Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/JmpJZRpdgUDFWhMnqLWpW7ghICA.roa
File:                     JmpJZRpdgUDFWhMnqLWpW7ghICA.roa (raw, json)
Hash identifier:          ECX8pKgYx65zRZk0YAabqr4R738kG2ySALTqtJDE5W8=
Subject key identifier:   26:6A:49:65:1A:5D:81:40:C5:5A:13:27:A8:B5:A9:5B:B8:21:20:20
Certificate issuer:       /CN=eaea3e38d6c7706f306128e547b63b80120106b2
Certificate serial:       01882086B01ECAD90AC3E4FEDA6AB7C9D650
Authority key identifier: EA:EA:3E:38:D6:C7:70:6F:30:61:28:E5:47:B6:3B:80:12:01:06:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uo-ONbHcG8wYSjlR7Y7gBIBBrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/JmpJZRpdgUDFWhMnqLWpW7ghICA.roa
Signing time:             Mon 15 May 2023 17:47:57 +0000
ROA not before:           Mon 15 May 2023 17:47:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        46.253.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b0:1e:ca:d9:0a:c3:e4:fe:da:6a:b7:c9:d6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaea3e38d6c7706f306128e547b63b80120106b2
        Validity
            Not Before: May 15 17:47:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=266a49651a5d8140c55a1327a8b5a95bb8212020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:12:07:cd:3a:1f:a6:cf:89:25:cc:8e:e5:
                    53:36:9e:25:88:5b:bb:a6:5b:8f:58:a8:22:57:16:
                    af:02:94:ec:2f:8c:dc:99:d6:6a:02:04:6f:3b:25:
                    83:6e:46:a5:4c:aa:23:48:9f:1c:39:c3:5b:44:28:
                    ed:b7:2f:aa:06:c4:14:e9:41:7a:29:f8:37:80:3d:
                    f6:b5:a3:a1:5e:51:ca:be:bd:dc:0e:4f:f0:a6:34:
                    d7:28:d2:1a:b0:a7:89:32:c4:54:11:a8:31:2c:e1:
                    5f:e2:aa:af:3c:8a:19:8c:2b:48:b7:ee:6f:81:e7:
                    3b:d0:c5:12:b4:e3:2e:67:fb:64:86:b0:27:cd:10:
                    49:69:6b:b4:48:d8:9d:97:29:9e:aa:72:8e:cc:f4:
                    29:84:7f:5f:fc:3a:ca:72:a2:89:bc:f9:3f:48:dd:
                    c6:44:0e:38:62:a0:23:1c:80:5f:97:4e:cd:08:16:
                    ed:ba:e3:e2:10:59:59:d2:ca:c2:c4:70:8d:24:ea:
                    7f:40:2d:4b:84:e2:94:74:fd:3f:d5:a5:d9:a4:3e:
                    9a:92:a4:a6:1a:d1:96:8f:cd:2a:72:5b:af:d6:75:
                    47:54:c2:b0:d5:6e:b5:0e:f2:99:01:2a:dd:72:aa:
                    b6:fa:28:76:18:55:cb:a2:29:c4:97:79:ba:57:08:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6A:49:65:1A:5D:81:40:C5:5A:13:27:A8:B5:A9:5B:B8:21:20:20
            X509v3 Authority Key Identifier:
                keyid:EA:EA:3E:38:D6:C7:70:6F:30:61:28:E5:47:B6:3B:80:12:01:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uo-ONbHcG8wYSjlR7Y7gBIBBrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/JmpJZRpdgUDFWhMnqLWpW7ghICA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/6uo-ONbHcG8wYSjlR7Y7gBIBBrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:24:26:c7:1f:7a:b6:d8:62:92:34:f3:00:17:d6:4f:45:
         b9:69:d5:c1:40:65:73:a6:f9:5d:a3:5f:6d:7c:ad:30:ef:c3:
         39:05:c1:c8:67:c2:8a:8a:1e:6b:15:c9:9d:25:d4:57:2a:de:
         ca:22:e1:fc:c7:a2:a2:28:ac:2c:11:ab:21:a5:4d:47:27:53:
         b6:0b:1f:fc:da:2c:1c:54:58:86:2c:e8:82:ce:40:12:2e:aa:
         67:e5:38:bc:2e:7e:2a:8c:bb:74:c1:84:57:af:2a:5b:10:48:
         b5:68:ad:6c:43:da:5f:17:8f:de:1f:84:61:21:38:f7:d8:30:
         94:61:6f:51:46:fa:f8:57:f3:c2:21:32:77:f6:f5:6f:7a:fa:
         49:b8:2a:26:b5:d3:88:ed:5c:c0:f0:ca:c3:26:0b:ad:b9:a1:
         ef:58:23:aa:8c:de:90:e1:8e:12:fa:47:a0:77:9e:a2:6e:8f:
         5d:63:0b:40:e8:8e:ae:1b:57:fe:7b:fb:1b:c3:bd:4a:25:b8:
         a3:0c:4f:92:dc:8a:f6:d4:8f:77:8c:fc:a4:40:39:0a:07:c9:
         f2:b3:b2:cc:14:8d:41:f0:fb:6a:e6:29:f1:84:86:d4:08:99:
         d9:5f:32:55:14:ab:65:4a:61:b8:39:a7:18:d1:5a:a4:8b:de:
         38:11:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org