Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/FFD8etityCzYoEEAvaY4q93hlPM.roa
File:                     FFD8etityCzYoEEAvaY4q93hlPM.roa (raw, json)
Hash identifier:          1TQhPkc0ZK5HBZ1OVHJFIGgePB2/99fSjaaSieIjmLw=
Subject key identifier:   14:50:FC:7A:D8:AD:C8:2C:D8:A0:41:00:BD:A6:38:AB:DD:E1:94:F3
Certificate issuer:       /CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Certificate serial:       0100C5D1
Authority key identifier: 7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/FFD8etityCzYoEEAvaY4q93hlPM.roa
Signing time:             Sat 01 Jan 2022 06:03:59 +0000
ROA not before:           Sat 01 Jan 2022 06:03:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209365
IP address blocks:        46.31.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16827857 (0x100c5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
        Validity
            Not Before: Jan  1 06:03:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1450fc7ad8adc82cd8a04100bda638abdde194f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:b6:3f:c1:f7:62:b5:cb:5c:b0:fd:26:fd:
                    fd:20:5d:d2:96:4a:af:4a:53:01:81:29:18:fc:46:
                    4c:66:9d:d2:ae:cb:f9:14:96:ef:b0:f4:8b:31:c4:
                    91:e3:b0:ce:29:be:ff:a4:5a:72:b2:c7:87:e0:1f:
                    2d:88:5a:59:7d:76:1f:cc:39:71:02:ed:24:d4:d6:
                    a2:2b:53:af:01:2e:07:8c:d4:21:8e:4c:0d:8b:d6:
                    f4:e5:8b:a7:b6:8f:f6:a8:c3:ce:74:7c:2a:43:7a:
                    4e:4c:80:c6:99:82:39:60:a7:c0:d1:13:57:41:a8:
                    18:2e:ff:3d:8b:6e:33:a1:68:c0:56:1d:b5:78:5b:
                    50:ce:21:9f:72:9c:e0:78:7e:c9:42:40:61:ac:f1:
                    33:2e:00:c7:53:74:74:aa:52:11:48:4f:be:d0:1a:
                    30:65:3e:ce:3e:26:7c:8e:14:94:0c:8c:8a:5f:85:
                    44:87:54:4c:8f:94:3e:0e:0e:eb:9f:d7:49:46:92:
                    59:cf:92:27:4b:e1:3f:af:f8:a0:59:b9:94:a5:ff:
                    76:dd:36:42:86:35:50:f2:a5:4c:8d:12:63:58:8a:
                    2a:d5:7b:1a:3c:36:8c:1f:94:b5:e3:1d:0a:8a:54:
                    ea:bb:20:70:68:c4:0f:4a:30:14:5a:f5:dd:f6:ca:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:50:FC:7A:D8:AD:C8:2C:D8:A0:41:00:BD:A6:38:AB:DD:E1:94:F3
            X509v3 Authority Key Identifier:
                keyid:7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/FFD8etityCzYoEEAvaY4q93hlPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/fc-34Mu414ES0effkmHSDr7lvuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:0e:f1:b8:5f:0f:59:a9:7b:d7:91:80:94:a6:a6:cb:9f:
         7e:e2:30:73:ea:52:cf:5d:d1:ae:08:47:11:d2:9b:ed:ff:35:
         b8:45:7d:1d:f7:45:ac:ec:2d:d9:ac:8f:eb:5f:16:7f:09:0e:
         06:88:36:52:14:50:3e:eb:50:c1:ef:91:66:f0:bb:93:d3:98:
         84:f9:3b:22:5e:26:7d:81:5f:57:bb:96:bb:e4:9f:6b:5a:e7:
         a8:ae:99:e8:4e:cf:4b:e0:af:ca:28:6e:cf:7a:0e:a3:f1:4e:
         da:92:1a:8c:f3:60:21:78:ba:09:a9:1e:f9:22:f2:28:e5:0b:
         7e:a4:e0:5c:4e:e2:32:21:71:02:7a:91:b7:ca:6e:53:93:15:
         a6:1a:21:04:4e:ab:f4:76:7a:ba:97:c6:c0:f8:ad:a7:b2:82:
         d3:f0:4d:e1:39:10:9e:a5:1a:6d:90:a0:32:07:e2:ed:d0:0a:
         a0:4b:14:ea:11:40:e9:44:a6:09:14:0e:c3:2f:e8:be:10:5f:
         7c:dc:04:1b:36:30:d6:3b:f3:c5:ad:3e:ff:1f:03:34:c6:5d:
         29:a6:29:bd:2f:c0:00:4e:92:66:19:7f:be:46:4c:b2:18:87:
         41:e8:b2:74:aa:a7:8c:b9:ce:b9:9d:d3:4e:70:b0:73:74:6b:
         b0:a1:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:18 2024 by rpki-client on console-ams.rpki-client.org