Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/_w8ve21nI3N7PoED8kStsm_ZpNs.roa
File:                     _w8ve21nI3N7PoED8kStsm_ZpNs.roa (raw, json)
Hash identifier:          aGI5RvCf0aVdGBrYw6u6ESKtfcgD0G6M4XWNP77FfFc=
Subject key identifier:   FF:0F:2F:7B:6D:67:23:73:7B:3E:81:03:F2:44:AD:B2:6F:D9:A4:DB
Certificate issuer:       /CN=c161999ba0b281251926d189c6deaa02fa200aa6
Certificate serial:       0A6FDCD0
Authority key identifier: C1:61:99:9B:A0:B2:81:25:19:26:D1:89:C6:DE:AA:02:FA:20:0A:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWGZm6CygSUZJtGJxt6qAvogCqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/_w8ve21nI3N7PoED8kStsm_ZpNs.roa
Signing time:             Sat 01 Jan 2022 02:55:27 +0000
ROA not before:           Sat 01 Jan 2022 02:55:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49855
IP address blocks:        2001:678:3b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175103184 (0xa6fdcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c161999ba0b281251926d189c6deaa02fa200aa6
        Validity
            Not Before: Jan  1 02:55:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff0f2f7b6d6723737b3e8103f244adb26fd9a4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:11:cf:51:57:31:d5:ab:77:fc:15:15:7b:
                    e5:9d:40:f3:f4:2d:e8:6e:87:b9:ea:1b:90:16:23:
                    e0:3c:96:ee:fc:5e:a7:5d:5e:81:eb:42:4d:76:6c:
                    49:3f:e3:fa:93:b4:4c:56:e6:44:dc:99:56:dc:52:
                    d8:7d:11:5a:5e:ce:89:46:14:57:9a:24:e0:01:40:
                    90:b0:5d:e7:2a:ea:fd:b5:8f:16:7a:3e:0c:51:dc:
                    ee:8f:3c:36:58:c3:4d:d9:c7:ff:7b:34:8c:a0:41:
                    11:5b:3e:ab:c3:45:af:db:9f:11:bd:1c:b7:9f:87:
                    87:a6:32:39:03:ea:fe:29:56:54:8f:aa:9e:db:fa:
                    4d:2e:32:b0:1d:df:2c:eb:83:f6:74:44:dd:c3:b5:
                    30:de:56:87:ab:45:45:6b:7e:66:df:5a:53:62:8d:
                    03:6b:83:39:4f:97:04:76:4b:98:0b:d9:f3:e4:7a:
                    1a:96:ab:4f:5c:a9:2f:49:e8:19:82:a2:9a:ea:9c:
                    26:9c:5a:ac:2a:5d:ba:a9:0a:7e:94:6e:22:8f:14:
                    f1:01:23:39:74:82:2a:e1:6d:a3:a8:84:d4:66:80:
                    d5:a1:13:ee:f6:a9:c5:b8:20:98:b1:16:44:54:29:
                    bd:7f:e6:db:1a:07:71:c5:93:9d:48:6e:b6:6e:a6:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0F:2F:7B:6D:67:23:73:7B:3E:81:03:F2:44:AD:B2:6F:D9:A4:DB
            X509v3 Authority Key Identifier:
                keyid:C1:61:99:9B:A0:B2:81:25:19:26:D1:89:C6:DE:AA:02:FA:20:0A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWGZm6CygSUZJtGJxt6qAvogCqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/_w8ve21nI3N7PoED8kStsm_ZpNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/wWGZm6CygSUZJtGJxt6qAvogCqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:48:8b:3d:49:96:e6:85:3e:90:76:26:49:20:b0:25:f1:60:
         ea:43:1f:e7:7d:d8:87:04:4e:03:a7:a1:0f:92:ae:90:33:8f:
         fb:2e:cd:57:da:10:90:9b:0f:c2:d3:ac:94:19:84:a0:66:1b:
         91:f0:68:cc:10:76:e5:76:33:14:4e:b1:52:02:ad:86:e5:ce:
         8e:a9:2c:d3:fe:b9:1b:05:60:e1:45:4f:9f:9b:64:d0:b4:a4:
         06:83:9f:11:00:05:c6:64:5a:ca:78:24:5c:f7:a7:4a:5c:ff:
         a9:07:a0:db:db:fb:be:10:6e:fc:be:83:ec:aa:71:72:52:f7:
         51:e3:01:27:7a:1e:b7:67:af:45:3a:15:3a:72:0a:7d:fc:3b:
         cf:c4:62:f8:3e:7a:b6:29:c8:d4:b8:35:1b:c9:de:49:b8:7e:
         8c:03:f6:5f:ea:27:1b:f3:9c:de:17:89:59:d5:74:e4:4a:58:
         e5:35:9d:be:c2:da:53:c9:c1:af:ea:68:46:4f:ab:a5:4a:36:
         cf:bc:4e:03:6e:b0:00:1b:4f:7b:5f:d9:4a:4a:b7:b0:74:7d:
         65:91:96:3e:c7:be:67:df:d8:d0:42:d3:01:ec:8b:e0:cc:dc:
         e3:68:3e:9b:f6:99:ab:d4:4a:c2:d4:1c:3e:34:07:5f:2e:ff:
         0e:30:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:49 2024 by rpki-client on console-fra.rpki-client.org