Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/5VL62wFjd2q_bBX7ZzrZLGGd35M.roa
File:                     5VL62wFjd2q_bBX7ZzrZLGGd35M.roa (raw, json)
Hash identifier:          H4o/PNsi0274lS50PFMjVZc0WdUTzyhNUGyr5zkzjyA=
Subject key identifier:   E5:52:FA:DB:01:63:77:6A:BF:6C:15:FB:67:3A:D9:2C:61:9D:DF:93
Certificate issuer:       /CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
Certificate serial:       7DAA
Authority key identifier: FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/5VL62wFjd2q_bBX7ZzrZLGGd35M.roa
Signing time:             Tue 25 Jan 2022 21:32:46 +0000
ROA not before:           Tue 25 Jan 2022 21:32:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        178.211.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32170 (0x7daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
        Validity
            Not Before: Jan 25 21:32:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e552fadb0163776abf6c15fb673ad92c619ddf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:ee:36:a3:20:25:30:ce:09:42:2d:4e:4e:
                    cf:69:0d:e8:b7:7a:e5:f1:37:73:92:6e:22:30:a2:
                    dd:d6:66:52:54:f8:81:18:51:42:94:12:7c:21:34:
                    70:67:90:c0:27:87:63:6e:2e:3d:bc:5b:63:52:89:
                    da:4c:3e:1c:24:33:13:bb:fa:06:0e:61:12:66:a9:
                    86:90:a3:58:56:36:db:30:e4:3e:92:ad:a1:55:d7:
                    91:6f:52:58:1b:42:2c:1a:13:dc:b7:f6:63:7a:ad:
                    3f:1b:ea:db:c1:d4:fd:21:f0:33:3e:b4:cd:34:49:
                    6c:40:a4:45:ae:ac:e6:70:ee:14:a9:da:43:47:79:
                    95:50:d9:fd:79:62:91:bd:39:f9:68:78:f6:76:b0:
                    bf:d5:3f:e3:9e:10:d0:df:af:a9:db:0c:73:25:4a:
                    0d:2d:b7:a1:8e:e0:ea:98:2e:a6:c3:08:8b:d3:00:
                    1e:00:1a:49:d5:15:1b:2c:dc:82:38:e4:09:cb:3f:
                    9e:76:a1:8b:4d:68:82:9e:47:a2:3a:91:fc:e1:ac:
                    2f:43:15:b2:8c:f7:f9:3b:64:c0:d3:0d:c1:83:82:
                    b5:13:e1:60:f8:5b:df:58:56:4a:ba:b4:79:95:3b:
                    a4:38:eb:17:62:d6:8d:48:10:8e:e9:90:55:d1:38:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:52:FA:DB:01:63:77:6A:BF:6C:15:FB:67:3A:D9:2C:61:9D:DF:93
            X509v3 Authority Key Identifier:
                keyid:FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/5VL62wFjd2q_bBX7ZzrZLGGd35M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/_E0WjPn6ZtSiySHcK1Sjx3777WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:75:f8:34:11:e4:b1:09:8d:52:77:cf:23:7d:e5:0c:68:
         28:8e:f8:30:7a:1a:c1:fc:27:8b:9d:bf:bc:31:ab:35:a6:fb:
         e6:a2:a6:40:20:09:50:79:aa:5b:a9:55:ac:52:a9:1e:5d:4d:
         18:d2:47:7d:97:ed:29:6a:9c:57:00:c0:6f:84:d1:7c:50:de:
         e9:81:48:0b:19:cd:c8:d3:e9:48:28:d6:49:54:92:67:1a:ee:
         5a:4a:42:f2:95:c6:de:3c:67:b0:ec:00:a2:a4:d2:6a:4c:b7:
         60:ac:df:97:4f:19:75:92:e1:54:a0:69:57:5e:a8:c9:f8:16:
         1d:50:e5:93:d5:11:33:7f:06:54:eb:a4:c5:5e:05:52:49:5a:
         ca:5e:4e:42:e4:be:f9:f4:f8:3c:42:46:5c:f8:fe:bb:7b:d9:
         70:07:00:25:6d:60:e5:a1:13:06:d4:15:38:27:16:2c:f4:14:
         f8:e8:f7:7f:ea:ec:80:b1:d3:86:3b:38:ca:b7:de:53:a5:33:
         b7:64:42:14:71:b0:1f:8c:2c:1b:42:c4:cc:81:81:29:90:dd:
         9e:e7:b0:4c:f9:e2:dc:54:d3:68:3c:88:4e:90:d9:c1:88:97:
         28:8c:50:cf:19:bc:ab:9a:b9:70:27:a3:02:1b:23:44:f9:ce:
         83:ff:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:26 2024 by rpki-client on console-ams.rpki-client.org