Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/_y6665M14T7KzwLdMYYTdHSaOWk.roa
File:                     _y6665M14T7KzwLdMYYTdHSaOWk.roa (raw, json)
Hash identifier:          6f78NFk32wDrncTJI+LnmAfb7Td7zbCQe51iyJwbW5Y=
Subject key identifier:   FF:2E:BA:EB:93:35:E1:3E:CA:CF:02:DD:31:86:13:74:74:9A:39:69
Certificate issuer:       /CN=7089ddca091c0ae3402eb2531f77fe63a0262763
Certificate serial:       DB4BE7
Authority key identifier: 70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/_y6665M14T7KzwLdMYYTdHSaOWk.roa
Signing time:             Sat 01 Jan 2022 12:06:46 +0000
ROA not before:           Sat 01 Jan 2022 12:06:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213005
IP address blocks:        188.93.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14371815 (0xdb4be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7089ddca091c0ae3402eb2531f77fe63a0262763
        Validity
            Not Before: Jan  1 12:06:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff2ebaeb9335e13ecacf02dd31861374749a3969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:b2:25:54:79:a9:2f:82:ef:b3:19:18:80:
                    d7:4d:e4:f7:79:a4:8e:ea:78:09:b5:5a:3b:9a:98:
                    bd:62:e7:7d:5b:b8:17:78:7c:ed:5c:7f:bf:33:90:
                    b1:8f:e5:35:67:b8:33:04:90:22:cf:80:89:87:b6:
                    39:33:8c:c2:31:72:35:0e:85:3f:9a:d0:fc:82:53:
                    bc:3a:14:3a:52:32:81:aa:0d:02:bc:28:ce:77:42:
                    ca:f5:0d:ab:04:09:ce:c9:be:06:af:64:29:1e:2c:
                    ea:1b:96:c3:36:5f:98:7c:ac:5b:dd:41:34:0e:ce:
                    03:7c:bd:cb:a1:b9:75:a6:c7:85:a4:bb:ec:c1:60:
                    ca:01:75:22:29:7a:e8:a7:eb:2a:36:8f:e5:c9:30:
                    83:a0:a7:cb:2f:ef:73:ba:cd:fd:3d:7e:1a:9e:3f:
                    07:27:40:38:02:df:63:45:15:cb:8c:f3:17:a0:e0:
                    e4:75:be:dd:0e:17:1f:5a:42:c5:18:9a:51:c8:6d:
                    c2:7e:e1:20:90:04:15:4d:f7:15:76:f1:a7:c6:88:
                    8e:e4:f8:46:74:ef:d0:84:d5:11:94:0b:e0:a4:23:
                    31:a1:ad:16:f5:9b:d7:e4:36:7c:2f:47:7d:d0:1e:
                    19:f1:38:80:06:ad:1d:97:17:9a:71:5e:04:51:da:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2E:BA:EB:93:35:E1:3E:CA:CF:02:DD:31:86:13:74:74:9A:39:69
            X509v3 Authority Key Identifier:
                keyid:70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/_y6665M14T7KzwLdMYYTdHSaOWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:33:1c:23:93:c8:04:0b:36:04:76:b7:9a:dd:02:6c:f0:a6:
         c2:a7:64:65:b0:9d:4a:64:69:0d:c3:c2:14:e2:de:71:09:17:
         4b:90:e4:d8:2a:e1:c8:84:45:9c:cf:ec:4f:29:54:29:49:24:
         a5:8d:6e:bf:aa:df:93:65:32:a5:59:59:06:bc:53:e8:36:3a:
         f6:48:ac:9e:f6:c7:07:d2:dd:ed:e4:6c:15:a7:fc:65:f7:a1:
         4d:4c:3a:da:7f:6f:74:01:e2:8c:f7:e3:f6:ff:ac:65:ac:45:
         bb:ab:01:2f:f6:b5:68:8d:c1:2a:fc:0c:1a:ee:07:9b:95:a3:
         56:0e:a9:a6:ec:27:69:ae:20:0e:e6:f9:72:6b:a7:a7:bf:16:
         be:9e:a1:7e:ed:d1:b2:5f:c7:9b:49:cc:3f:b0:e9:df:27:6b:
         7c:7a:08:9c:86:e0:47:79:6c:4f:d9:e4:7a:7a:28:bf:81:8c:
         29:9d:5b:25:51:24:ff:4a:6f:ed:f9:b7:9f:63:d1:88:b7:5a:
         75:b9:14:d9:9f:74:3e:43:91:f9:da:c6:c5:2c:a8:7f:b4:21:
         dd:5e:af:91:0a:2a:fb:8d:42:b4:80:10:ef:1a:ca:ea:69:9c:
         49:e9:0f:b3:02:cb:88:2c:45:45:cb:c1:c8:4a:e9:6d:76:3e:
         0e:a3:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:06 2024 by rpki-client on console-fra.rpki-client.org