Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/L7IAs8XaQ3PGmMKSI4eacLcQmFg.roa
File:                     L7IAs8XaQ3PGmMKSI4eacLcQmFg.roa (raw, json)
Hash identifier:          avYJ4P++dQpeMikj9WPfPQO2HNdEGL49cST1wZpkKDQ=
Subject key identifier:   2F:B2:00:B3:C5:DA:43:73:C6:98:C2:92:23:87:9A:70:B7:10:98:58
Certificate issuer:       /CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Certificate serial:       018451EFA302FFB129E175E780B2BFB96633
Authority key identifier: 78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/L7IAs8XaQ3PGmMKSI4eacLcQmFg.roa
Signing time:             Mon 07 Nov 2022 11:52:50 +0000
ROA not before:           Mon 07 Nov 2022 11:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3339
IP address blocks:        188.215.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:51:ef:a3:02:ff:b1:29:e1:75:e7:80:b2:bf:b9:66:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
        Validity
            Not Before: Nov  7 11:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fb200b3c5da4373c698c29223879a70b7109858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:cd:6f:26:73:de:bd:5b:17:aa:bf:65:80:
                    1b:5c:ab:c8:2b:e6:76:24:4f:c5:e0:89:bd:f6:26:
                    a3:59:79:e6:f8:19:0c:b3:ed:35:84:a9:94:19:5e:
                    d8:9d:80:65:99:c6:97:29:f5:d6:91:ab:af:80:d4:
                    17:cd:bb:ab:a0:84:9c:dc:41:d9:99:15:23:5b:fc:
                    6e:bf:6b:b6:dc:0f:d0:89:68:c1:2c:03:20:f3:75:
                    e4:24:e9:64:78:5e:5f:f4:fa:4e:55:50:ec:d3:13:
                    9c:6c:4c:3c:2d:6d:16:d8:9a:0d:8b:e3:a2:78:ce:
                    6d:9f:33:27:1f:f0:7b:0f:68:d0:ee:b7:24:63:90:
                    dd:11:6f:01:74:93:b2:5c:49:f2:e2:c6:35:0e:eb:
                    11:83:37:34:42:23:72:a4:5b:f1:f8:92:4a:93:75:
                    0d:55:83:82:74:f6:08:55:be:e5:7a:2d:a7:ea:9d:
                    45:ab:2b:0f:62:94:96:db:d3:55:6e:c5:06:18:2c:
                    3c:08:88:ea:b6:4f:ae:6f:c4:98:f9:54:21:ca:d2:
                    5b:4e:43:c8:dd:8f:5b:70:8b:0c:37:1b:81:e1:7e:
                    dc:63:04:af:cc:cd:bd:99:09:94:14:f3:26:9a:9e:
                    0b:56:1c:0e:07:8d:97:9c:c0:6c:9d:d7:07:cf:ea:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:00:B3:C5:DA:43:73:C6:98:C2:92:23:87:9A:70:B7:10:98:58
            X509v3 Authority Key Identifier:
                keyid:78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/L7IAs8XaQ3PGmMKSI4eacLcQmFg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:44:03:d0:bc:09:6f:94:7f:17:36:32:5e:62:5c:10:3d:
         f2:8e:fa:57:cf:ee:76:f0:df:ab:e6:29:a8:41:0d:7e:42:b6:
         fb:9d:98:d9:3b:3d:82:f0:b3:e4:42:f3:a3:7c:06:70:a2:6b:
         f3:10:a9:51:74:a9:07:06:b6:ec:79:37:23:ee:a9:f6:3e:d7:
         4f:c7:18:27:11:07:6d:ae:57:0a:7f:42:c8:39:1a:18:94:a2:
         b5:c6:d5:6e:d5:a8:d0:ef:aa:c0:05:bf:83:33:e5:b2:a5:8d:
         eb:7a:28:12:32:8c:ad:cb:ff:3a:b8:db:ff:71:37:8e:04:68:
         58:5b:6b:ae:63:df:b1:30:08:1d:f4:a4:95:8e:20:f8:4d:63:
         44:0f:9d:f7:37:eb:b6:53:59:65:8b:96:fe:da:02:b7:31:85:
         12:13:a3:c9:be:0d:53:f2:62:38:de:0a:03:09:68:08:cb:b3:
         e6:b2:55:6a:fe:c7:4d:09:30:e3:a4:5b:c7:f0:73:2b:1f:60:
         36:ba:89:e7:d4:0f:b1:18:ad:d1:f2:95:04:ee:0c:f2:e4:94:
         9b:3a:b5:95:a5:86:4e:f0:8e:55:71:61:02:3d:7f:14:0d:78:
         4e:87:e1:3e:5c:de:da:06:c5:70:1b:b4:5f:b9:25:25:19:51:
         c3:a0:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:51 2024 by rpki-client on console-fra.rpki-client.org