Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS6145.roa
File:                     AS6145.roa (raw, json)
Hash identifier:          RhQRDQvHmiTOCqNTTgBR3YWokxIg8XuD2H0y6voANZI=
Subject key identifier:   E6:B5:FC:BC:00:21:46:AC:E5:BD:0C:D0:32:F6:4D:13:55:62:12:C3
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       618A169B0D850A47463FA7207D605FFA024774EF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS6145.roa
Signing time:             Sun 01 Jan 2023 23:59:15 +0000
ROA not before:           Sun 01 Jan 2023 23:54:15 +0000
ROA not after:            Sun 31 Dec 2023 23:59:15 +0000
asID:                     6145
IP address blocks:        2a06:a005:1500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8a:16:9b:0d:85:0a:47:46:3f:a7:20:7d:60:5f:fa:02:47:74:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:15 2023 GMT
            Not After : Dec 31 23:59:15 2023 GMT
        Subject: CN=E6B5FCBC002146ACE5BD0CD032F64D13556212C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:f0:25:4b:bd:d8:ce:12:0c:91:b2:24:2b:
                    d2:fe:65:e5:39:c0:d8:5c:8b:08:e7:04:c7:7e:d6:
                    7b:08:11:78:15:87:b0:f8:96:0a:fc:cc:1d:9f:1e:
                    3d:04:0d:20:45:af:b9:33:2b:20:bb:80:97:40:78:
                    03:ba:ce:ec:66:3a:37:59:2d:1a:d8:ec:b2:2f:f5:
                    c0:fc:3f:56:90:de:83:47:07:f3:44:99:99:90:50:
                    27:b9:4a:99:22:5b:ea:57:49:1e:76:8d:5e:ba:08:
                    7e:db:d4:5d:c6:b1:03:64:3f:82:4a:2c:61:70:ef:
                    4c:bc:a1:bb:ec:5e:25:b4:da:e8:a5:47:1b:65:e6:
                    b4:25:b3:88:30:87:e0:b1:37:c9:d7:ac:9b:d6:e9:
                    6c:52:80:a6:76:96:77:ae:ed:41:67:e6:e6:6d:0b:
                    2b:58:3a:13:a2:78:fe:3e:bf:ed:b9:60:6a:70:b0:
                    c3:9a:90:40:52:ae:27:71:87:98:3c:bb:b6:e7:dc:
                    c0:8d:5e:dc:cb:dd:c6:aa:c0:e2:6d:6a:dd:5d:88:
                    4c:1f:fa:28:d6:cc:45:e4:71:79:cd:2e:62:e0:4b:
                    88:61:c5:3c:e8:0b:b3:6c:a5:21:c4:68:3b:56:20:
                    09:91:fe:96:a1:03:88:95:4f:ca:fe:2f:29:25:85:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:FC:BC:00:21:46:AC:E5:BD:0C:D0:32:F6:4D:13:55:62:12:C3
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS6145.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:94:4b:3c:d8:ed:82:8c:7b:f9:7c:fc:0f:98:ab:8e:41:
         7a:61:bf:f9:8e:9f:37:2f:26:6e:1c:75:a1:e0:9c:dc:88:4e:
         58:10:e2:3c:7a:50:b8:44:51:b9:8d:c6:65:9c:69:bf:b2:9d:
         86:a3:02:27:06:a0:40:ef:2b:2b:60:ef:d0:4b:2b:44:25:db:
         8f:46:f8:55:84:d7:89:be:bf:95:23:14:7f:eb:e4:84:06:4d:
         71:bc:5d:0d:4c:0b:bf:82:a5:d5:c1:72:c1:82:4e:1d:81:3f:
         45:17:14:b2:6a:3a:93:55:21:01:62:f8:18:33:27:54:07:d7:
         28:0f:2d:43:5e:97:39:30:f2:8b:e8:d4:3c:3b:c9:92:8f:0f:
         36:a2:bc:b4:cd:7f:29:27:39:cf:07:27:16:47:d2:be:6f:88:
         c7:0d:0d:91:0a:ef:1b:68:5e:9e:25:7e:24:4a:0f:b5:d2:1a:
         54:be:3d:44:dd:dd:ea:97:2f:61:10:43:02:81:74:6e:d6:33:
         27:1b:41:bf:00:55:11:c1:50:b0:04:eb:f9:f6:02:cb:63:73:
         3d:30:1d:3f:18:bb:5d:c0:4a:2b:56:68:8a:cd:9c:f5:a3:51:
         d6:6e:d2:84:8d:f2:3a:30:41:bb:d6:a7:9b:dc:c6:55:bc:fd:
         9a:fa:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org