Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa
File:                     eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa (raw, json)
Hash identifier:          IDo55aXvLZpD9iczwXRWfsCjEyRcy4SyVvilIzYp19A=
Subject key identifier:   79:E2:07:EC:91:9E:64:16:91:FB:75:48:79:27:49:AF:19:66:72:F0
Certificate issuer:       /CN=8e26abbc575f2ef648946156290842e5eb8711da
Certificate serial:       0649C173
Authority key identifier: 8E:26:AB:BC:57:5F:2E:F6:48:94:61:56:29:08:42:E5:EB:87:11:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jiarvFdfLvZIlGFWKQhC5euHEdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa
Signing time:             Sat 01 Jan 2022 16:06:10 +0000
ROA not before:           Sat 01 Jan 2022 16:06:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200851
IP address blocks:        185.93.244.0/22 maxlen: 24
                          2a04:23c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105496947 (0x649c173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e26abbc575f2ef648946156290842e5eb8711da
        Validity
            Not Before: Jan  1 16:06:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79e207ec919e641691fb7548792749af196672f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:08:88:4f:1d:ac:7f:5a:d9:3b:d6:60:55:
                    a4:9e:7e:9f:13:93:c7:87:cd:8c:8a:93:0c:19:15:
                    34:36:2a:66:a8:0b:cf:52:13:d8:2c:81:81:6b:92:
                    c0:39:d9:78:30:81:df:e4:d4:72:0f:4d:f9:da:19:
                    41:75:8d:a2:09:da:73:d6:4c:a7:c4:bd:1b:6b:c1:
                    c9:04:0b:b6:66:7d:b0:2f:5c:a5:ca:c5:ba:c2:a6:
                    6a:c4:17:19:01:59:28:17:a8:c0:c0:b5:e1:b6:0d:
                    aa:9e:51:93:92:b3:20:9a:bb:05:53:a6:b0:43:d2:
                    d1:6d:4d:78:3e:23:21:09:aa:cd:e9:51:a8:fe:90:
                    94:e3:35:08:a9:9a:38:bb:af:fb:6c:f6:83:0f:04:
                    2e:a7:c7:c0:44:f2:4b:f1:55:5e:54:ac:dd:66:53:
                    a7:36:ec:28:69:f2:01:7f:80:41:72:0d:33:48:2b:
                    98:9b:7a:3c:96:3b:cc:31:46:bc:a5:27:b0:08:72:
                    74:d3:0b:c4:31:93:ab:b2:41:a4:2f:83:2e:bd:93:
                    0d:3e:40:84:05:ca:6a:0b:41:2d:63:c9:48:28:ea:
                    c3:94:93:74:1a:cb:14:f0:36:3a:58:78:4e:cf:20:
                    b8:a1:34:8e:e9:63:fc:21:41:a3:a0:db:c8:75:88:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E2:07:EC:91:9E:64:16:91:FB:75:48:79:27:49:AF:19:66:72:F0
            X509v3 Authority Key Identifier:
                keyid:8E:26:AB:BC:57:5F:2E:F6:48:94:61:56:29:08:42:E5:EB:87:11:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jiarvFdfLvZIlGFWKQhC5euHEdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/jiarvFdfLvZIlGFWKQhC5euHEdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.244.0/22
                IPv6:
                  2a04:23c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:fd:bd:71:ae:2c:5e:2d:d8:62:8d:1a:80:bf:b0:5e:f1:fd:
         06:91:84:67:ed:a4:2e:64:4d:08:3d:52:57:f0:6a:d7:80:cc:
         a3:ef:0d:cb:d7:e1:0b:f5:c0:cf:da:df:85:9d:1e:80:47:a8:
         39:b1:dc:f6:3d:ff:53:80:71:b4:24:da:d8:73:ff:22:52:c4:
         3e:03:2a:29:ce:23:6f:f1:14:6f:b1:b3:56:45:aa:02:c3:65:
         4f:98:fa:f3:35:de:7b:a9:53:4e:f2:c5:b4:bd:e9:79:3b:ab:
         32:8b:8a:85:58:8a:f4:47:6e:88:8e:7c:91:6e:85:f4:4c:fc:
         a3:cc:36:4d:c7:06:5e:e5:98:b3:0d:a5:fa:b3:24:2d:24:75:
         36:f0:81:61:bf:10:9a:d4:8d:63:42:65:41:ff:87:4e:4a:e2:
         51:1b:69:f7:76:85:38:9c:54:b3:d6:68:56:5c:d2:55:93:fe:
         53:b3:62:3f:60:99:a4:ea:f8:fb:8a:a5:fe:ba:65:85:13:b2:
         96:3a:6c:f7:54:a8:7b:14:08:57:6c:02:44:f9:f9:81:4d:08:
         36:14:b4:4b:19:60:94:80:31:6d:42:f1:99:ba:ef:f6:27:30:
         d6:4d:56:3a:23:99:71:cc:96:c9:81:0f:de:24:fc:48:4a:e3:
         a6:62:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:52 2024 by rpki-client on console-fra.rpki-client.org