Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/DBdUm29eDuJxzl29mL0L2cx-VC8.roa
File:                     DBdUm29eDuJxzl29mL0L2cx-VC8.roa (raw, json)
Hash identifier:          z7247eyuxFU3iFs8oXf+1EvKgH+xaJuOG7an/xiJIEg=
Subject key identifier:   0C:17:54:9B:6F:5E:0E:E2:71:CE:5D:BD:98:BD:0B:D9:CC:7E:54:2F
Certificate issuer:       /CN=06a459abd39c969a2b794ad0224e79f2dea222cc
Certificate serial:       07B39260
Authority key identifier: 06:A4:59:AB:D3:9C:96:9A:2B:79:4A:D0:22:4E:79:F2:DE:A2:22:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqRZq9OclporeUrQIk558t6iIsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/DBdUm29eDuJxzl29mL0L2cx-VC8.roa
Signing time:             Sat 01 Jan 2022 08:56:01 +0000
ROA not before:           Sat 01 Jan 2022 08:56:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1136
IP address blocks:        193.200.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129208928 (0x7b39260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a459abd39c969a2b794ad0224e79f2dea222cc
        Validity
            Not Before: Jan  1 08:56:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c17549b6f5e0ee271ce5dbd98bd0bd9cc7e542f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:dc:f1:e0:d9:fe:08:a1:c1:91:61:a1:f8:
                    3e:d6:64:48:c1:81:dd:ab:87:29:d3:23:e0:d5:62:
                    22:57:f3:ae:c9:ae:fd:03:d2:3a:f0:be:89:00:25:
                    db:bd:8f:ac:ea:fa:a2:55:fe:05:37:5d:e8:4a:0e:
                    23:d9:10:8e:a4:bf:18:9f:e6:25:86:00:58:21:41:
                    a1:0c:d1:68:2e:ec:4e:86:26:11:36:fc:ab:74:ed:
                    30:cb:6c:60:c4:c1:77:ad:17:db:6e:ad:6c:9f:1c:
                    34:0c:b5:12:c4:0f:6c:28:b0:2f:82:94:dd:ef:5e:
                    91:95:f1:27:ac:d6:7b:32:ae:46:e2:f8:0d:36:35:
                    d3:ed:72:7f:fc:ac:86:c5:6d:42:74:ef:d8:bd:bb:
                    82:8d:c7:30:89:d2:3c:0a:d0:69:a9:3a:46:a6:5a:
                    6b:a7:70:0f:b0:79:0d:ea:89:4b:11:dc:f5:4a:f3:
                    93:65:a6:a0:66:06:db:23:60:12:dd:7e:9b:4d:81:
                    62:89:05:10:82:44:42:11:cd:c8:ba:c2:d5:65:cb:
                    08:29:eb:ed:85:87:55:74:6b:11:e0:42:ab:90:76:
                    93:77:fc:57:e1:62:9e:cc:f4:7b:9a:1e:96:71:94:
                    10:90:4c:73:32:3c:2a:f5:3f:1b:8a:c9:bf:17:e9:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:17:54:9B:6F:5E:0E:E2:71:CE:5D:BD:98:BD:0B:D9:CC:7E:54:2F
            X509v3 Authority Key Identifier:
                keyid:06:A4:59:AB:D3:9C:96:9A:2B:79:4A:D0:22:4E:79:F2:DE:A2:22:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqRZq9OclporeUrQIk558t6iIsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/DBdUm29eDuJxzl29mL0L2cx-VC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/BqRZq9OclporeUrQIk558t6iIsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:55:35:03:0f:72:85:ae:23:3d:f7:a7:7b:3f:fb:08:55:
         de:a3:d2:5c:0b:ac:5b:c5:6a:36:30:72:15:98:08:0a:22:3d:
         16:ca:03:4d:a7:71:15:f7:7c:3b:04:dc:12:8d:75:84:2a:5e:
         41:fc:58:d7:f1:6c:bd:9e:17:da:00:aa:79:a9:15:01:a3:a6:
         5b:d9:91:ad:3d:95:a1:30:47:28:f0:bd:b5:49:e6:30:31:1c:
         d8:dd:02:d2:5e:7b:38:f4:9e:65:42:c5:9b:7e:0e:bc:4c:24:
         11:d6:2e:38:23:b6:de:e3:8c:82:11:f3:44:fe:23:8a:e3:78:
         0e:80:f5:24:a6:1e:a5:c8:f4:cf:8b:2e:91:a0:71:5e:36:1a:
         21:2c:7b:2d:a3:66:c3:b2:c4:df:8f:6b:29:da:74:25:15:77:
         95:dd:5d:21:aa:43:d5:35:84:4c:75:44:19:dd:b1:89:57:4f:
         8a:2d:81:06:5c:a0:5b:74:5c:a5:a1:d5:94:d3:34:52:78:cc:
         72:c7:cf:7b:2d:44:93:72:ae:41:bf:37:e9:c1:76:85:5b:35:
         82:37:95:4b:b0:68:47:8f:3b:69:8d:b5:85:74:c0:9f:ba:6d:
         d7:a4:dc:bd:80:3f:bc:ae:a3:58:89:bd:91:b3:92:6e:96:bb:
         9e:de:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org