Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/SIckVd_j9j3Xx5F_8VJXg4mPHS0.roa
File:                     SIckVd_j9j3Xx5F_8VJXg4mPHS0.roa (raw, json)
Hash identifier:          yTD5aGLTPgctWh7xlFeJQE7seUCVePHmgWFj5noYpIE=
Subject key identifier:   48:87:24:55:DF:E3:F6:3D:D7:C7:91:7F:F1:52:57:83:89:8F:1D:2D
Certificate issuer:       /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial:       01856ECB94441A63082BA194DA23584E5AD1
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/SIckVd_j9j3Xx5F_8VJXg4mPHS0.roa
Signing time:             Sun 01 Jan 2023 19:25:13 +0000
ROA not before:           Sun 01 Jan 2023 19:25:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55154
IP address blocks:        146.19.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:94:44:1a:63:08:2b:a1:94:da:23:58:4e:5a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
        Validity
            Not Before: Jan  1 19:25:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48872455dfe3f63dd7c7917ff1525783898f1d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:38:3c:31:22:27:bc:10:88:02:fa:c8:af:
                    16:17:99:03:f1:84:86:53:c8:66:2c:25:b4:f4:b0:
                    f7:3a:8a:95:b0:19:4f:09:d5:5c:90:b7:d0:05:46:
                    68:78:77:ce:8c:26:7d:07:fc:df:0b:c3:2b:43:7d:
                    9d:e4:49:f3:65:43:3f:3d:b1:14:ea:1b:7f:75:10:
                    58:1e:76:be:bb:d1:d8:42:cf:b4:a2:dd:d8:f4:5c:
                    6b:b4:5b:36:87:1c:b5:c6:5b:ac:a7:ee:0d:03:cc:
                    2e:4f:f0:c6:63:77:ae:83:aa:71:87:6e:c1:df:81:
                    16:97:9a:be:b1:e4:1a:7d:03:01:7b:ca:34:e1:9b:
                    39:4a:e2:a2:34:fe:27:0a:7b:f1:cb:a5:e2:f8:3e:
                    b9:6e:8e:a0:7f:10:f8:90:84:07:d1:5c:50:0c:86:
                    5b:04:92:15:96:bc:e0:c2:ec:af:e0:d8:ef:00:f9:
                    ba:fc:28:95:1e:5c:23:b2:1b:3d:c3:65:9a:b2:87:
                    86:17:5a:6c:73:b5:02:ca:77:29:9b:da:ed:c8:f0:
                    f8:b1:97:d4:a1:51:3e:7e:27:cd:73:7b:9f:23:b0:
                    c2:21:fa:a5:5e:55:02:ab:97:04:01:6b:c0:dd:a8:
                    48:d6:8f:b2:3b:3b:4e:04:20:bd:7c:61:05:16:98:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:87:24:55:DF:E3:F6:3D:D7:C7:91:7F:F1:52:57:83:89:8F:1D:2D
            X509v3 Authority Key Identifier:
                keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/SIckVd_j9j3Xx5F_8VJXg4mPHS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:95:31:2b:d4:1c:08:35:bf:5b:08:e2:52:93:d8:10:e3:02:
         a6:07:9e:59:2d:94:f9:7e:46:e3:46:53:56:c0:4e:13:17:04:
         8f:aa:90:06:fc:a7:0a:c3:19:3c:ef:ae:9d:9e:74:af:f7:9b:
         42:6c:8a:d9:83:20:03:6c:eb:03:00:ce:74:a3:35:c2:0e:02:
         f5:31:30:bc:a2:fa:95:4f:ff:54:93:ee:b3:a2:67:d4:d3:f1:
         22:36:f1:43:db:45:30:6d:c9:58:19:3c:3f:52:55:b3:b3:37:
         ed:50:48:5a:aa:76:d4:60:d2:9b:ad:c3:1f:5c:bc:bf:97:75:
         76:1d:4d:28:da:58:94:2b:4a:dc:4d:34:d1:93:78:ea:0d:97:
         89:81:55:57:7b:0e:35:86:d5:2e:44:73:81:46:37:6f:79:49:
         bd:71:d7:f9:9b:92:97:0c:91:ae:90:5b:cf:ee:35:65:86:95:
         7d:c4:d7:63:82:7f:91:b8:8a:45:71:bb:b6:2f:ba:69:f2:82:
         59:f7:65:7c:c5:8f:eb:66:c2:9c:8a:3d:66:e9:11:09:91:e3:
         bf:97:47:8f:56:c1:3e:44:8a:d5:54:cf:40:26:6a:ba:d4:67:
         cd:72:82:0f:e2:ac:d7:83:7a:a5:fc:1c:7d:c4:46:97:b0:28:
         15:cb:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:19 2024 by rpki-client on console-fra.rpki-client.org