Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/OVYudckPWE5YbK4Q6FQiV6x9Z8M.roa
File:                     OVYudckPWE5YbK4Q6FQiV6x9Z8M.roa (raw, json)
Hash identifier:          udhd0GlEX7IhsQIcMGvuAhk6zZPXnEm7bEoTY9pPyR0=
Subject key identifier:   39:56:2E:75:C9:0F:58:4E:58:6C:AE:10:E8:54:22:57:AC:7D:67:C3
Certificate issuer:       /CN=298074ad430476574d86d2d56c54f76be2a86a17
Certificate serial:       02C47A5A
Authority key identifier: 29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/OVYudckPWE5YbK4Q6FQiV6x9Z8M.roa
Signing time:             Wed 30 Mar 2022 13:34:57 +0000
ROA not before:           Wed 30 Mar 2022 13:34:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        2.58.118.0/24 maxlen: 24
                          2.58.117.0/24 maxlen: 24
                          2.58.116.0/24 maxlen: 24
                          2.58.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46430810 (0x2c47a5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298074ad430476574d86d2d56c54f76be2a86a17
        Validity
            Not Before: Mar 30 13:34:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39562e75c90f584e586cae10e8542257ac7d67c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:66:66:60:8e:f9:fd:8b:18:a2:35:c1:93:
                    7c:d7:91:03:05:ff:4f:d9:c8:f8:4d:31:3d:54:de:
                    b7:c6:68:41:f5:67:a3:55:a7:83:4f:f2:ba:50:55:
                    1b:b2:8d:0e:1d:4c:39:86:10:5a:9e:92:79:52:5e:
                    07:19:19:b4:7a:88:55:21:b1:a0:ea:ef:c4:57:70:
                    c4:b6:36:a1:47:64:79:7a:25:75:e8:fe:af:37:96:
                    42:e7:6e:43:cf:48:73:ee:d3:0d:8c:5e:0c:31:be:
                    20:76:bc:87:06:a0:c0:e7:51:42:a8:90:e2:56:92:
                    d9:41:c1:52:24:d2:f0:4a:1c:3d:91:49:d9:25:20:
                    bc:d9:0d:6e:db:e7:8e:1c:6e:a9:27:3c:c0:a1:bf:
                    63:44:d6:75:6e:ae:7d:94:65:38:89:64:f5:e0:6b:
                    99:d2:89:f7:2a:b7:8c:f8:47:80:ec:b6:32:9c:68:
                    e0:90:1d:35:58:93:9c:2d:e3:87:07:61:4f:76:a7:
                    67:c5:37:5b:97:e4:94:6b:0b:32:63:c2:56:14:17:
                    8d:b9:eb:b3:c5:b3:b7:bb:88:9f:8d:b8:fd:c0:95:
                    b3:df:f3:6b:dc:9d:a7:78:d3:66:0b:3f:9d:61:87:
                    e9:09:fa:15:2d:80:38:79:b6:2d:a1:fe:b1:90:4b:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:2E:75:C9:0F:58:4E:58:6C:AE:10:E8:54:22:57:AC:7D:67:C3
            X509v3 Authority Key Identifier:
                keyid:29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/OVYudckPWE5YbK4Q6FQiV6x9Z8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:e5:18:65:33:b3:98:85:8f:ac:a4:19:ae:44:bd:f5:21:
         75:98:4c:b8:cf:c6:ca:c0:a3:b7:de:e3:1a:0a:b2:82:95:69:
         60:5c:15:7b:15:e3:0c:cd:b6:bc:9d:68:c3:44:01:98:11:66:
         be:d0:92:e5:63:ed:18:34:9e:4a:48:c9:50:8c:a3:9b:91:17:
         a7:1a:f7:d3:05:37:e6:b8:b8:20:ef:3c:bc:27:74:af:42:24:
         9e:89:ce:b4:81:d0:92:e4:1d:66:99:46:b0:ad:b0:2f:03:04:
         99:fc:7f:7d:bd:36:7e:76:b6:56:d4:11:9b:a7:a9:25:63:e4:
         b7:31:69:2e:32:b8:49:31:84:cf:dd:b9:14:a9:3b:04:fa:f4:
         58:d2:7e:1d:b6:8e:9a:68:b3:ba:44:f6:ba:24:92:7f:2d:c2:
         ba:8e:1c:7c:63:3d:8a:75:7a:ae:2f:21:8e:fb:c3:51:e1:61:
         70:07:56:6f:1c:c6:24:b6:bc:6b:23:fa:64:b3:89:78:bb:9e:
         27:f1:da:28:2f:1b:74:36:99:f6:9a:b7:fd:fa:05:b6:26:eb:
         83:1b:ef:05:5a:d9:76:eb:7f:9e:dc:6b:ef:45:e2:61:b4:b4:
         ac:ca:e4:05:1c:b0:45:d5:b3:ea:72:2c:38:25:9f:3b:05:eb:
         3f:0b:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org