Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/c3q62M81VuBZ9f2IHex2-K6SXXg.roa
File:                     c3q62M81VuBZ9f2IHex2-K6SXXg.roa (raw, json)
Hash identifier:          mbSvobEh3YB8L9Z/OmIk59od8qilt7EI41m5FnD+Q8c=
Subject key identifier:   73:7A:BA:D8:CF:35:56:E0:59:F5:FD:88:1D:EC:76:F8:AE:92:5D:78
Certificate issuer:       /CN=17421fb6791e063ee51decb67b1ccf111a83b4b5
Certificate serial:       6CFC7B
Authority key identifier: 17:42:1F:B6:79:1E:06:3E:E5:1D:EC:B6:7B:1C:CF:11:1A:83:B4:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0IftnkeBj7lHey2exzPERqDtLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/c3q62M81VuBZ9f2IHex2-K6SXXg.roa
Signing time:             Sat 01 Jan 2022 03:51:58 +0000
ROA not before:           Sat 01 Jan 2022 03:51:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        146.19.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7142523 (0x6cfc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17421fb6791e063ee51decb67b1ccf111a83b4b5
        Validity
            Not Before: Jan  1 03:51:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=737abad8cf3556e059f5fd881dec76f8ae925d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:53:df:ac:95:92:c0:b3:10:eb:9a:d9:93:
                    cb:5e:94:d0:07:55:f9:64:f1:50:e2:b2:3a:46:e0:
                    44:47:25:39:07:00:de:1f:15:c5:40:8a:ec:76:62:
                    ac:5b:da:14:b0:c8:ba:d5:cd:31:f2:4e:98:8b:01:
                    af:c9:4c:9f:ea:2b:ef:42:e1:25:1a:a6:43:7d:53:
                    7a:4f:2b:e9:22:2a:58:f5:65:25:32:e1:cd:a0:ba:
                    2f:e6:6d:58:1a:ff:91:c1:db:55:47:8c:cf:e3:63:
                    84:f3:e4:a5:a2:61:ee:5b:a1:34:43:66:5f:75:f1:
                    d3:78:88:af:31:06:06:b1:91:42:af:c8:d0:12:8e:
                    58:cf:c9:66:d3:9f:c2:f2:61:94:09:f4:ae:b0:1d:
                    cb:6b:af:fe:8d:52:f7:70:6c:3d:78:2b:8f:c9:7e:
                    06:5e:d3:c2:8d:29:72:40:04:50:26:ce:57:ec:d5:
                    b1:4c:b6:5c:02:3f:8d:62:49:3a:ef:45:4a:28:e0:
                    f6:99:4d:23:af:08:c3:02:d3:55:62:90:02:1b:1c:
                    75:82:fa:95:6a:fb:fe:fb:26:b3:60:4f:af:39:ce:
                    64:8f:be:8b:d7:4c:63:11:8a:f1:41:92:ea:9a:f7:
                    07:06:67:5c:01:0f:44:69:4b:91:9f:aa:5b:e5:35:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7A:BA:D8:CF:35:56:E0:59:F5:FD:88:1D:EC:76:F8:AE:92:5D:78
            X509v3 Authority Key Identifier:
                keyid:17:42:1F:B6:79:1E:06:3E:E5:1D:EC:B6:7B:1C:CF:11:1A:83:B4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0IftnkeBj7lHey2exzPERqDtLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/c3q62M81VuBZ9f2IHex2-K6SXXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/F0IftnkeBj7lHey2exzPERqDtLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:23:10:7d:cc:ac:fd:95:7a:ff:e7:bd:0f:b1:1d:c5:00:
         8f:fc:04:0b:81:de:87:d7:b0:4c:9e:35:3c:58:c7:fe:cf:d0:
         a2:0a:95:02:70:81:6e:a5:60:95:76:0e:75:83:6f:55:cc:d4:
         7f:99:74:a1:16:02:f8:7f:be:8a:29:dc:fa:8e:6d:16:3c:45:
         80:e3:a6:17:e1:3d:64:0b:8d:b3:39:20:03:a2:b4:d2:73:42:
         69:61:db:40:11:c1:1d:f2:e7:14:1c:9b:47:fd:ec:ba:48:d5:
         43:68:10:c1:7b:3c:7b:d9:96:7f:13:f0:5f:d2:35:38:42:fe:
         61:07:21:ed:65:3e:55:db:03:6e:a0:c6:00:12:64:c9:fe:0d:
         5e:91:07:dc:30:10:26:22:54:93:61:4a:c3:4c:d3:97:10:ec:
         91:ef:80:0c:de:e6:50:27:08:00:e5:67:5e:2d:1a:a8:1a:2c:
         5a:60:78:a6:95:ae:f8:2a:b6:e1:13:96:38:d6:36:dc:f9:f6:
         9d:ed:6e:f5:7b:62:0e:7c:ca:7a:df:06:9c:8c:23:5e:f2:11:
         c1:04:66:d2:60:5d:c8:8f:32:15:3f:3c:84:70:27:2c:30:d7:
         ad:d2:7b:a8:2f:93:d5:6d:72:c6:24:6f:ba:7c:08:28:6f:d4:
         04:a4:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:20 2024 by rpki-client on console-fra.rpki-client.org