Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/7GwwCq1ejcuGdJt155rSSQ_Csc8.roa
File:                     7GwwCq1ejcuGdJt155rSSQ_Csc8.roa (raw, json)
Hash identifier:          luaFw33imQzjkKDR6vZcaHDl5TxtjP1s1Dgz3rjq24A=
Subject key identifier:   EC:6C:30:0A:AD:5E:8D:CB:86:74:9B:75:E7:9A:D2:49:0F:C2:B1:CF
Certificate issuer:       /CN=03d17bc7ebebdcc9f1b3fdb55ad122e7062243e2
Certificate serial:       019BF81B
Authority key identifier: 03:D1:7B:C7:EB:EB:DC:C9:F1:B3:FD:B5:5A:D1:22:E7:06:22:43:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/7GwwCq1ejcuGdJt155rSSQ_Csc8.roa
Signing time:             Sat 01 Jan 2022 13:04:32 +0000
ROA not before:           Sat 01 Jan 2022 13:04:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        185.151.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26998811 (0x19bf81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d17bc7ebebdcc9f1b3fdb55ad122e7062243e2
        Validity
            Not Before: Jan  1 13:04:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec6c300aad5e8dcb86749b75e79ad2490fc2b1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:8b:db:52:15:55:a9:4a:b0:bc:d9:ae:34:
                    1e:03:72:0f:48:7b:83:ce:77:b8:26:db:ef:7e:00:
                    8a:c7:96:ee:ab:16:10:4c:7b:f3:75:f9:a8:83:8d:
                    32:52:d3:99:c2:88:61:f8:87:19:0c:9e:d1:05:87:
                    e4:9a:dd:89:84:9a:2c:43:dd:78:c0:45:3a:a4:6f:
                    43:d2:94:aa:fa:5e:26:2a:dd:eb:47:17:9c:74:3d:
                    c6:14:2a:55:5c:6c:11:37:a2:97:54:74:9a:0b:7c:
                    55:f3:f9:08:8d:39:4e:c4:b5:c8:0b:69:7d:e5:16:
                    73:6f:48:9b:0f:15:10:dc:25:f3:8d:63:c4:8f:29:
                    18:52:24:6e:78:1b:91:64:13:ff:8e:43:48:55:9e:
                    26:28:2f:86:1f:f1:d5:46:73:0e:fd:06:e6:7b:9a:
                    ff:82:dd:54:c3:9f:cb:63:2f:42:06:7e:1a:df:0d:
                    d2:d2:ff:80:72:da:fd:e5:4c:ad:ba:21:35:9a:4d:
                    56:98:c8:0d:14:c2:0f:cf:3a:0f:dd:f1:ff:71:f3:
                    9e:53:76:0f:1c:1e:93:ca:0e:4d:52:9b:a3:b1:f3:
                    e2:48:50:fb:73:4b:2e:23:33:ea:8f:3c:4a:58:19:
                    57:d8:c9:52:93:6f:20:34:78:aa:25:2c:a3:e5:77:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:30:0A:AD:5E:8D:CB:86:74:9B:75:E7:9A:D2:49:0F:C2:B1:CF
            X509v3 Authority Key Identifier:
                keyid:03:D1:7B:C7:EB:EB:DC:C9:F1:B3:FD:B5:5A:D1:22:E7:06:22:43:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/7GwwCq1ejcuGdJt155rSSQ_Csc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:18:5f:c3:90:8c:77:5f:01:a4:b8:08:5b:4e:80:c9:b6:ff:
         93:38:90:05:30:cc:74:71:42:fd:40:74:b3:5d:08:b6:48:b2:
         e9:69:34:e3:1b:3d:51:24:55:d4:8c:f0:ad:71:b7:32:9f:65:
         3a:24:e1:55:c4:a3:7c:38:81:e3:b8:85:b5:6f:6f:7b:ad:d9:
         3f:d8:74:85:77:d2:91:38:b9:99:6c:1a:94:39:ff:45:56:0d:
         d6:f4:19:06:4a:2c:07:d7:21:20:e7:67:3c:3a:fe:95:ce:c7:
         65:c9:da:21:d7:96:52:0d:18:f6:33:89:72:6f:3e:48:76:02:
         18:a0:32:e1:8c:e3:bf:98:e4:fd:1a:aa:4e:a4:af:e0:64:3c:
         49:69:d3:af:e6:06:a4:ca:98:b1:91:15:e9:9a:f8:f4:e5:bd:
         fe:ea:63:80:3d:97:a1:61:49:08:bf:50:c7:79:65:79:27:75:
         af:7d:5d:bc:30:1c:b1:01:3e:00:d8:3e:3e:9a:45:dc:29:d4:
         36:d5:13:1c:2d:1d:b4:54:01:db:f2:56:53:6d:1e:41:67:8e:
         dd:e9:4d:e7:19:f9:87:04:c1:f2:f0:54:bd:41:8b:67:99:41:
         52:68:76:f8:57:ae:a3:64:9e:e4:66:47:86:48:b8:2b:4a:5a:
         55:96:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:43 2024 by rpki-client on console-ams.rpki-client.org