Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/VV6Q6Av4r7Oy_Z1E11gfuu8_b8k.roa
File:                     VV6Q6Av4r7Oy_Z1E11gfuu8_b8k.roa (raw, json)
Hash identifier:          4L+ytwcXgmVLNrCfRCSjh0P4TcQcuYIj+Gb4FjlBif4=
Subject key identifier:   55:5E:90:E8:0B:F8:AF:B3:B2:FD:9D:44:D7:58:1F:BA:EF:3F:6F:C9
Certificate issuer:       /CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
Certificate serial:       01FB3D9E
Authority key identifier: CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/VV6Q6Av4r7Oy_Z1E11gfuu8_b8k.roa
Signing time:             Thu 09 Jun 2022 07:04:02 +0000
ROA not before:           Thu 09 Jun 2022 07:04:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33911
IP address blocks:        193.202.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33242526 (0x1fb3d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
        Validity
            Not Before: Jun  9 07:04:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=555e90e80bf8afb3b2fd9d44d7581fbaef3f6fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:b8:ed:e5:f0:20:ce:16:cc:b8:69:2f:f7:
                    39:3f:62:4e:f6:1c:90:de:ba:84:20:14:28:c2:1e:
                    c5:c2:2d:ba:64:f0:4d:0f:be:2d:a8:b0:57:a8:c7:
                    aa:ff:b3:64:ff:5a:4a:11:14:00:46:83:62:bb:a1:
                    cf:94:f4:ce:93:1e:0f:64:94:2a:8f:21:ae:9d:66:
                    e1:71:bf:c7:15:9d:02:c3:e2:1a:54:45:a3:d3:7c:
                    1d:f6:48:15:b0:38:1d:ea:bd:7c:30:f7:6a:05:76:
                    7f:ec:d4:ce:da:8c:7a:31:41:b0:51:fd:b0:6d:9f:
                    f2:0e:40:66:c5:67:e8:f8:a4:11:91:f1:c2:33:65:
                    ad:f2:3a:14:61:af:cc:46:5a:4b:27:61:f0:17:db:
                    6e:cc:4a:ad:d3:63:ea:08:d0:31:a8:de:f1:75:f2:
                    01:f1:40:d1:76:4f:d0:51:30:50:0f:86:6e:d2:e1:
                    1b:a5:84:08:1e:4d:d6:65:ed:f9:88:38:0b:96:bc:
                    d0:e5:47:79:eb:50:36:43:70:16:85:69:84:10:da:
                    f6:bc:99:f0:b9:8f:f2:f4:fe:3f:48:e2:e5:71:5d:
                    79:8d:82:6b:7d:f5:6c:9f:9d:22:aa:fc:84:cb:5d:
                    cd:18:0a:1c:c4:4d:fe:66:95:bf:5a:42:ce:be:16:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:90:E8:0B:F8:AF:B3:B2:FD:9D:44:D7:58:1F:BA:EF:3F:6F:C9
            X509v3 Authority Key Identifier:
                keyid:CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/VV6Q6Av4r7Oy_Z1E11gfuu8_b8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:90:45:f0:29:a4:6d:5f:9f:ad:5d:eb:5a:c2:80:72:70:7c:
         00:81:c7:ca:b4:80:c6:8a:02:62:2d:2f:b3:2d:96:d4:14:68:
         d5:1e:84:42:17:f2:d2:4f:1c:be:57:28:2c:31:b5:83:29:4e:
         db:5b:96:84:ac:fb:6d:cb:3e:20:8e:4b:3f:c1:b2:b8:16:d6:
         41:b6:91:ed:13:ce:b2:81:b8:6e:cc:66:23:32:bb:f2:7a:31:
         32:43:8d:da:8b:00:7a:66:6c:e1:cb:65:eb:e4:e4:a0:0b:1a:
         1d:15:88:a8:48:d2:d5:9e:b7:b5:bd:28:65:fc:5f:d6:df:83:
         63:a5:65:38:52:10:76:ac:2c:71:d2:79:c7:d2:ae:65:2f:94:
         5b:52:94:e3:29:e4:ce:5a:ee:ba:ef:21:84:c1:c9:c4:d6:ea:
         2a:b7:56:56:9e:44:5e:6a:4d:a7:4b:2f:52:bc:62:08:e8:7a:
         7a:81:05:a9:14:f4:17:6c:56:3f:0c:9d:5e:cb:29:d6:0d:fc:
         c7:a2:38:70:7c:cb:2f:36:50:6f:73:f2:02:bf:74:49:e1:ce:
         cf:f6:ee:e5:1a:de:1b:bb:45:05:86:f1:78:02:50:8f:e0:77:
         cb:6d:ec:50:75:ca:ef:2e:8d:94:7f:ab:e8:05:f7:3e:9d:22:
         83:03:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:24 2024 by rpki-client on console-ams.rpki-client.org