Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/Gz_o_nX8HGOtmuRajaSJOODJPJc.roa
File:                     Gz_o_nX8HGOtmuRajaSJOODJPJc.roa (raw, json)
Hash identifier:          1rMWi3v8lAf7MPqEGoxPmFOfsMcZgcaN7QyfDgE43lw=
Subject key identifier:   1B:3F:E8:FE:75:FC:1C:63:AD:9A:E4:5A:8D:A4:89:38:E0:C9:3C:97
Certificate issuer:       /CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Certificate serial:       052612FA
Authority key identifier: 7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/Gz_o_nX8HGOtmuRajaSJOODJPJc.roa
Signing time:             Sun 22 May 2022 11:05:32 +0000
ROA not before:           Sun 22 May 2022 11:05:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210636
IP address blocks:        217.74.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86381306 (0x52612fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
        Validity
            Not Before: May 22 11:05:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b3fe8fe75fc1c63ad9ae45a8da48938e0c93c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:8f:5f:30:98:66:23:0e:ab:ed:86:75:6d:
                    8b:d8:32:80:35:2f:10:14:ce:79:8a:f1:93:c5:fc:
                    4e:71:44:9d:23:3f:bd:67:4f:75:2c:6a:1e:e2:6d:
                    cf:89:58:b8:14:d8:66:f9:9f:20:ae:09:73:ef:de:
                    2c:54:67:73:a6:f8:04:08:ca:75:d1:7b:bd:72:ee:
                    d0:07:ef:9d:3b:af:20:e0:38:ff:d2:f8:8b:cf:4d:
                    58:d1:4f:a5:b9:99:16:eb:95:64:4d:e2:45:5a:51:
                    1b:71:9b:24:00:68:3a:a0:39:f3:ee:5c:97:d3:58:
                    00:83:10:ac:be:a4:0b:8c:32:c2:58:93:0b:b3:26:
                    de:7f:e4:ba:a5:4a:fa:60:96:8c:fc:17:0d:c7:d8:
                    d6:2d:a9:5c:59:22:cd:81:95:c1:3d:66:65:1f:38:
                    25:53:f3:12:e1:d2:e9:3b:76:3a:c6:5d:21:c4:40:
                    91:65:b0:5c:fc:84:71:72:72:dd:d6:6a:9b:15:3e:
                    f8:4d:f9:7d:fe:90:da:1c:41:11:e9:da:7c:73:02:
                    ad:c8:10:f1:42:6d:e0:7b:28:5d:07:6c:7c:33:61:
                    f2:e5:62:4d:9e:f6:d0:d0:a4:6c:3b:f2:c0:1c:fb:
                    4b:6e:07:26:fb:4a:c0:02:cc:06:be:03:94:8f:12:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:E8:FE:75:FC:1C:63:AD:9A:E4:5A:8D:A4:89:38:E0:C9:3C:97
            X509v3 Authority Key Identifier:
                keyid:7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/Gz_o_nX8HGOtmuRajaSJOODJPJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.74.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8e:a2:a0:9d:79:7e:46:a5:1a:ac:49:21:f9:6f:fa:94:52:
         d7:86:cc:90:66:2c:c2:1c:d8:b3:b0:11:ce:39:49:6f:da:a4:
         f7:24:42:b9:70:ee:48:d1:35:ea:c6:8c:eb:21:ea:96:7e:77:
         b6:b7:45:a0:c5:ec:ac:17:4f:5e:87:49:8e:0f:19:3f:8b:58:
         f8:19:87:63:da:87:e0:b7:c5:c8:22:9a:1c:ed:97:eb:bd:73:
         93:60:a9:2c:67:8f:ff:ad:f1:7b:bb:ae:b3:7b:87:30:83:63:
         90:77:72:1e:dd:46:b2:a3:78:82:ff:a8:71:f1:ae:01:1b:4f:
         f9:f4:5b:17:f2:96:1a:a1:3c:d0:3c:15:5a:39:8b:cf:5e:cb:
         3f:4d:f6:e5:9a:7f:b6:e0:a0:f6:d2:44:1a:29:16:79:dd:9a:
         14:70:28:ee:25:85:6d:1e:5c:f8:d1:81:15:36:b0:ec:9c:b3:
         f4:18:c3:d5:f9:ce:4e:2c:6c:2c:32:45:87:01:f1:ec:18:47:
         71:14:ec:1d:85:df:98:0c:ca:ae:7f:37:ea:41:40:1c:bd:d3:
         ca:d3:cc:30:c9:08:2d:a4:6a:c2:58:63:11:9c:60:3c:15:80:
         bd:72:5d:11:ad:df:0f:a9:60:31:27:04:14:3f:f2:5f:49:85:
         e4:52:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:06 2024 by rpki-client on console-fra.rpki-client.org