Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/oN6AkLWGCrT7DdxSfeklOfuOiaM.roa
File:                     oN6AkLWGCrT7DdxSfeklOfuOiaM.roa (raw, json)
Hash identifier:          x2ACkBwPXCJCWmfn/ki1n5fxuAd9olrcUoHaFcizfH0=
Subject key identifier:   A0:DE:80:90:B5:86:0A:B4:FB:0D:DC:52:7D:E9:25:39:FB:8E:89:A3
Certificate issuer:       /CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Certificate serial:       03EB37CC
Authority key identifier: 7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/oN6AkLWGCrT7DdxSfeklOfuOiaM.roa
Signing time:             Sat 01 Jan 2022 09:56:46 +0000
ROA not before:           Sat 01 Jan 2022 09:56:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212042
IP address blocks:        217.74.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65746892 (0x3eb37cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
        Validity
            Not Before: Jan  1 09:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0de8090b5860ab4fb0ddc527de92539fb8e89a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:41:e9:8b:4d:1a:4e:c4:f9:c1:93:38:4e:
                    d1:28:c2:3e:37:4e:9f:79:c4:91:14:c2:05:f3:df:
                    9a:6f:38:c8:14:e5:00:8a:6e:20:2a:42:6d:24:97:
                    9e:42:bd:e3:9d:29:3b:f7:50:66:8f:6c:29:9c:d6:
                    86:cf:bb:c3:72:49:0b:b4:c4:ea:5a:dc:1d:af:28:
                    6f:14:69:25:13:8d:e7:34:37:3a:b3:a1:5c:c1:e0:
                    e4:09:96:43:6f:ea:60:92:c9:bd:8d:40:de:66:af:
                    fe:ef:7e:b3:4f:d4:c8:26:24:6b:04:30:bb:eb:a1:
                    f3:ad:77:fe:99:f2:f4:fa:5a:e4:f5:17:7e:a9:b6:
                    ae:84:24:ef:c9:06:73:da:35:8c:97:c3:54:23:e0:
                    c3:59:a5:c9:b8:85:f0:96:6c:7e:29:28:5e:8a:52:
                    cf:d5:13:47:52:dd:ff:98:0a:75:d9:c7:52:d3:1e:
                    4a:bb:36:1b:28:db:03:d0:f9:c6:2c:e2:b2:b0:0a:
                    ad:a5:4a:fd:50:cd:ce:bb:96:dc:6d:df:e3:48:84:
                    ac:2b:fe:01:6e:a0:f6:23:f8:e0:ea:3e:52:1d:e6:
                    7c:5a:64:89:f0:5a:9d:b5:5a:1c:42:2f:79:6e:4d:
                    33:fd:41:ac:3b:37:d3:f4:aa:d8:fa:cf:81:44:7a:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DE:80:90:B5:86:0A:B4:FB:0D:DC:52:7D:E9:25:39:FB:8E:89:A3
            X509v3 Authority Key Identifier:
                keyid:7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/oN6AkLWGCrT7DdxSfeklOfuOiaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.74.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:66:bf:f9:df:a0:da:99:af:02:d9:a4:96:c6:a6:8a:9d:
         77:3f:e3:d3:cf:7f:8b:a5:c6:6d:e5:65:fc:8e:46:78:80:d6:
         aa:cc:84:f3:54:ec:8c:13:0c:99:9c:3d:90:2f:4c:bf:55:53:
         b7:02:6a:8a:40:97:86:f9:d9:4a:b6:3e:aa:3f:d7:62:c1:6e:
         f6:06:98:66:73:50:5b:fa:6f:1f:e2:11:50:44:92:1c:14:f4:
         bf:a5:6b:bf:91:53:a6:3a:d5:8d:0a:b0:d0:91:3c:25:0c:52:
         0c:d1:39:4b:0c:4f:f4:51:92:a0:f0:ec:64:32:93:46:72:54:
         9c:f1:20:9f:97:20:86:0a:0a:9f:43:27:ee:3f:3a:4e:8d:81:
         fc:b2:50:5e:40:bd:53:45:de:19:a1:c0:37:61:70:97:31:a0:
         9f:2b:4e:88:11:64:bc:75:ca:50:00:81:d0:ac:ba:57:64:e3:
         ec:93:29:33:7c:76:87:f9:f5:2d:01:8a:d8:f0:7b:17:2a:0d:
         35:01:13:1e:cc:be:7a:37:8d:06:db:4e:9b:1e:f6:db:fa:85:
         50:b5:80:f4:1e:9a:1f:81:28:46:26:a0:ba:3f:d0:4b:44:22:
         a0:dd:eb:7b:49:4a:fa:33:b9:6c:30:ee:ab:6c:28:f9:3f:b6:
         d5:55:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:51 2024 by rpki-client on console-ams.rpki-client.org