Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/3uTEFyaj1Dmcn0GkRhmn8Xe_JnM.roa
File:                     3uTEFyaj1Dmcn0GkRhmn8Xe_JnM.roa (raw, json)
Hash identifier:          a/Hr05gLHfIC49mpTYH+L6ZlkJ8PdzL1HuWKzS++i7k=
Subject key identifier:   DE:E4:C4:17:26:A3:D4:39:9C:9F:41:A4:46:19:A7:F1:77:BF:26:73
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       01856DCAF9E667A0431E121CC3F1F2C43325
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/3uTEFyaj1Dmcn0GkRhmn8Xe_JnM.roa
Signing time:             Sun 01 Jan 2023 14:44:56 +0000
ROA not before:           Sun 01 Jan 2023 14:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49729
IP address blocks:        84.54.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:f9:e6:67:a0:43:1e:12:1c:c3:f1:f2:c4:33:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: Jan  1 14:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dee4c41726a3d4399c9f41a44619a7f177bf2673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:28:f3:b6:80:19:21:19:c1:0e:bd:0b:f5:
                    e3:23:5f:f8:cd:a6:ed:ee:2a:3a:ed:6a:c6:e5:29:
                    1a:c6:e4:79:ad:7f:58:3a:46:ba:19:b6:db:27:36:
                    4f:30:43:14:00:82:7f:25:af:4e:58:77:d0:0b:74:
                    95:25:c9:8b:d6:e8:2b:1b:d9:18:92:4d:07:c1:e6:
                    16:26:87:91:d0:69:01:1c:81:f2:17:66:a8:4a:84:
                    dc:89:1f:dc:a8:30:f7:36:70:9e:e9:10:c4:db:e9:
                    cf:e8:43:6e:26:e8:c7:02:ff:1b:f7:df:5e:b0:54:
                    f9:d3:d9:42:3d:4d:16:0c:27:52:0d:6f:0f:c2:7a:
                    4a:1d:52:c0:a5:ab:50:c5:48:9b:bb:9d:a7:e5:48:
                    33:7a:a1:c3:10:f8:16:3e:37:1c:71:50:ff:22:65:
                    59:5b:bb:fc:9d:38:e9:64:b1:37:57:95:3a:b3:63:
                    2e:3b:ae:23:f1:12:8d:90:cf:fb:68:3e:94:98:fb:
                    59:1e:c4:92:ac:22:d2:39:54:d5:f5:9b:bf:80:c9:
                    a2:30:dd:29:9f:ff:f1:d0:1a:d1:6f:d3:d2:a3:0e:
                    43:ed:91:e9:49:05:c7:f4:da:06:61:51:63:13:22:
                    f5:3f:8c:15:32:cb:46:56:d4:a8:64:68:ea:3b:90:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:C4:17:26:A3:D4:39:9C:9F:41:A4:46:19:A7:F1:77:BF:26:73
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/3uTEFyaj1Dmcn0GkRhmn8Xe_JnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:95:35:98:6e:37:5c:5d:60:f0:21:c6:b4:f2:fa:87:b6:
         9d:62:9c:77:6f:0c:49:67:04:b0:98:5f:e7:a2:c2:34:7f:6a:
         51:c2:d4:7c:93:f0:11:6e:bf:6c:af:6c:f9:42:a2:35:18:6e:
         46:45:e2:f7:ab:a8:95:24:c6:3c:f0:5c:b6:3b:cd:60:b0:48:
         0d:32:ea:51:fa:89:23:e6:db:94:dd:1d:fa:46:77:97:89:4b:
         57:95:17:37:ab:df:bb:82:bb:df:7c:2c:17:de:25:7f:e9:48:
         26:b0:f8:c2:47:e3:0e:2a:33:fe:63:34:9b:34:75:a1:e7:e8:
         34:b2:ee:06:53:c2:79:2a:34:1b:78:51:0d:85:ae:85:69:79:
         87:fb:99:38:e2:a0:b8:64:46:ec:8b:1c:c0:b2:e8:2f:e1:47:
         42:70:e7:f2:d3:af:dc:c7:90:31:22:a4:57:5c:1d:4e:64:c6:
         43:e4:d6:3a:d7:35:9d:85:a1:ed:4d:6b:2c:c6:f3:56:9b:70:
         58:b8:8b:71:1f:e9:71:52:10:7c:a6:4b:23:8f:4c:7a:21:10:
         41:c5:b2:db:ad:68:f3:14:7c:9e:1e:6a:2f:ce:78:8f:91:74:
         8d:c2:15:65:ab:6e:34:05:b5:76:12:3a:eb:f0:8a:88:e5:3e:
         cd:53:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org