Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/HbaSsS7uJ2oer48O-_vop51liGw.roa
File:                     HbaSsS7uJ2oer48O-_vop51liGw.roa (raw, json)
Hash identifier:          UMjvGBLXCQsGGvCXFhi3q24U1pBgMz2LAkvNvLKZUD8=
Subject key identifier:   1D:B6:92:B1:2E:EE:27:6A:1E:AF:8F:0E:FB:FB:E8:A7:9D:65:88:6C
Certificate issuer:       /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial:       83A40A
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/HbaSsS7uJ2oer48O-_vop51liGw.roa
Signing time:             Sat 01 Jan 2022 01:50:34 +0000
ROA not before:           Sat 01 Jan 2022 01:50:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.19.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8627210 (0x83a40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
        Validity
            Not Before: Jan  1 01:50:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1db692b12eee276a1eaf8f0efbfbe8a79d65886c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:c2:98:6d:b0:d2:03:91:cc:00:75:56:7c:
                    cf:1f:49:1a:5a:ae:36:12:a2:1d:9b:59:e6:20:b3:
                    bf:39:63:b4:e1:3f:a0:56:b4:05:2c:0d:07:6b:07:
                    c7:99:7e:0b:d0:6c:0a:5a:2f:ce:9f:3a:b5:1f:09:
                    ee:00:b5:12:f1:9b:7f:87:fa:fb:b7:05:21:aa:be:
                    78:74:7a:a9:74:11:62:60:dc:c4:f9:41:59:17:67:
                    b3:53:83:83:3e:ab:99:dd:fa:99:41:f3:92:e8:3f:
                    d9:34:a7:e3:29:0d:de:a1:36:e5:31:53:18:98:51:
                    1b:82:e7:96:ac:56:af:6b:2c:a7:ef:cb:b1:c8:4e:
                    a2:b5:48:19:6b:21:71:c4:f6:e4:54:a1:c4:8f:e8:
                    ed:57:22:ec:46:6e:a7:27:fb:66:92:88:d1:7d:d2:
                    88:db:b1:c4:6e:b9:7a:0f:fb:6e:c5:dd:ee:c5:ef:
                    75:94:9d:d8:f9:d1:b1:fb:8e:cb:0e:88:e7:0e:70:
                    f5:d7:54:da:d3:46:4f:f9:e6:5b:ae:b3:7a:38:4f:
                    9c:3e:31:af:6e:c6:5b:24:37:7c:03:b9:99:ef:cd:
                    2b:be:b1:ad:88:52:d7:10:a6:aa:d7:bb:c3:34:3d:
                    34:ed:5b:d8:97:fb:88:0f:e5:61:92:e8:32:5c:31:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B6:92:B1:2E:EE:27:6A:1E:AF:8F:0E:FB:FB:E8:A7:9D:65:88:6C
            X509v3 Authority Key Identifier:
                keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/HbaSsS7uJ2oer48O-_vop51liGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:41:7d:64:f6:7d:10:74:33:8a:bd:09:a1:26:65:29:a2:
         7b:d4:41:19:c5:18:c2:36:83:8b:71:10:d4:e9:64:fb:41:5e:
         a6:78:e1:b9:dd:1b:cd:fa:7d:14:76:04:a6:6a:18:4e:e4:4d:
         ad:bb:ce:39:54:db:62:e5:84:16:d4:00:04:54:10:1f:ea:63:
         47:71:6c:f0:18:92:ad:1c:7d:dd:08:66:3a:a8:b0:16:0b:b9:
         6c:f2:c4:8f:f0:8b:84:0b:19:26:dc:90:fb:71:41:25:0e:81:
         50:f7:68:b3:53:df:8a:b0:27:f4:e2:a8:ca:ee:0d:8e:5b:50:
         d9:f4:7e:31:34:64:65:9b:ed:af:34:db:af:f7:cd:cb:bb:9a:
         62:d6:39:e5:07:f7:c8:cd:ad:b4:a8:e7:c6:0b:00:05:97:ce:
         4f:69:cb:64:e9:78:19:c2:39:35:90:d3:99:f7:3f:15:ca:cf:
         c7:14:82:52:9f:92:91:f3:74:7c:67:c1:4a:57:75:d1:56:c3:
         7d:33:d6:7b:dc:df:7b:fd:f5:65:ac:b7:b3:68:1a:99:b9:d9:
         de:5a:2d:dc:08:ad:00:08:ed:4e:1d:b0:57:53:30:61:19:ba:
         86:5f:5c:51:78:a6:a4:f3:e5:57:ed:24:5e:e4:8e:22:2d:90:
         3b:a5:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:51 2024 by rpki-client on console-ams.rpki-client.org