Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/4eDMwBxTvfyulYHLGl4nP0VBD9M.roa
File:                     4eDMwBxTvfyulYHLGl4nP0VBD9M.roa (raw, json)
Hash identifier:          /DSU/U17Hm/JFI5MByKnWIZebt5MiiHfHM2i1QGmXtU=
Subject key identifier:   E1:E0:CC:C0:1C:53:BD:FC:AE:95:81:CB:1A:5E:27:3F:45:41:0F:D3
Certificate issuer:       /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial:       015B9ADE
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/4eDMwBxTvfyulYHLGl4nP0VBD9M.roa
Signing time:             Sat 01 Jan 2022 03:57:30 +0000
ROA not before:           Sat 01 Jan 2022 03:57:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        46.31.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22780638 (0x15b9ade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
        Validity
            Not Before: Jan  1 03:57:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1e0ccc01c53bdfcae9581cb1a5e273f45410fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:6f:94:bc:75:83:c6:17:dc:5b:a3:59:1d:
                    4a:a7:eb:d2:b9:78:6f:d1:42:87:73:20:87:72:6d:
                    44:1f:c7:2b:28:d7:83:8e:f1:03:d6:4c:1c:99:09:
                    b2:7b:ae:6d:cc:9f:39:53:98:3f:82:99:b9:0a:fa:
                    af:fd:24:aa:5e:f4:a4:2d:e4:7d:f0:81:62:bd:e6:
                    1c:02:d4:19:f3:b5:63:fd:57:16:de:97:d7:8e:b1:
                    75:70:be:e1:5a:f0:02:4a:69:9d:e5:1e:2d:f3:7d:
                    f4:ee:11:93:56:0b:ff:3c:93:15:c3:9f:0a:cf:84:
                    e2:ae:d1:00:cc:ae:5c:9b:c1:f4:6b:2a:06:82:a6:
                    31:ca:2b:33:27:14:77:25:06:c0:34:e0:45:c9:36:
                    1b:1c:5f:22:d2:74:db:3c:ed:56:a7:9a:dd:5e:12:
                    c1:58:de:3a:b0:c7:6d:8a:50:11:94:25:82:14:8e:
                    37:53:28:9e:bb:3c:7b:9b:b6:c5:3c:6d:36:e5:c6:
                    18:6f:b7:87:e0:d0:34:17:1a:91:da:ca:66:68:1f:
                    4a:8a:11:d1:4f:ab:5c:4c:67:ac:4c:20:d3:7a:60:
                    2d:73:f0:39:40:e9:6c:af:65:46:6b:3d:46:92:15:
                    28:80:86:07:35:93:1a:bc:7e:0b:04:b0:f9:e0:7a:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:CC:C0:1C:53:BD:FC:AE:95:81:CB:1A:5E:27:3F:45:41:0F:D3
            X509v3 Authority Key Identifier:
                keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/4eDMwBxTvfyulYHLGl4nP0VBD9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:99:2c:71:2f:46:f0:11:28:22:be:df:8f:08:14:91:ff:
         8c:57:f4:f3:35:9c:13:30:15:ee:e7:1c:02:93:1d:25:56:2d:
         8d:ed:2d:32:85:eb:77:21:1b:6e:fb:a0:37:86:01:82:71:27:
         90:30:a1:a4:e6:b9:19:f6:64:76:99:9d:9f:e0:82:e4:86:68:
         93:39:ed:4b:da:ee:df:3b:39:3d:ab:89:46:1a:e0:c0:c8:67:
         7c:61:65:26:eb:33:ec:fb:98:52:78:87:1f:04:a7:a0:1c:57:
         62:b8:1b:39:8e:04:8b:90:7b:44:cc:64:91:b6:85:88:fe:ac:
         14:2a:9f:d1:ea:e7:3e:80:6f:a1:44:88:c9:47:ed:ed:2d:1b:
         9b:6e:28:06:99:61:0b:59:b3:8d:b7:7d:13:5c:66:cf:a8:d0:
         27:d3:f1:ae:60:bf:a8:ed:05:89:e1:c5:95:b1:66:e2:f3:bc:
         0e:38:a6:0b:a0:21:d8:27:db:9c:ce:a6:7f:1e:e2:67:db:1a:
         b9:07:e1:fd:a4:23:9e:09:9a:1d:0b:02:1d:eb:1a:ac:73:6d:
         e9:f8:6e:0f:e2:b8:8c:0e:6e:5c:38:67:c9:8e:9b:3d:21:2a:
         30:ac:58:c8:0d:f6:34:0c:d5:03:75:ee:d5:0b:9e:64:1e:69:
         d0:94:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org