Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/qje2fbZow8-48dTJ4VLT7gO4eSk.roa
File:                     qje2fbZow8-48dTJ4VLT7gO4eSk.roa (raw, json)
Hash identifier:          tllFPlJIok2qZa6CWoj99sJrDfaZfRLppLyzB++sdLs=
Subject key identifier:   AA:37:B6:7D:B6:68:C3:CF:B8:F1:D4:C9:E1:52:D3:EE:03:B8:79:29
Certificate issuer:       /CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Certificate serial:       072A63CA
Authority key identifier: 8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/qje2fbZow8-48dTJ4VLT7gO4eSk.roa
Signing time:             Sat 01 Jan 2022 13:54:59 +0000
ROA not before:           Sat 01 Jan 2022 13:54:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12406
IP address blocks:        185.179.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120218570 (0x72a63ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd06efda2a27638f376cd6918da2bacb201bbee
        Validity
            Not Before: Jan  1 13:54:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa37b67db668c3cfb8f1d4c9e152d3ee03b87929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:07:12:c3:be:0c:ca:2e:f9:24:71:09:21:
                    12:d8:26:a7:31:f6:ae:f1:8c:e4:37:91:62:9d:5a:
                    5e:33:96:5b:a9:28:40:4b:17:31:d7:eb:bd:88:68:
                    53:b4:9c:30:05:84:c2:41:f1:9e:46:3d:95:d5:5b:
                    4b:f4:be:86:da:30:3a:4b:76:0c:98:f2:cf:00:be:
                    49:f7:db:c9:1c:ab:0c:b7:68:ab:8d:70:7b:bf:6d:
                    a6:6e:01:8b:65:96:a9:61:e1:b4:43:18:dc:43:1e:
                    e1:ad:38:96:0b:db:c7:ab:0d:c8:fe:0d:9d:1c:0a:
                    cd:52:bf:43:66:eb:20:84:f3:6b:94:67:fa:6a:99:
                    e2:7e:e1:1c:da:a1:36:58:00:b5:b2:3d:d6:48:4d:
                    8f:e9:83:bc:72:b3:09:2a:a1:fb:f5:23:37:70:4b:
                    24:67:71:ca:82:df:ac:a2:2e:19:28:5f:fe:15:27:
                    ff:77:c1:8d:93:b1:e3:c2:78:ea:05:38:b4:f8:d8:
                    c5:f4:6f:2d:59:11:1b:0f:bb:a3:35:a7:94:78:ba:
                    91:88:28:d9:7f:6f:cc:4a:09:45:06:2e:0f:e4:00:
                    72:dd:04:ab:c7:e1:62:6c:f4:73:00:5c:d7:31:52:
                    17:77:a9:9e:cf:38:53:5d:74:2c:a5:cc:ec:56:42:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:37:B6:7D:B6:68:C3:CF:B8:F1:D4:C9:E1:52:D3:EE:03:B8:79:29
            X509v3 Authority Key Identifier:
                keyid:8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/qje2fbZow8-48dTJ4VLT7gO4eSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:f9:a8:2c:d7:0b:41:3a:83:f6:81:14:c4:cf:9b:4c:3e:
         4a:f6:0c:30:34:34:10:ad:71:91:f2:32:bb:5d:ab:f4:c9:98:
         2c:20:be:50:9d:e6:57:bd:b2:a6:fb:43:78:d1:b1:c6:2e:08:
         86:67:99:8f:03:bd:ec:a6:1b:c7:ac:1f:71:78:a6:2f:d4:d2:
         dd:35:40:dc:59:01:96:04:e3:c3:b3:ac:27:ec:b3:94:d7:10:
         9c:e0:1c:b0:bb:63:9f:a6:a0:23:0d:57:4c:12:f4:47:e4:20:
         ca:36:38:e7:02:42:97:ab:44:ba:c9:f3:7c:30:8d:32:ed:91:
         b4:f9:01:12:39:bf:09:00:2f:a2:d4:99:9f:32:c4:d8:f1:e1:
         5b:fe:bc:09:55:6a:19:be:79:92:2b:5b:5c:dd:bc:df:9c:d1:
         02:c7:f7:ed:99:a3:28:1f:e1:97:ed:06:07:d5:91:f2:97:78:
         77:47:ba:30:26:09:47:33:ef:1a:bd:1e:65:f8:55:3f:4a:50:
         64:d3:07:88:8c:66:b6:51:54:51:52:ca:a6:81:f0:65:7f:3d:
         e8:cb:e6:f6:fc:c2:39:e3:ab:cb:bf:88:97:38:4b:28:7d:da:
         8d:a0:f4:ad:3b:67:5f:8b:00:ab:72:e3:8d:cf:49:38:75:b4:
         0a:98:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org