Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EJuuT0UAufS2s6-FcHiKqzR-V9A.roa
File:                     EJuuT0UAufS2s6-FcHiKqzR-V9A.roa (raw, json)
Hash identifier:          dC1lU9Ma2F/NBaXHM6ijeM3QXyRL/2a1Qn+gEakvQg8=
Subject key identifier:   10:9B:AE:4F:45:00:B9:F4:B6:B3:AF:85:70:78:8A:AB:34:7E:57:D0
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04D9E8AE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EJuuT0UAufS2s6-FcHiKqzR-V9A.roa
Signing time:             Thu 26 May 2022 10:45:16 +0000
ROA not before:           Thu 26 May 2022 10:45:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        141.11.44.0/22 maxlen: 24
                          141.11.40.0/22 maxlen: 24
                          141.11.39.0/24 maxlen: 24
                          141.11.42.0/24 maxlen: 24
                          141.11.41.0/24 maxlen: 24
                          141.11.45.0/24 maxlen: 24
                          141.11.47.0/24 maxlen: 24
                          141.11.46.0/24 maxlen: 24
                          141.11.2.0/24 maxlen: 24
                          141.11.1.0/24 maxlen: 24
                          141.11.0.0/24 maxlen: 24
                          141.11.10.0/23 maxlen: 24
                          141.11.17.0/24 maxlen: 24
                          141.11.22.0/24 maxlen: 24
                          141.11.21.0/24 maxlen: 24
                          141.11.18.0/24 maxlen: 24
                          141.11.25.0/24 maxlen: 24
                          141.11.31.0/24 maxlen: 24
                          141.11.28.0/24 maxlen: 24
                          141.11.37.0/24 maxlen: 24
                          141.11.33.0/24 maxlen: 24
                          141.11.35.0/24 maxlen: 24
                          141.11.32.0/24 maxlen: 24
                          141.11.160.0/24 maxlen: 24
                          141.11.176.0/24 maxlen: 24
                          141.11.179.0/24 maxlen: 24
                          141.11.182.0/23 maxlen: 24
                          141.11.192.0/19 maxlen: 24
                          141.11.92.0/22 maxlen: 24
                          141.11.128.0/19 maxlen: 24
                          141.11.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81389742 (0x4d9e8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 26 10:45:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=109bae4f4500b9f4b6b3af8570788aab347e57d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:38:41:7d:1c:0d:67:cb:c5:4d:4e:c6:17:
                    7e:97:44:a0:e9:5d:0f:56:b9:1a:bd:2c:4e:0e:9f:
                    c7:a3:1b:e8:b6:2c:b5:fa:2f:c4:c5:bd:34:9c:a1:
                    fb:7c:fc:ac:b2:87:64:35:7e:b9:b3:b5:7b:3e:aa:
                    00:f6:96:c4:2f:aa:66:c4:ff:3b:52:5d:e5:12:7a:
                    6f:f0:fb:06:a8:f7:4f:df:77:08:71:0c:65:74:df:
                    0b:93:aa:4f:4b:f5:09:45:0e:48:14:77:d6:12:75:
                    e5:47:8d:12:ab:03:39:dc:59:bf:99:36:a8:5c:d4:
                    13:c3:3e:d7:38:fe:97:7a:f7:22:8e:cf:c1:2f:be:
                    be:f3:98:16:2c:fc:b6:dd:e4:40:1e:15:b5:9f:24:
                    3a:06:57:d2:8b:3c:33:f8:79:58:8a:c8:f7:6d:43:
                    7f:16:be:36:42:f3:83:ac:65:4a:5d:56:e8:17:9e:
                    be:74:4e:88:63:da:74:b0:2b:52:ad:62:d0:8f:95:
                    f0:df:1e:86:42:52:2c:e9:05:7a:74:4c:5c:64:90:
                    67:db:c7:d0:eb:1c:14:47:3b:54:90:20:fe:9e:40:
                    fc:b7:0f:80:64:66:65:d0:9e:af:e0:26:62:3e:ef:
                    72:ba:27:54:5e:c7:ea:84:b1:1b:d2:92:c9:39:7a:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:AE:4F:45:00:B9:F4:B6:B3:AF:85:70:78:8A:AB:34:7E:57:D0
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EJuuT0UAufS2s6-FcHiKqzR-V9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.0.0-141.11.2.255
                  141.11.10.0/23
                  141.11.17.0-141.11.18.255
                  141.11.21.0-141.11.22.255
                  141.11.25.0/24
                  141.11.28.0/24
                  141.11.31.0-141.11.33.255
                  141.11.35.0/24
                  141.11.37.0/24
                  141.11.39.0-141.11.47.255
                  141.11.92.0/22
                  141.11.128.0-141.11.160.255
                  141.11.176.0/24
                  141.11.179.0/24
                  141.11.182.0/23
                  141.11.192.0/19
                  141.11.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:cc:ae:76:7d:fb:9e:bf:88:26:2e:5d:ff:4a:36:87:21:
         a1:09:81:b6:87:17:17:9d:3b:fc:12:da:28:26:f8:18:09:94:
         15:f5:82:b7:99:ea:e6:bb:79:b1:51:6d:6f:8f:6b:10:c1:cb:
         55:a6:83:b2:29:75:00:9a:19:b9:e2:be:d8:fc:dd:18:91:c1:
         f1:ab:45:79:a0:e2:6f:e6:48:8c:4c:09:97:d7:27:a9:c5:a1:
         b9:09:5f:84:db:05:4b:44:6c:23:ed:ac:23:22:37:14:05:9e:
         9a:ec:0b:d8:56:0f:25:94:b1:cf:06:5a:ba:58:a7:59:81:df:
         b1:70:6c:e7:6f:ba:cd:1d:73:67:34:7a:3c:6a:f8:18:37:75:
         ee:4a:91:39:f4:5c:a1:e4:c4:ea:f8:6b:c2:49:cd:0b:2e:e2:
         6c:50:34:c8:54:2d:14:dc:38:3f:81:9f:7e:39:56:d9:ee:e5:
         f6:0f:d3:13:b1:89:4a:a3:61:fc:94:58:e4:ab:b8:93:f0:6d:
         cd:b9:7f:4a:42:d1:3c:76:ae:2e:f4:d9:ef:f4:f1:6c:7b:18:
         7d:2c:15:1e:5d:e8:f0:b8:d5:2e:95:0a:74:6c:08:ac:57:cd:
         c4:3e:91:54:ea:0d:36:c0:1e:e1:64:b6:ad:14:58:fe:36:4d:
         4f:26:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net