Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/8ne6_wxfK2ZuvSAJurvr9ldOufs.roa
File:                     8ne6_wxfK2ZuvSAJurvr9ldOufs.roa (raw, json)
Hash identifier:          bfrKW5Nkdsw2Ck76LCcrpeMXtmn3pG+RJi/BhDIUihE=
Subject key identifier:   F2:77:BA:FF:0C:5F:2B:66:6E:BD:20:09:BA:BB:EB:F6:57:4E:B9:FB
Certificate issuer:       /CN=e947bc8d3c6fa77c5da1465790ac71257a4d4326
Certificate serial:       F75048
Authority key identifier: E9:47:BC:8D:3C:6F:A7:7C:5D:A1:46:57:90:AC:71:25:7A:4D:43:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ue8jTxvp3xdoUZXkKxxJXpNQyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/8ne6_wxfK2ZuvSAJurvr9ldOufs.roa
Signing time:             Thu 20 Jan 2022 12:44:34 +0000
ROA not before:           Thu 20 Jan 2022 12:44:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6768
IP address blocks:        37.140.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16207944 (0xf75048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e947bc8d3c6fa77c5da1465790ac71257a4d4326
        Validity
            Not Before: Jan 20 12:44:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f277baff0c5f2b666ebd2009babbebf6574eb9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:2b:48:e0:e1:83:6a:86:e1:a4:45:98:b1:
                    3d:aa:33:c1:55:ec:6f:39:15:37:d5:5c:f4:e1:07:
                    84:cc:0c:1f:4f:da:ea:f5:d8:23:ca:ed:70:62:9f:
                    fa:f6:ab:77:a7:0d:31:08:27:db:ab:ff:dd:41:e6:
                    5c:94:66:8e:81:85:c8:b9:82:b0:6e:2b:7f:82:22:
                    e4:5d:67:9e:00:55:41:7a:94:47:56:16:8d:cc:31:
                    7d:c2:4a:a8:ae:a5:a0:26:fa:f7:65:9e:a4:c8:1f:
                    fe:2a:8c:49:bd:b4:f0:4d:3d:00:40:cf:79:f6:45:
                    6f:be:bb:41:05:7f:dd:76:fa:45:e1:68:96:22:82:
                    0d:18:b9:7d:db:b1:8b:31:b2:7e:5f:f2:22:4c:f2:
                    85:e6:8f:b3:49:1e:a3:bf:0b:c4:01:b8:aa:4f:a3:
                    a4:aa:83:dd:62:a6:75:0e:3a:13:bd:9a:76:c5:8e:
                    1d:02:65:6f:b2:ae:94:d4:79:6c:fb:eb:8f:cc:3b:
                    ad:99:fc:51:b8:a8:53:1b:1e:f3:05:cc:e9:e8:cf:
                    2c:4b:02:ab:1a:ea:2d:f8:eb:8d:9f:56:08:bc:7e:
                    80:7e:f9:e7:78:dc:ed:57:96:5c:41:ad:6c:ed:ef:
                    d4:b8:76:a7:bf:6d:a8:bb:ee:fa:e3:72:25:ae:21:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:BA:FF:0C:5F:2B:66:6E:BD:20:09:BA:BB:EB:F6:57:4E:B9:FB
            X509v3 Authority Key Identifier:
                keyid:E9:47:BC:8D:3C:6F:A7:7C:5D:A1:46:57:90:AC:71:25:7A:4D:43:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ue8jTxvp3xdoUZXkKxxJXpNQyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/8ne6_wxfK2ZuvSAJurvr9ldOufs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/6Ue8jTxvp3xdoUZXkKxxJXpNQyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:8b:8d:73:82:34:b3:d6:18:7f:b0:70:05:fb:23:9a:f3:
         5e:d4:bd:ad:af:e5:9e:a0:86:8d:96:51:e0:96:71:9f:4c:3d:
         7f:6f:af:94:1d:fe:f8:ef:9a:90:8b:84:c2:9b:a4:13:64:dd:
         d5:93:9e:75:bf:c9:6f:e8:20:e1:4b:cc:0e:95:16:78:88:60:
         83:fe:3c:c7:29:30:89:ad:3e:6d:64:24:e2:59:18:05:69:bc:
         48:e9:75:01:a5:9a:33:0a:bd:10:b6:b1:ac:ed:1f:8c:c0:06:
         ee:3f:11:70:85:3c:78:85:9c:f2:cc:e3:76:d1:45:83:6e:bf:
         98:81:03:d9:59:f7:2f:26:61:b6:40:7d:e0:31:3c:d1:d6:ac:
         13:41:9b:1f:e3:18:68:6d:a6:33:22:01:92:06:dd:91:8b:5e:
         84:27:52:15:c3:d3:89:dc:71:30:42:83:2f:08:b8:1c:09:fe:
         78:a4:48:f3:7a:d9:59:c0:5b:ca:6b:b0:1b:32:5b:b8:76:b3:
         8e:1b:83:0d:81:a6:ad:fc:fc:22:02:8e:13:3d:ef:08:c7:3f:
         92:f0:e1:e3:6f:52:18:43:52:fd:1c:f6:c5:6b:8d:71:93:53:
         6f:d8:f0:74:d0:ab:63:11:04:53:f5:90:6c:57:99:72:83:5d:
         a3:ff:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:50 2024 by rpki-client on console-ams.rpki-client.org