Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/tddVfwpOQRZ5mEkgmO5aYyzBAB4.roa
File:                     tddVfwpOQRZ5mEkgmO5aYyzBAB4.roa (raw, json)
Hash identifier:          kizI2x8Nto7mfiUbkK3Na8KHp0LeOKfCd4aVkqCgSh8=
Subject key identifier:   B5:D7:55:7F:0A:4E:41:16:79:98:49:20:98:EE:5A:63:2C:C1:00:1E
Certificate issuer:       /CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
Certificate serial:       8BAD22
Authority key identifier: E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/tddVfwpOQRZ5mEkgmO5aYyzBAB4.roa
Signing time:             Mon 04 Apr 2022 13:40:24 +0000
ROA not before:           Mon 04 Apr 2022 13:40:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210546
IP address blocks:        89.107.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9153826 (0x8bad22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
        Validity
            Not Before: Apr  4 13:40:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5d7557f0a4e41167998492098ee5a632cc1001e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:5e:54:06:ad:82:67:41:4f:cb:f8:e3:a9:
                    cb:bd:35:e1:e2:66:91:d3:2b:7c:44:54:e9:b8:a4:
                    db:fa:e0:30:e6:52:5e:f4:c1:7a:ca:16:32:de:3c:
                    e6:31:5b:3e:bf:27:22:11:d5:21:d2:23:dc:af:c6:
                    29:b9:41:bc:12:a8:28:e3:ee:51:22:9e:6e:b3:9c:
                    cf:4f:2e:3e:10:27:af:ef:9e:24:17:99:ef:f2:67:
                    3e:7c:e9:3e:12:bb:33:e7:5f:dd:11:a2:f4:b0:17:
                    d4:55:6c:c6:99:11:99:ff:3c:8f:d2:8e:54:25:fc:
                    54:dc:b4:ff:36:40:29:3c:c7:a0:8f:b1:b0:68:09:
                    ca:62:f0:49:98:f1:86:f4:c3:00:62:85:ec:a7:f2:
                    08:0b:ae:2f:22:d0:89:56:ed:00:eb:de:0b:92:69:
                    4b:8f:90:5c:49:f1:f3:62:cd:4c:67:25:7a:08:82:
                    e8:31:11:b3:5b:2f:c8:5f:34:da:2b:7a:36:df:68:
                    58:ca:45:43:c6:11:d7:b1:b3:79:48:fd:ab:c6:0a:
                    28:b3:a5:51:ab:a4:b0:22:c5:24:a3:e4:d4:a7:7b:
                    3f:da:de:55:7e:f8:5f:3c:5a:a4:a2:8d:68:c6:47:
                    b5:9b:e8:6f:ed:cf:1b:67:94:da:d3:47:02:7c:9e:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:55:7F:0A:4E:41:16:79:98:49:20:98:EE:5A:63:2C:C1:00:1E
            X509v3 Authority Key Identifier:
                keyid:E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/tddVfwpOQRZ5mEkgmO5aYyzBAB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/5qf_FglTMsUgG8qdVMFuGEeoLyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:40:86:be:05:c6:4f:b7:3c:a6:fd:ef:5c:79:be:bc:56:b2:
         f6:94:f3:d0:25:5f:5f:7e:0f:99:f4:b5:dc:de:91:3a:cf:28:
         61:b5:c4:97:8a:cd:d9:b2:b8:b6:f2:95:35:bc:32:38:36:ee:
         cf:de:6a:06:eb:ab:9c:f8:2c:33:0e:c6:24:90:b3:b5:a8:1f:
         ca:e3:60:b4:14:46:2c:f4:32:1b:0f:fb:f6:f4:b8:b0:03:9f:
         52:0b:68:fd:92:41:1d:7c:66:25:8c:9c:cb:70:52:12:fe:a5:
         50:91:ab:cf:75:75:41:d7:ab:54:c4:54:43:79:bc:4b:7d:07:
         70:5f:68:69:66:2f:a9:9a:31:02:fe:6f:c6:5d:96:70:3f:06:
         a5:82:30:c3:63:d6:75:1e:c8:ce:42:46:34:fd:92:97:70:3b:
         9c:c2:a8:31:2b:69:b7:ff:31:b0:57:22:1a:dc:fa:9c:ae:ef:
         35:1b:aa:0d:57:83:5e:e2:02:a1:45:69:5b:34:1d:6b:3e:74:
         8b:70:8b:8e:42:b6:7f:f4:d5:d3:a2:34:84:50:ff:6f:34:ee:
         e5:5f:49:7a:0b:ca:97:d6:02:97:6d:7b:68:b1:97:d2:fd:0f:
         e7:f3:d2:34:f0:25:bc:b9:90:d0:80:d2:c6:02:b8:23:ff:0a:
         7c:b9:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:43 2024 by rpki-client on console-fra.rpki-client.org