Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/VE7YQfCj15qf8vdc8y5U96tq7aw.roa
File:                     VE7YQfCj15qf8vdc8y5U96tq7aw.roa (raw, json)
Hash identifier:          djYHHd8W0tJP0NNBkXeQ916lSav8xSeeMKRzCvEzrIk=
Subject key identifier:   54:4E:D8:41:F0:A3:D7:9A:9F:F2:F7:5C:F3:2E:54:F7:AB:6A:ED:AC
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       0193B9F2483C824536749F5C2F79EBC53CD2
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/VE7YQfCj15qf8vdc8y5U96tq7aw.roa
Signing time:             Thu 12 Dec 2024 08:18:03 +0000
ROA not before:           Thu 12 Dec 2024 08:18:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3356
IP address blocks:        2a10:d504::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b9:f2:48:3c:82:45:36:74:9f:5c:2f:79:eb:c5:3c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Dec 12 08:18:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=544ed841f0a3d79a9ff2f75cf32e54f7ab6aedac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:42:a9:59:8e:47:9b:53:ca:78:d2:7c:27:
                    13:9b:2a:aa:2f:0a:27:c8:53:19:fa:20:a5:be:0b:
                    f1:fe:f9:7b:ea:c8:0e:75:ac:1d:e2:9a:53:e3:c2:
                    bf:f7:d3:2a:d9:dd:57:e7:7d:c8:77:f3:ab:c4:97:
                    eb:61:89:33:37:3f:4f:b8:34:fe:72:96:e8:30:d7:
                    2e:47:8f:05:30:27:6d:00:f0:f4:cd:4e:2d:99:23:
                    3a:24:c2:48:8d:46:74:03:b9:fb:d9:a5:86:30:0c:
                    78:ea:00:6b:50:e9:42:3c:30:1d:df:e8:f0:81:68:
                    d3:71:a3:23:58:3e:a3:2c:72:0f:71:f3:0d:7e:fc:
                    80:29:9a:63:ed:b8:46:23:72:21:20:5f:1f:a1:f4:
                    73:ea:1f:78:eb:9b:88:4a:43:68:ec:bd:83:fe:4f:
                    e0:69:0d:9d:02:28:db:18:b1:d3:ea:33:7b:3c:c9:
                    e2:ab:6f:35:fe:6d:ab:1f:63:91:86:2d:87:8e:ce:
                    67:ff:1a:0f:77:82:8e:9c:50:e4:97:3d:54:7e:b1:
                    b7:db:b4:14:32:cf:ed:a4:cf:1d:62:46:99:24:5b:
                    de:83:46:5c:a4:31:51:e7:d5:04:ae:9c:2e:a0:34:
                    e7:e4:1f:ce:17:7d:31:31:92:ff:f3:f1:c7:39:84:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:D8:41:F0:A3:D7:9A:9F:F2:F7:5C:F3:2E:54:F7:AB:6A:ED:AC
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/VE7YQfCj15qf8vdc8y5U96tq7aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:d504::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:71:56:2f:b8:26:49:3e:99:2a:d1:7b:b4:d9:a1:e7:fc:
         a8:c4:7f:c8:e5:24:bf:58:69:61:6e:b5:0e:44:ed:00:9f:29:
         2e:e4:ac:08:99:64:41:b9:1b:d5:50:4d:38:be:d3:a6:92:40:
         77:53:8c:06:53:29:55:e4:17:77:3c:1b:58:6d:f3:e8:34:55:
         bc:8d:35:09:8a:05:f5:24:98:c7:02:bc:03:68:6a:4c:5b:9f:
         f6:7c:1b:ba:43:da:0e:17:35:2e:c2:90:67:70:4e:7e:f2:53:
         5f:0b:a1:63:d3:fb:d7:b0:1a:b7:40:6f:f4:41:0f:c7:e6:1c:
         29:ca:a5:43:eb:1d:aa:e1:08:d2:48:82:1e:eb:3c:d6:0a:b7:
         d2:9b:82:95:42:e0:6f:0b:56:9b:b5:8e:92:5b:2c:e5:29:e9:
         be:46:d2:db:79:24:c9:58:44:b8:6b:c4:d1:61:07:29:92:cc:
         d8:6d:d2:16:1f:f9:ea:d2:ea:c9:64:d3:88:11:75:86:4d:f3:
         0d:70:b6:85:a2:cc:a2:2c:b8:04:be:51:05:0a:cb:3c:c3:46:
         b3:f4:c8:8e:ea:14:7b:29:b4:af:36:b9:36:85:4b:7c:a2:74:
         fc:18:44:c8:8c:12:29:de:1d:85:59:31:11:40:38:de:3f:8b:
         84:bd:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:28:20 2024 by rpki-client on console.sobornost.net