Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/wA6o1Neza1WRqWUCj4K6vB16L-4.roa
File:                     wA6o1Neza1WRqWUCj4K6vB16L-4.roa (raw, json)
Hash identifier:          3vcgbGtCpxVdPFkmgyInGQ8Qq7KQmX8GXYu0Z2Kktuw=
Subject key identifier:   C0:0E:A8:D4:D7:B3:6B:55:91:A9:65:02:8F:82:BA:BC:1D:7A:2F:EE
Certificate issuer:       /CN=ed18c6ee6c820453c3f259bbe2a7dd63c9808ab9
Certificate serial:       DAC57F
Authority key identifier: ED:18:C6:EE:6C:82:04:53:C3:F2:59:BB:E2:A7:DD:63:C9:80:8A:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7RjG7myCBFPD8lm74qfdY8mAirk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/wA6o1Neza1WRqWUCj4K6vB16L-4.roa
Signing time:             Sat 01 Jan 2022 02:01:11 +0000
ROA not before:           Sat 01 Jan 2022 02:01:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6876
IP address blocks:        193.163.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14337407 (0xdac57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed18c6ee6c820453c3f259bbe2a7dd63c9808ab9
        Validity
            Not Before: Jan  1 02:01:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c00ea8d4d7b36b5591a965028f82babc1d7a2fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:05:b9:a8:83:04:b0:8a:21:8b:51:27:1c:
                    95:c9:94:91:a0:73:dc:88:17:fb:07:ee:0f:bb:e9:
                    6b:55:a2:02:af:40:9d:5d:4a:98:cf:fd:82:e1:e5:
                    ce:20:f1:f8:83:67:13:12:6d:60:69:25:7f:ab:88:
                    6a:77:c1:73:6b:e7:50:c5:e3:d1:fd:c2:28:f8:62:
                    5d:89:43:d4:c7:59:e6:ce:22:42:7c:f7:7a:5b:da:
                    2b:70:2a:ba:7e:8a:c6:3a:30:6f:2e:be:e1:1c:06:
                    d0:4b:04:55:32:a4:83:45:2a:ec:73:00:2d:4d:41:
                    f8:77:0f:e4:bc:82:d7:b6:55:db:74:57:6a:1a:0d:
                    9d:0b:c7:ba:a9:78:fc:8b:17:db:f5:df:4f:7e:f0:
                    be:2d:14:29:18:24:c1:c6:68:fc:1d:9d:51:9d:82:
                    09:4d:56:9e:dd:f2:1a:ed:9e:f7:61:4c:df:81:6c:
                    69:17:79:66:f7:1f:8d:72:32:49:84:de:eb:f3:5c:
                    de:64:7d:b8:e0:55:ba:82:0b:14:83:89:01:88:6e:
                    b5:dd:95:e2:d0:8a:ba:59:6c:aa:3f:76:ee:6e:c9:
                    f6:4d:fd:23:ac:18:79:4b:40:47:28:be:57:35:78:
                    99:d9:d7:4b:ab:bd:46:63:0c:56:7b:fd:2a:95:af:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0E:A8:D4:D7:B3:6B:55:91:A9:65:02:8F:82:BA:BC:1D:7A:2F:EE
            X509v3 Authority Key Identifier:
                keyid:ED:18:C6:EE:6C:82:04:53:C3:F2:59:BB:E2:A7:DD:63:C9:80:8A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RjG7myCBFPD8lm74qfdY8mAirk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/wA6o1Neza1WRqWUCj4K6vB16L-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/7RjG7myCBFPD8lm74qfdY8mAirk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:8f:4f:df:d6:a7:92:26:91:2a:56:88:e4:d9:0b:97:53:
         66:03:23:6a:7a:32:d5:97:2b:28:76:6f:60:57:98:a3:44:29:
         d0:4c:4e:32:1d:ad:bd:7a:a3:e0:1a:00:d9:fa:6e:4b:0b:a0:
         08:60:97:7f:3a:28:98:32:7e:d3:d8:a7:0a:80:7b:3e:bf:6c:
         f5:77:91:49:41:1d:3b:47:d6:07:e8:8f:60:d2:52:9d:56:05:
         b4:b9:d2:ab:c6:23:9e:e3:55:fe:93:54:1a:2a:0d:eb:73:09:
         b9:e5:eb:9a:1e:19:a8:c0:10:15:b3:55:73:7d:ba:82:2d:dc:
         c6:f5:3c:db:f9:ad:21:54:e5:a5:4e:f3:77:37:0b:93:1c:87:
         72:0f:37:83:9a:dc:2c:92:b4:54:ef:2a:d9:bc:19:f7:6a:7d:
         74:1a:ea:33:28:9d:48:49:00:0c:bb:d2:8c:dc:d0:77:99:55:
         58:6a:2b:a5:e5:9d:52:d5:af:aa:b9:47:f2:3e:81:7d:99:0e:
         10:92:1b:6b:fb:d4:f3:0a:21:f8:6b:af:56:a2:8d:ca:fe:91:
         25:e3:01:39:a8:22:d0:73:fb:4a:37:ec:a0:8a:b3:fe:ac:df:
         48:c4:a2:a8:52:1c:38:fc:de:97:2e:57:4a:0c:ab:cf:34:6e:
         4d:8f:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:07 2024 by rpki-client on console-ams.rpki-client.org