:2c:8a:91:77:a0:8c:06:7b:04:
                    a7:50:e2:71:04:d1:62:95:c1:67:f7:55:46:03:59:
                    8c:e7:b0:56:bb:a2:ef:11:22:75:0f:ca:0a:d5:ee:
                    af:5c:39:2e:83:9e:58:6a:86:a2:fc:72:4c:4f:d1:
                    c4:87:3b:65:49:21:dc:10:69:6a:be:5a:d7:5d:29:
                    b2:fa:65:e1:30:90:4b:69:ee:31:b0:c4:d6:29:fb:
                    b7:06:bd:b6:14:e6:80:71:e1:4f:06:87:ef:b4:18:
                    94:10:1b:f4:41:8e:48:da:e4:4c:60:9d:de:81:eb:
                    0d:97:7b:5c:fc:7a:b3:55:63:07:e5:34:29:f0:30:
                    35:72:e3:0b:aa:58:8a:e0:a9:a4:6a:ae:b2:78:f3:
                    6d:4a:b4:3c:0e:5f:19:95:4b:9f:1d:54:e7:54:5c:
                    14:ee:a4:07:fe:e3:22:ff:f9:80:9d:38:c4:e0:b0:
                    31:85:1d:8b:36:2b:42:35:70:c3:eb:cd:3a:b3:2c:
                    69:f6:43:81:e3:8a:40:9f:e7:e5:09:a1:c2:5b:9a:
                    46:47:5e:eb:e6:83:0f:e1:ee:d0:de:e9:00:a0:77:
                    55:28:26:a4:64:dc:c8:43:a2:3a:1e:d5:57:96:42:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3D:4E:D2:F4:94:5E:60:43:03:A0:BA:47:16:0D:22:4D:A6:02:CA
            X509v3 Authority Key Identifier:
                keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/vj1O0vSUXmBDA6C6RxYNIk2mAso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:c2:e3:97:73:48:c4:d9:9e:c4:f8:28:1e:44:e9:e2:46:
         3d:58:22:c8:3d:f3:5a:5a:31:cf:ed:87:53:47:b1:ce:24:ed:
         1f:8e:14:d9:f4:84:cd:ef:c5:ad:61:f9:67:86:b5:a9:45:86:
         66:ed:a9:6c:52:0f:22:e4:61:bb:54:01:48:ad:68:f0:0a:73:
         ec:24:38:50:25:a1:06:9d:52:56:c5:82:5a:49:57:16:6e:07:
         40:81:82:81:c0:01:71:4b:5a:c2:2c:36:6e:8e:ed:ff:78:f2:
         43:6b:f3:85:d0:4e:e7:44:bd:65:55:0c:b0:30:45:b8:07:b4:
         c9:18:db:54:90:9e:a7:61:88:63:90:7b:92:c3:42:23:b4:f9:
         d5:e0:29:d0:e0:73:e4:29:4f:31:a7:a0:1f:b2:f2:a2:5f:69:
         8d:4e:80:82:b5:6e:42:ef:a5:c7:1c:f2:0f:a3:27:f5:0f:fd:
         35:43:ef:f3:7c:7a:18:6d:6b:a5:13:3e:bc:2d:88:7d:92:4c:
         2a:e5:aa:76:2c:90:30:e0:4b:e4:02:31:db:7e:f3:f4:f0:48:
         28:7f:57:e4:2d:43:47:29:de:15:c3:25:68:84:ce:ba:4c:cb:
         24:0f:a4:92:ec:7f:84:35:ed:82:48:70:ef:61:de:82:ce:3f:
         4b:ad:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org