Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/8PuMCimRXLicdFl0cIBkad-MGwg.roa
File:                     8PuMCimRXLicdFl0cIBkad-MGwg.roa (raw, json)
Hash identifier:          /sXrq4sqHNWlYgXGL1wmgXIbg8jItd+z1faX5EYY5bU=
Subject key identifier:   F0:FB:8C:0A:29:91:5C:B8:9C:74:59:74:70:80:64:69:DF:8C:1B:08
Certificate issuer:       /CN=85f59c1b250779146be46f7dd8d275ab2d08a2a1
Certificate serial:       63305F
Authority key identifier: 85:F5:9C:1B:25:07:79:14:6B:E4:6F:7D:D8:D2:75:AB:2D:08:A2:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfWcGyUHeRRr5G992NJ1qy0IoqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/8PuMCimRXLicdFl0cIBkad-MGwg.roa
Signing time:             Sat 01 Jan 2022 03:52:45 +0000
ROA not before:           Sat 01 Jan 2022 03:52:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6500447 (0x63305f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f59c1b250779146be46f7dd8d275ab2d08a2a1
        Validity
            Not Before: Jan  1 03:52:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0fb8c0a29915cb89c74597470806469df8c1b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:44:10:9a:77:a6:75:c6:60:32:ef:7a:3c:
                    b6:91:0e:2e:97:48:53:3f:c2:35:04:78:90:8a:f5:
                    18:62:c4:e1:71:fe:5e:2b:51:4c:d4:26:56:61:06:
                    d3:de:b3:0d:43:45:ef:75:4c:b2:de:7c:7a:52:9d:
                    6c:36:08:7b:82:11:f8:d9:1b:8d:60:50:c9:9b:65:
                    94:93:a5:1c:13:e9:ca:b3:b1:43:5d:0b:8e:1c:42:
                    c0:7a:0b:5c:e1:37:10:fa:55:86:a7:f2:4b:5f:96:
                    79:ee:73:3b:90:8f:f7:54:9f:f1:3c:f2:1b:34:db:
                    64:da:29:df:ef:de:89:c5:47:04:7b:2d:48:89:cd:
                    1c:75:52:9d:78:3a:6b:d1:f7:06:0e:52:73:2f:be:
                    5a:42:8f:75:a3:e6:f3:bd:33:84:fc:50:ac:28:cb:
                    ae:34:1f:b2:d4:52:92:64:12:17:71:eb:c2:c3:50:
                    04:16:d3:30:41:39:3e:4b:9d:ba:b5:0c:e3:9a:03:
                    0b:cc:14:e8:97:f9:b2:16:8a:07:49:32:2c:b9:e1:
                    dd:85:20:d0:5a:11:ab:db:29:a3:c7:67:6e:d7:f5:
                    21:7a:5d:a0:1f:cd:1b:13:f2:f7:d7:ca:22:b5:3d:
                    76:1e:61:ba:e7:98:0c:2a:84:51:61:5a:56:4d:0a:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:8C:0A:29:91:5C:B8:9C:74:59:74:70:80:64:69:DF:8C:1B:08
            X509v3 Authority Key Identifier:
                keyid:85:F5:9C:1B:25:07:79:14:6B:E4:6F:7D:D8:D2:75:AB:2D:08:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfWcGyUHeRRr5G992NJ1qy0IoqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/8PuMCimRXLicdFl0cIBkad-MGwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:20:21:e2:0e:6d:75:2a:4b:78:69:d5:12:a0:b5:58:85:4a:
         ff:b0:8f:01:c8:f6:1b:41:90:3b:38:5f:c6:0a:eb:05:a6:9e:
         7b:f8:d4:38:d6:b8:2e:81:8b:0c:bb:da:e5:52:e5:fc:3b:15:
         71:5e:17:3a:99:63:a1:ce:08:4a:a2:08:eb:74:50:70:20:eb:
         d5:29:d1:f6:86:2f:b2:ba:ab:ac:04:9a:29:cf:e6:f8:3a:ea:
         48:43:c6:85:b6:6d:85:d6:10:02:9a:5c:8f:a1:c4:2f:77:70:
         a7:98:98:14:16:c3:6a:c6:9b:8b:1e:c2:02:4a:66:96:bf:74:
         05:85:b8:03:ff:16:e5:b4:91:d6:96:b7:1b:08:fc:f9:99:12:
         b4:19:fb:d1:a6:29:63:24:91:c5:2c:d0:47:ae:91:7b:06:31:
         01:2f:6e:de:4e:99:7d:36:6c:17:77:6e:4b:da:8a:8f:ac:c0:
         d3:e4:ba:73:16:60:1f:64:36:10:39:6c:ce:1b:90:10:82:6b:
         67:65:85:de:b6:f5:e3:43:c9:b7:b1:f3:6a:83:82:8a:8b:39:
         76:44:8d:61:79:cf:d1:38:73:11:00:a3:65:b9:36:5e:65:94:
         d4:36:4a:c7:2b:47:b7:6a:0b:2f:4d:41:51:d7:e8:c5:98:36:
         bd:d0:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:55 2024 by rpki-client on console-ams.rpki-client.org