Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/tpEccydC59GF6knYDwf_xuzli_I.roa
File:                     tpEccydC59GF6knYDwf_xuzli_I.roa (raw, json)
Hash identifier:          oLGbPAtKz0luwRGutc1OejawA7R6RmnEumUuwiqrG8c=
Subject key identifier:   B6:91:1C:73:27:42:E7:D1:85:EA:49:D8:0F:07:FF:C6:EC:E5:8B:F2
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       0189D046551172737664AB9A977F27E9BAFC
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/tpEccydC59GF6knYDwf_xuzli_I.roa
Signing time:             Mon 07 Aug 2023 13:53:37 +0000
ROA not before:           Mon 07 Aug 2023 13:53:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        37.1.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d0:46:55:11:72:73:76:64:ab:9a:97:7f:27:e9:ba:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Aug  7 13:53:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6911c732742e7d185ea49d80f07ffc6ece58bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:52:28:2a:1f:c2:d3:f6:37:80:43:e2:20:
                    64:d8:20:d0:87:37:ac:03:99:16:13:38:e1:ea:d2:
                    21:3a:80:e6:4e:f8:01:dd:59:40:11:1b:73:35:4d:
                    71:a8:1c:0f:f1:a9:08:76:c0:c2:c3:22:06:bf:34:
                    d1:2e:30:8e:ea:f9:7f:42:a8:fb:45:7b:d2:b7:b8:
                    97:7a:84:54:25:71:25:46:a6:14:1b:af:18:2b:e7:
                    f0:6f:26:b9:c1:13:57:48:26:ff:18:7f:c4:c2:dd:
                    c5:88:56:a7:6b:f6:2a:b8:cb:2c:6d:32:f7:fb:41:
                    65:93:b0:51:9c:ce:96:8f:61:54:e8:52:c0:c5:e7:
                    1f:c0:38:2c:e8:48:24:3b:40:f2:7c:7e:7e:86:2e:
                    e6:53:42:71:b3:51:fa:da:39:91:14:0b:ad:19:eb:
                    e5:ca:eb:d6:d3:95:01:c8:70:c3:83:85:e1:9e:7a:
                    da:a0:d2:2a:97:b4:c0:c2:91:c3:a8:b2:cb:98:29:
                    fe:69:5a:9c:af:a9:95:23:ae:26:21:c7:97:15:ff:
                    ff:ea:9d:89:c3:cc:75:18:32:ae:f7:67:ab:f9:9b:
                    71:0a:3e:7f:86:6f:d6:41:cf:66:79:74:9a:a3:9e:
                    0c:66:92:03:11:c7:8e:12:10:fd:6f:87:a8:c0:72:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:1C:73:27:42:E7:D1:85:EA:49:D8:0F:07:FF:C6:EC:E5:8B:F2
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/tpEccydC59GF6knYDwf_xuzli_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:32:61:ca:27:f5:86:18:cb:b7:3c:68:45:8b:0d:17:bd:
         74:74:37:6f:c3:dd:a9:f1:36:96:ef:d9:49:fe:a1:b2:82:33:
         09:d2:08:b4:ce:34:d7:55:bf:63:33:c3:56:07:ca:7b:fb:2e:
         4f:79:75:c4:82:35:d3:32:61:c0:fb:41:27:7b:da:fa:3a:36:
         1c:93:8f:3e:80:73:77:de:df:fa:27:e9:6f:70:7e:02:ed:0b:
         95:23:25:32:30:b6:2f:d6:bb:3d:d4:b6:04:30:1e:0c:26:24:
         4f:22:6f:93:12:4c:b0:0b:8d:bf:2d:f4:7d:07:a2:fd:86:51:
         e5:58:b8:31:a9:77:3e:8c:c7:c9:fe:d0:fc:0b:ea:63:91:dc:
         cc:ab:6d:53:67:de:73:b3:97:d5:6c:cc:77:8d:ba:d8:cb:73:
         86:80:18:07:77:bb:e7:7c:48:ef:12:05:7d:70:87:ee:46:4b:
         11:a6:0a:72:1a:fe:6e:92:a6:63:c6:04:9c:3b:23:b5:fe:b8:
         c0:d7:12:c2:61:a0:f6:34:28:2f:0c:b3:f6:40:8c:40:a5:6e:
         12:11:16:ea:16:02:b5:a1:1d:53:42:76:6d:34:b8:25:cf:2b:
         ae:47:71:d1:1c:d6:c2:63:f5:e5:dd:5e:ef:a7:1a:fe:01:57:
         26:e0:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org