Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/r_ju55fwibqbYg4t3YF8X9GyG5U.roa
File:                     r_ju55fwibqbYg4t3YF8X9GyG5U.roa (raw, json)
Hash identifier:          hdmVLuHKwZBi1p8B80MI22xHRbkedbimWqCVZRN65cE=
Subject key identifier:   AF:F8:EE:E7:97:F0:89:BA:9B:62:0E:2D:DD:81:7C:5F:D1:B2:1B:95
Certificate issuer:       /CN=65e2e5ba6bca74c4894471c0e021d4e278f1af90
Certificate serial:       012E6AB6
Authority key identifier: 65:E2:E5:BA:6B:CA:74:C4:89:44:71:C0:E0:21:D4:E2:78:F1:AF:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeLlumvKdMSJRHHA4CHU4njxr5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/r_ju55fwibqbYg4t3YF8X9GyG5U.roa
Signing time:             Sat 01 Jan 2022 11:59:29 +0000
ROA not before:           Sat 01 Jan 2022 11:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212913
IP address blocks:        146.255.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19819190 (0x12e6ab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e2e5ba6bca74c4894471c0e021d4e278f1af90
        Validity
            Not Before: Jan  1 11:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aff8eee797f089ba9b620e2ddd817c5fd1b21b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:4f:f1:49:1a:be:bc:4d:f1:1f:08:f3:07:
                    79:6b:31:05:2b:ef:4f:83:bc:1b:8e:2c:88:d5:7d:
                    a0:ca:69:16:34:b3:c5:fa:ee:e7:f3:01:cd:5e:38:
                    94:ae:bf:1f:84:53:a6:ab:27:3a:ee:18:7e:82:47:
                    ee:d4:a4:07:10:ee:09:4f:56:dc:50:8d:97:de:a6:
                    06:a6:25:1c:ab:65:1c:21:08:f3:7b:f8:89:ce:55:
                    26:c0:d0:6b:fd:60:7a:64:47:46:6c:32:60:12:20:
                    62:98:74:66:c1:0d:d1:c8:a0:55:aa:49:53:a1:53:
                    18:35:2f:6b:37:c1:4c:6e:11:5f:a3:e3:a9:09:0a:
                    77:77:d2:66:dc:a5:84:df:3e:e0:bb:6d:32:a9:7c:
                    cd:f1:7c:81:95:dd:5e:b4:d4:87:ad:3c:6b:c2:1f:
                    0f:67:4b:f4:2b:b3:ec:8b:74:a4:ad:bb:07:c9:75:
                    50:17:d9:50:02:81:4d:f6:e0:88:0a:51:da:40:4f:
                    18:97:c3:12:39:26:47:da:da:09:6b:fc:95:c8:20:
                    cd:be:21:c9:09:1b:60:79:80:e2:b9:3f:7e:5c:52:
                    87:b1:39:28:10:db:5e:f8:8f:70:2d:aa:bb:93:c3:
                    3a:71:f8:c1:e1:34:e5:77:a9:c6:e6:2d:9e:71:76:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:EE:E7:97:F0:89:BA:9B:62:0E:2D:DD:81:7C:5F:D1:B2:1B:95
            X509v3 Authority Key Identifier:
                keyid:65:E2:E5:BA:6B:CA:74:C4:89:44:71:C0:E0:21:D4:E2:78:F1:AF:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeLlumvKdMSJRHHA4CHU4njxr5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/r_ju55fwibqbYg4t3YF8X9GyG5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/ZeLlumvKdMSJRHHA4CHU4njxr5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:6e:4f:7a:72:00:b2:e4:b6:22:85:80:c2:84:f1:88:f4:3a:
         67:fe:a3:b5:4f:ad:ac:35:f6:2f:0c:31:5d:73:66:5e:bf:61:
         c6:cd:0f:a9:f2:18:7e:e6:a3:65:2c:f8:61:a3:ae:1e:38:5e:
         55:34:62:d7:59:0b:53:ee:01:7e:b7:e7:b2:82:70:b9:db:f3:
         c5:9f:5a:31:7d:41:e3:c8:06:64:e3:b0:00:30:3c:9d:b5:47:
         7a:55:50:a0:a8:55:4e:a0:fe:39:42:a4:1d:39:97:82:2e:0b:
         cd:bb:02:da:80:94:68:19:8a:7b:77:84:6d:d1:9a:d6:1d:2a:
         0a:d2:b9:66:66:18:e6:48:35:7c:c6:cd:67:5a:be:70:f3:d8:
         16:60:29:ad:f0:c7:c6:e2:52:ff:3d:ad:89:fc:f1:c3:6c:7a:
         84:8a:fb:45:52:e4:8e:7e:b9:05:15:70:57:dd:d0:ce:5e:7a:
         d3:fb:2c:c8:ba:d0:1f:67:14:7c:1c:b4:8f:04:3e:17:a4:e1:
         fa:d9:38:02:c4:e1:96:5d:b0:19:3b:a1:4b:51:ce:c1:01:35:
         9b:7f:f5:a3:93:eb:40:c7:f9:8b:26:05:7a:ee:1e:ae:59:6c:
         43:c5:0a:93:a5:c9:6f:29:47:88:3f:62:2d:5b:68:85:5d:37:
         a9:90:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:30 2024 by rpki-client on console-fra.rpki-client.org