Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/Cy-nF-j7uBayUZd0b6oT3YCJvJM.roa
File:                     Cy-nF-j7uBayUZd0b6oT3YCJvJM.roa (raw, json)
Hash identifier:          QIQUkBJ2weRONeBMfu41xjPQN/6J+5x7QPtzCA/frfw=
Subject key identifier:   0B:2F:A7:17:E8:FB:B8:16:B2:51:97:74:6F:AA:13:DD:80:89:BC:93
Certificate issuer:       /CN=6184d30ab1083aa2e1c7faee086e70416d283b6b
Certificate serial:       D3436D
Authority key identifier: 61:84:D3:0A:B1:08:3A:A2:E1:C7:FA:EE:08:6E:70:41:6D:28:3B:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYTTCrEIOqLhx_ruCG5wQW0oO2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/Cy-nF-j7uBayUZd0b6oT3YCJvJM.roa
Signing time:             Sat 01 Jan 2022 12:58:28 +0000
ROA not before:           Sat 01 Jan 2022 12:58:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213005
IP address blocks:        46.253.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13845357 (0xd3436d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6184d30ab1083aa2e1c7faee086e70416d283b6b
        Validity
            Not Before: Jan  1 12:58:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b2fa717e8fbb816b25197746faa13dd8089bc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:2b:99:3a:0f:47:fa:52:c8:b8:f1:73:01:
                    71:9a:30:bf:21:3a:96:ca:7b:12:4d:2c:7a:69:36:
                    ce:bd:65:1c:56:41:a3:61:9d:22:42:6a:e4:2a:03:
                    e6:98:b7:7a:cc:18:a1:22:2e:19:05:1c:1f:ca:f4:
                    01:21:79:5d:b1:97:5d:df:95:96:3b:71:41:28:48:
                    8a:c5:00:f6:f7:76:e0:85:4c:b6:31:c3:a5:cc:a3:
                    74:6a:e5:7e:ec:28:66:f0:78:d1:49:3b:0b:61:86:
                    2c:46:2e:72:6a:d1:6c:94:8d:a8:96:a9:75:dd:76:
                    5b:ae:c2:f6:fc:3c:e9:37:46:4a:99:69:bc:6a:5c:
                    bd:79:64:54:05:4d:c8:b8:5d:0c:cb:02:27:47:c2:
                    31:54:06:60:9e:5c:15:09:f6:95:69:65:6b:4b:56:
                    18:e2:e8:ec:40:6f:44:c2:be:86:4d:e8:14:8e:c2:
                    cb:c8:9c:27:2c:8b:9a:e3:53:5c:41:38:b3:3a:e6:
                    97:3a:7c:74:f9:cc:39:83:06:95:42:d0:ec:05:7b:
                    07:d3:a1:00:2f:b0:a5:55:4b:49:05:6f:49:dd:c9:
                    0f:d2:ea:76:47:eb:75:01:7d:8f:65:4a:ba:b7:89:
                    ef:03:5b:22:a2:59:1f:89:ed:7e:fb:92:22:cd:06:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:A7:17:E8:FB:B8:16:B2:51:97:74:6F:AA:13:DD:80:89:BC:93
            X509v3 Authority Key Identifier:
                keyid:61:84:D3:0A:B1:08:3A:A2:E1:C7:FA:EE:08:6E:70:41:6D:28:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYTTCrEIOqLhx_ruCG5wQW0oO2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/Cy-nF-j7uBayUZd0b6oT3YCJvJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/YYTTCrEIOqLhx_ruCG5wQW0oO2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:a3:b8:9e:51:7e:0c:c4:67:ed:d4:50:79:b5:82:63:08:
         9b:92:63:70:2b:a7:d9:b2:21:a7:9d:c9:7a:d4:8b:21:8d:b3:
         23:e1:1c:95:e8:d1:dd:1e:c9:26:d6:95:e1:a7:9e:b1:42:3f:
         d7:88:52:aa:95:1d:74:7a:6f:04:70:a5:a6:72:aa:b4:35:1e:
         d4:ba:25:14:49:79:2a:19:9b:30:d6:13:47:8e:6a:54:ed:d0:
         22:a5:57:25:70:58:ed:df:b4:9f:6f:51:ac:dc:0c:db:a4:18:
         42:50:bb:8f:73:b6:55:45:78:9f:65:a9:09:c9:65:bc:ea:27:
         5e:8c:07:28:9c:ec:09:32:24:43:b2:9e:bd:5b:62:b4:41:31:
         eb:8a:6d:21:4b:3e:e6:90:d6:42:93:0a:a4:48:62:2c:99:5a:
         24:db:26:c8:3d:7d:7e:db:32:ac:52:77:68:09:2f:54:1b:83:
         f8:ff:cd:3e:6d:c5:1f:00:2c:06:1c:f7:ce:c4:92:2e:17:32:
         1d:05:5a:b0:22:71:7d:e2:59:d2:34:27:9c:b2:10:51:40:ec:
         bc:34:82:e6:62:b8:1a:63:34:79:77:e6:a4:4a:c9:66:d9:5f:
         31:63:29:1a:42:23:1c:23:99:09:07:28:a3:02:a8:98:0e:54:
         80:32:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org