Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/QeggS_Htjy94PkBlfT_ZhtkSMmk.roa
File:                     QeggS_Htjy94PkBlfT_ZhtkSMmk.roa (raw, json)
Hash identifier:          8Q/7tV4LadiGIcCwuNqQlEqnCCWoUmnYnJqcwKDU+Do=
Subject key identifier:   41:E8:20:4B:F1:ED:8F:2F:78:3E:40:65:7D:3F:D9:86:D9:12:32:69
Certificate issuer:       /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial:       2820F5
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/QeggS_Htjy94PkBlfT_ZhtkSMmk.roa
Signing time:             Sun 10 Apr 2022 08:18:32 +0000
ROA not before:           Sun 10 Apr 2022 08:18:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19120
IP address blocks:        146.19.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629877 (0x2820f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
        Validity
            Not Before: Apr 10 08:18:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=41e8204bf1ed8f2f783e40657d3fd986d9123269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:d5:4c:5a:c0:df:71:d5:d4:ce:c2:2b:8a:
                    88:4d:fd:18:70:4c:57:1c:d7:74:65:da:14:49:77:
                    03:d8:ea:13:30:d1:c4:aa:b9:1d:28:b3:73:ee:cb:
                    56:4a:04:12:c2:50:93:76:09:9d:38:2f:e4:35:e4:
                    13:1c:13:4e:2b:e2:55:32:21:04:82:0b:92:b9:34:
                    5c:34:49:df:77:fd:aa:1c:22:21:7b:03:f3:26:99:
                    5b:43:51:ca:d3:a9:c3:ed:a1:5a:c1:49:1f:f9:02:
                    16:7c:81:00:ca:1f:bc:3d:11:77:ac:5c:24:fa:03:
                    de:d9:39:0f:cd:ca:1d:ef:12:15:43:93:b6:4e:6a:
                    6e:83:4e:0a:d7:5c:80:17:e6:bf:16:21:2c:e8:9f:
                    a3:9b:5d:93:e9:61:c2:d7:d0:33:72:10:08:55:54:
                    c5:c1:f3:5a:c8:c2:84:f1:ac:4c:dc:40:33:12:cf:
                    65:0e:d2:33:3d:03:b6:b1:cd:e4:cc:40:c0:c2:1c:
                    bf:6a:14:ea:c3:c2:76:d0:e7:89:b3:03:74:ad:c6:
                    42:3a:d9:b2:db:10:fb:f6:64:93:4e:f7:75:94:af:
                    76:98:bc:a3:d0:a8:de:e2:54:5a:5f:3d:de:6b:f5:
                    a2:0c:fb:be:8b:8e:24:79:e0:55:da:40:bb:1e:c6:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:20:4B:F1:ED:8F:2F:78:3E:40:65:7D:3F:D9:86:D9:12:32:69
            X509v3 Authority Key Identifier:
                keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/QeggS_Htjy94PkBlfT_ZhtkSMmk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:81:dd:0c:61:78:29:ab:1e:58:36:1b:b9:55:5d:ef:de:89:
         28:19:48:58:02:5c:a2:ad:eb:84:e3:e2:67:37:24:70:17:09:
         8a:e9:da:4b:a2:ae:93:ac:79:7d:21:26:8e:5a:7b:26:92:1b:
         1d:cb:3c:9e:f6:4e:7b:cd:97:69:a5:1b:9c:0b:47:a6:22:f2:
         fe:33:5c:09:8c:34:80:14:74:6a:06:0f:0e:86:c0:d4:62:7c:
         75:15:3b:7e:25:10:30:34:66:98:31:cb:e8:9c:4c:70:75:c1:
         89:05:95:c1:23:78:9b:60:e5:e7:05:23:59:2e:48:27:ad:65:
         5b:70:88:a9:bf:c1:a3:da:37:cd:99:c7:d7:97:4b:44:cc:ad:
         93:bb:ff:24:71:84:ba:42:02:d9:44:c3:48:6c:d6:b9:99:26:
         79:23:bb:da:7a:7a:02:e6:5d:dc:cb:20:fb:4a:6d:a0:a8:77:
         c9:f0:e9:70:9b:75:ed:f5:ed:a2:58:35:06:15:f8:6e:c8:3f:
         ff:cb:65:5f:11:13:16:78:85:3e:21:c0:6c:75:67:c4:c3:89:
         2f:0f:a0:cb:4a:c8:10:21:68:31:99:09:ab:54:a8:ff:1c:cb:
         97:4b:3d:49:0b:3a:2a:5d:fe:23:07:55:dc:e1:19:6f:04:99:
         2b:58:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org