Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/zAbIC3NbGlnJQpWeCaFAylnMQsA.roa
File:                     zAbIC3NbGlnJQpWeCaFAylnMQsA.roa (raw, json)
Hash identifier:          E5kRrKWLcN4WNYDy7THHwu5QaZ4tdmfOsOnIX2OeLoY=
Subject key identifier:   CC:06:C8:0B:73:5B:1A:59:C9:42:95:9E:09:A1:40:CA:59:CC:42:C0
Certificate issuer:       /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial:       0183130E8B00A84227D99D66E0898AE3617C
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/zAbIC3NbGlnJQpWeCaFAylnMQsA.roa
Signing time:             Tue 06 Sep 2022 13:47:43 +0000
ROA not before:           Tue 06 Sep 2022 13:47:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:ec80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:13:0e:8b:00:a8:42:27:d9:9d:66:e0:89:8a:e3:61:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
        Validity
            Not Before: Sep  6 13:47:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc06c80b735b1a59c942959e09a140ca59cc42c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:38:01:80:cd:e8:06:98:3e:93:16:d9:7a:
                    ae:9a:72:f4:93:09:e6:e1:45:2d:6a:0f:e1:5a:d2:
                    98:5f:a2:eb:d2:4a:71:f7:20:39:8d:3b:3a:93:d7:
                    20:df:42:6e:1f:37:25:34:cb:13:32:98:f6:fe:65:
                    d7:04:87:a8:7f:25:90:a2:ed:43:cc:2a:cf:26:22:
                    b6:aa:a4:ae:a1:60:e7:7f:c3:59:df:c6:c4:9a:ab:
                    a7:7d:00:da:63:5e:85:ee:fc:ab:c7:3e:df:a1:de:
                    e6:d2:6e:8f:26:4e:17:82:4e:72:d3:74:3c:50:db:
                    be:4c:02:b1:da:23:68:ac:fa:96:ea:67:0d:6a:c8:
                    f7:01:00:a1:b3:4e:9e:6d:47:87:85:9c:af:06:35:
                    8f:4f:c6:34:4e:dd:f9:49:89:55:e0:02:bc:5e:80:
                    89:de:a2:7c:9b:1f:87:7a:72:8a:9a:c5:09:c7:a0:
                    90:d7:f4:fe:0e:93:f2:b0:32:36:3a:1b:bb:c3:31:
                    8c:b1:75:f2:6f:5c:e3:3d:b9:85:bc:59:a7:d3:49:
                    98:22:5b:9c:00:60:b1:4b:2c:56:de:7b:f9:25:d8:
                    9a:12:d2:fe:14:f8:37:2a:0e:44:94:09:70:91:fd:
                    a8:5c:8c:68:45:3c:22:6a:b9:ff:73:89:ab:49:0c:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:C8:0B:73:5B:1A:59:C9:42:95:9E:09:A1:40:CA:59:CC:42:C0
            X509v3 Authority Key Identifier:
                keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/zAbIC3NbGlnJQpWeCaFAylnMQsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:ec80::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:06:3d:89:3d:49:50:b0:ea:85:c1:e4:2e:f0:c3:3a:19:6a:
         68:cb:8f:46:1d:1e:8f:e8:5b:90:7c:ea:32:f4:68:e0:60:7c:
         b2:5b:11:13:d8:bc:3f:b8:66:ce:cc:77:8d:65:c2:74:95:a5:
         87:95:ac:43:8a:fc:f8:8d:ab:81:18:92:6e:e5:3a:91:da:73:
         0c:5b:49:03:b7:40:ed:eb:62:44:4a:b4:aa:ef:46:35:03:b1:
         0d:9d:53:0f:60:53:be:ec:77:a2:49:3a:0c:4d:32:7a:7e:fb:
         0b:30:28:3e:cf:1f:ee:c4:03:17:c5:09:b0:d7:0b:a3:be:c9:
         5d:c3:39:b2:ee:0e:0b:11:b4:71:4b:7a:17:4f:77:52:dc:ba:
         f4:6e:91:af:de:f6:86:72:df:7f:28:1d:bc:69:52:48:5f:f7:
         f0:5b:eb:25:8b:e3:ea:8f:83:03:e8:a8:f0:b7:72:4d:c8:d1:
         d5:7d:17:54:98:39:e8:8f:00:80:e1:86:19:8d:31:13:8c:b5:
         5c:e2:e7:1c:02:84:5a:f1:a3:3b:16:9b:19:37:db:e0:17:dd:
         15:4d:44:15:4d:d5:50:e2:84:5e:56:d7:35:66:cb:9c:82:80:
         88:e6:dc:0c:00:a3:c8:ec:7a:5b:69:e0:6e:0b:d7:4f:37:6d:
         35:5c:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:31 2024 by rpki-client on console-ams.rpki-client.org