Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/7gDM2mOQqfPOf57vsoH62MjNWK4.roa
File:                     7gDM2mOQqfPOf57vsoH62MjNWK4.roa (raw, json)
Hash identifier:          ejDMVTG3FMX36RzC+VANd727NJz2sQCVgvpj5ihRDOQ=
Subject key identifier:   EE:00:CC:DA:63:90:A9:F3:CE:7F:9E:EF:B2:81:FA:D8:C8:CD:58:AE
Certificate issuer:       /CN=975151222dc563076f931a41497eb87c6acfdfcd
Certificate serial:       0302D8A7
Authority key identifier: 97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/7gDM2mOQqfPOf57vsoH62MjNWK4.roa
Signing time:             Sat 01 Jan 2022 06:53:58 +0000
ROA not before:           Sat 01 Jan 2022 06:53:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48345
IP address blocks:        185.168.169.0/24 maxlen: 24
                          2a0e:d340::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50518183 (0x302d8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975151222dc563076f931a41497eb87c6acfdfcd
        Validity
            Not Before: Jan  1 06:53:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee00ccda6390a9f3ce7f9eefb281fad8c8cd58ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:1d:6b:be:9d:e7:1e:b3:aa:9e:ed:05:5a:
                    2e:65:55:d8:2d:5c:d9:af:d8:6a:99:47:0d:04:30:
                    9d:e3:cf:7c:a9:25:ab:d6:64:f1:6c:ac:14:2c:fb:
                    9b:e6:e4:ce:d2:da:6a:58:87:06:80:af:8b:17:4e:
                    6a:dd:55:e0:78:5f:24:30:dd:f5:44:95:26:23:57:
                    22:12:11:56:e6:29:d7:af:e4:cd:1e:cc:cf:05:e4:
                    d8:ca:95:b5:c4:70:7a:d8:52:3f:b4:0b:d5:51:94:
                    9d:c1:12:da:49:fe:6f:a7:1c:2f:19:e9:29:36:ef:
                    cc:57:9d:a9:c7:00:58:95:4d:55:41:9d:b7:8e:cc:
                    0c:7c:af:9d:57:11:2b:5e:18:73:e8:1b:2e:0e:dc:
                    cf:1d:8b:9c:37:4b:a7:9d:88:70:16:20:2a:81:18:
                    0f:30:8a:1b:fd:b5:fe:cb:42:5b:45:73:43:02:af:
                    8f:ad:d5:18:86:04:25:0e:4a:5c:49:e7:69:8c:3f:
                    c0:54:dd:0a:ad:58:9d:1d:aa:48:7a:4e:d2:82:cb:
                    76:92:ef:14:8d:af:17:ca:41:1b:e7:1e:10:bd:5d:
                    5b:fa:01:3f:bd:76:72:d8:3f:cb:ad:96:8e:e1:d6:
                    dc:6b:91:59:c8:c8:6d:69:0f:20:50:b2:cf:42:7f:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:00:CC:DA:63:90:A9:F3:CE:7F:9E:EF:B2:81:FA:D8:C8:CD:58:AE
            X509v3 Authority Key Identifier:
                keyid:97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/7gDM2mOQqfPOf57vsoH62MjNWK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.169.0/24
                IPv6:
                  2a0e:d340::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:e5:d8:7b:3b:9e:83:dc:1c:7c:6f:05:02:bc:2f:27:d5:5c:
         f9:76:35:db:c6:1f:c5:d6:44:db:37:cc:59:1e:3b:94:57:95:
         6e:81:fc:38:e6:38:7d:5f:de:e3:c1:c2:0f:b1:ad:f5:e2:8c:
         bc:7b:3a:09:e4:2f:22:68:ea:4b:18:68:2c:84:bc:55:1c:43:
         a5:56:80:2d:ba:0a:83:8a:6a:4f:c3:e6:72:34:92:1e:56:b8:
         af:27:50:30:1e:56:89:4b:ca:f8:8b:09:0e:43:56:a4:9f:c6:
         4a:76:1e:4a:35:dc:97:b2:b1:0b:b8:7d:fd:21:b9:7d:3c:7e:
         ec:83:52:2a:bc:ce:e4:ad:5d:e3:ab:cc:cb:14:52:57:85:bd:
         d8:ad:55:aa:9d:9b:8f:25:8a:ee:0e:6c:ca:5a:ad:85:4e:84:
         4a:01:13:e1:9b:54:06:9e:bf:fc:a7:0c:92:d6:91:f6:62:61:
         32:5e:02:77:50:84:8c:60:f2:c0:ac:10:1e:00:a0:80:0a:fa:
         fd:15:3e:24:d1:1d:73:c1:36:c9:dd:3d:b6:a4:2c:d5:57:b9:
         11:46:41:38:9e:1e:78:c7:20:c7:d7:3a:bb:45:30:a5:e9:46:
         4f:68:65:10:b0:e0:6e:fe:dc:92:e2:2f:3d:7a:ae:1f:7c:41:
         4a:08:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org