Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/5YSofuxzpxQbIq96SPolmQxeDPk.roa
File:                     5YSofuxzpxQbIq96SPolmQxeDPk.roa (raw, json)
Hash identifier:          T2sLVp/MSRN3+QdMOQlVJFE1wDsgZlzojv8rlKRcwtE=
Subject key identifier:   E5:84:A8:7E:EC:73:A7:14:1B:22:AF:7A:48:FA:25:99:0C:5E:0C:F9
Certificate issuer:       /CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Certificate serial:       012FE0
Authority key identifier: AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/5YSofuxzpxQbIq96SPolmQxeDPk.roa
Signing time:             Sun 06 Mar 2022 07:58:40 +0000
ROA not before:           Sun 06 Mar 2022 07:58:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201106
IP address blocks:        146.19.223.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77792 (0x12fe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
        Validity
            Not Before: Mar  6 07:58:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e584a87eec73a7141b22af7a48fa25990c5e0cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:54:86:e5:f8:67:b1:6f:6c:c0:74:60:49:eb:
                    ea:f9:10:2d:dd:eb:fb:88:f6:48:ba:33:79:2c:86:
                    0e:74:65:bc:83:54:00:75:73:bc:cc:7a:94:12:d8:
                    b9:9f:ed:4f:4d:52:34:e0:f0:01:98:e0:33:47:a5:
                    ae:73:01:ba:42:87:1a:88:69:eb:c4:6b:50:ad:1e:
                    83:e9:a4:42:98:15:ab:03:cb:13:d8:d9:da:ef:47:
                    0d:7a:15:08:ac:66:d3:60:f3:c0:44:d1:73:9c:52:
                    74:96:07:e6:12:0f:cd:76:70:60:ce:82:bf:5b:56:
                    da:f4:54:6d:79:b1:6b:e0:2f:f7:53:7d:e2:b1:b6:
                    f9:34:13:33:9d:ea:6f:a7:01:b2:c1:59:31:0e:d2:
                    ed:42:de:0e:c0:c4:77:79:23:de:57:43:dc:bf:a1:
                    78:68:31:d2:2b:2f:02:b8:b7:a2:11:23:d5:e6:d1:
                    5a:47:50:7a:a2:f4:ee:0d:41:a3:49:1d:d3:80:fa:
                    59:a3:5c:16:87:74:4f:e5:e3:df:c1:d5:8f:3b:9d:
                    21:b8:8f:27:d1:b4:26:a4:bf:42:b9:cf:d7:42:eb:
                    5b:64:fe:b4:85:2f:82:ce:b1:57:3c:09:5e:c8:02:
                    a1:a2:ce:61:11:a4:d0:e0:f2:70:be:fc:77:2c:cc:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:84:A8:7E:EC:73:A7:14:1B:22:AF:7A:48:FA:25:99:0C:5E:0C:F9
            X509v3 Authority Key Identifier:
                keyid:AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/5YSofuxzpxQbIq96SPolmQxeDPk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:08:f5:ee:a8:e2:9f:f7:e2:8e:1c:c5:b0:2a:08:a8:61:
         d6:82:9c:93:16:ab:69:60:2a:db:2d:78:dc:c7:56:f6:5a:74:
         d2:59:ed:79:d0:49:3a:f6:1b:a3:04:3c:4f:7f:cd:16:3d:45:
         70:30:5e:b9:92:fb:28:fa:0e:15:f1:e1:47:47:f4:ee:a8:3c:
         50:4b:a4:33:3f:1f:58:58:74:26:73:f6:69:56:76:34:20:5a:
         4d:f3:34:b9:09:1b:b9:1d:57:65:d8:2a:4f:6d:87:04:f2:a5:
         a4:b7:90:6f:80:9c:80:df:b7:59:c0:56:71:5a:51:53:ff:01:
         06:e7:30:d5:09:1d:2c:dc:51:62:86:72:e6:d0:32:d1:fd:e9:
         c1:da:7e:37:33:9f:f3:ba:e7:64:1f:85:48:ca:53:44:cd:55:
         6b:c0:1b:b6:85:8b:ae:1c:0e:ef:21:59:e4:ef:56:7b:86:64:
         41:eb:4a:ea:85:d6:3e:43:f0:eb:14:40:30:c8:31:f0:4e:7a:
         5e:2f:92:0c:65:17:f1:0b:e1:79:57:18:f7:cb:fe:58:0c:fb:
         1d:c6:c4:ce:31:13:df:09:ce:8b:e1:28:17:92:b7:c9:76:76:
         52:ae:74:dd:10:30:da:d2:2a:51:24:0e:23:26:fc:92:c2:7b:
         e6:fa:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:48 2024 by rpki-client on console-ams.rpki-client.org