Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/NWqH1TkuXrf1aMuC8Tyi4zxR3BI.roa
File:                     NWqH1TkuXrf1aMuC8Tyi4zxR3BI.roa (raw, json)
Hash identifier:          zmT31M8/zP0xC4W2s3RbYfgaBXLILpf1bCrgwnzESxQ=
Subject key identifier:   35:6A:87:D5:39:2E:5E:B7:F5:68:CB:82:F1:3C:A2:E3:3C:51:DC:12
Certificate issuer:       /CN=8a13ddc674c3edfc7740899915bd917b41a85028
Certificate serial:       0617E6FC
Authority key identifier: 8A:13:DD:C6:74:C3:ED:FC:77:40:89:99:15:BD:91:7B:41:A8:50:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihPdxnTD7fx3QImZFb2Re0GoUCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/NWqH1TkuXrf1aMuC8Tyi4zxR3BI.roa
Signing time:             Sat 01 Jan 2022 15:58:02 +0000
ROA not before:           Sat 01 Jan 2022 15:58:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197161
IP address blocks:        94.154.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102229756 (0x617e6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a13ddc674c3edfc7740899915bd917b41a85028
        Validity
            Not Before: Jan  1 15:58:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=356a87d5392e5eb7f568cb82f13ca2e33c51dc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:62:88:7d:19:e9:0d:fb:b3:47:01:16:de:
                    06:a7:c3:7b:30:1c:5b:e8:18:b8:b5:35:51:05:c7:
                    e9:c9:d1:ed:dc:13:8c:8c:cd:02:85:05:89:4a:6c:
                    c2:55:4b:c3:b6:86:d2:a7:45:30:00:74:68:c7:d3:
                    8e:e3:48:61:e9:67:dd:4b:c5:2b:ad:5e:ba:e4:be:
                    59:1f:c9:ff:34:16:c6:e7:bb:26:0b:db:20:c0:62:
                    02:7a:d4:ad:9d:ae:a4:e7:e8:98:a8:08:91:c6:70:
                    a9:7e:87:79:f6:17:fa:5d:d3:66:c6:0b:7d:1c:3c:
                    0e:a0:f6:b5:bd:b9:48:9f:9b:ed:71:be:d2:f7:33:
                    75:97:42:0d:06:dc:47:a4:71:77:34:0a:ff:43:68:
                    5a:38:c7:2a:f7:78:94:92:46:97:9e:54:b4:95:cb:
                    b8:30:d8:07:5c:e9:b2:4f:2f:7d:85:da:5e:61:cc:
                    ed:80:ea:a4:57:8c:f6:eb:91:76:d9:52:e8:82:14:
                    b5:57:98:fb:5a:13:99:30:29:f5:00:7a:cb:15:a7:
                    06:89:8f:a7:67:88:f4:11:54:d3:95:68:b7:78:02:
                    20:9b:9d:46:0b:32:b6:af:60:e0:11:c3:ef:a1:90:
                    7c:f4:e8:b0:6c:5c:b5:b5:ba:48:0e:56:2c:e5:84:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6A:87:D5:39:2E:5E:B7:F5:68:CB:82:F1:3C:A2:E3:3C:51:DC:12
            X509v3 Authority Key Identifier:
                keyid:8A:13:DD:C6:74:C3:ED:FC:77:40:89:99:15:BD:91:7B:41:A8:50:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihPdxnTD7fx3QImZFb2Re0GoUCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/NWqH1TkuXrf1aMuC8Tyi4zxR3BI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/ihPdxnTD7fx3QImZFb2Re0GoUCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:50:b9:93:fd:e1:30:94:df:d4:d1:20:3b:0f:f0:88:93:
         2f:24:b9:68:9d:bc:e5:bd:84:d7:e8:f8:06:f6:7c:31:a9:11:
         e5:30:d0:4c:e5:be:f3:99:7a:49:dd:b1:68:27:6d:dc:0c:08:
         2c:cf:82:ca:2a:04:98:79:f8:fc:fe:53:df:86:80:88:ca:32:
         90:83:94:52:8b:ef:0f:0e:9a:60:80:71:28:5e:d3:2d:a5:49:
         2f:b0:74:57:8d:11:e2:1f:58:7d:04:7b:ef:bd:51:63:d6:06:
         0f:96:d0:f2:94:ad:57:2b:a5:c7:71:a0:73:24:cb:fa:1c:33:
         50:d2:78:f1:ad:06:d5:79:cc:41:c9:da:b1:73:57:c4:6a:3f:
         05:4c:6a:55:39:a4:3e:98:b0:90:09:fb:fd:1d:d5:a7:e1:32:
         5c:41:06:a4:12:02:bc:fc:ff:e3:83:90:79:fd:51:6c:f5:e6:
         d3:2f:63:9e:98:c0:a3:ae:1a:b3:54:10:8d:cc:9a:06:24:e6:
         a8:0a:dd:1b:97:78:87:c9:45:a8:e0:43:7f:34:ff:c4:0a:03:
         25:9c:ed:34:fa:55:e6:c9:51:07:4f:eb:d9:62:8f:34:9a:e2:
         fc:b3:f6:4a:eb:9c:a1:ed:94:6d:fd:36:bc:f1:8b:c1:7e:a8:
         7e:ec:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org