Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/NRn4JFhCCf6cDpefgq8dgY9smmk.roa
File:                     NRn4JFhCCf6cDpefgq8dgY9smmk.roa (raw, json)
Hash identifier:          nR/Qu2McHrVZzdkAdRbmFQen+GD6/A942S99m7Skczs=
Subject key identifier:   35:19:F8:24:58:42:09:FE:9C:0E:97:9F:82:AF:1D:81:8F:6C:9A:69
Certificate issuer:       /CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Certificate serial:       08770721
Authority key identifier: 0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/NRn4JFhCCf6cDpefgq8dgY9smmk.roa
Signing time:             Mon 25 Apr 2022 10:06:08 +0000
ROA not before:           Mon 25 Apr 2022 10:06:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47297
IP address blocks:        93.184.176.0/20 maxlen: 24
                          37.60.168.0/21 maxlen: 21
                          37.228.176.0/20 maxlen: 24
                          185.6.96.0/22 maxlen: 22
                          2a03:b880::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142018337 (0x8770721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d301ad60e7f633ee1744975d8fb157637f2072f
        Validity
            Not Before: Apr 25 10:06:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3519f824584209fe9c0e979f82af1d818f6c9a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:4c:81:04:0f:6f:8e:81:b6:9c:6a:2b:5d:
                    64:e1:0f:47:b0:f8:23:a4:9b:38:23:13:43:c8:41:
                    c0:3f:4d:ad:ae:f2:56:f7:e8:de:df:d6:55:e1:26:
                    84:f8:3b:5d:ff:6e:3a:3e:fb:0c:23:b3:94:65:da:
                    31:44:aa:47:06:07:31:25:a7:21:37:bb:5f:55:93:
                    a6:49:69:1f:d8:2f:04:4e:3d:41:de:94:7b:6d:82:
                    6e:c8:51:c7:9c:b6:21:37:3c:ec:65:b9:17:69:16:
                    4e:11:da:00:d4:b6:4c:60:6a:79:b1:a9:ec:e4:eb:
                    a3:67:23:aa:90:dc:4b:ca:09:e5:59:b0:d8:ac:2d:
                    01:5d:14:ad:6f:80:b2:9c:87:99:8d:e8:fc:77:67:
                    70:10:be:68:56:6c:ca:c3:c0:f6:20:fa:5a:b4:38:
                    d0:27:6c:80:06:69:21:f5:77:6c:1b:67:25:ae:da:
                    68:ed:f1:39:78:e2:57:f3:da:16:1a:b9:9f:12:5e:
                    77:e6:8b:97:64:f0:31:cf:0c:30:43:de:53:7b:ff:
                    45:49:2e:14:91:75:b4:2e:34:54:08:fb:d7:6b:36:
                    8a:fa:f0:be:ca:97:59:10:bf:d5:2b:cf:3f:98:bd:
                    56:24:b9:ee:e4:75:77:3b:e7:b9:72:7b:a2:ad:82:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:F8:24:58:42:09:FE:9C:0E:97:9F:82:AF:1D:81:8F:6C:9A:69
            X509v3 Authority Key Identifier:
                keyid:0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/NRn4JFhCCf6cDpefgq8dgY9smmk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.60.168.0/21
                  37.228.176.0/20
                  93.184.176.0/20
                  185.6.96.0/22
                IPv6:
                  2a03:b880::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:07:8b:2d:b4:13:21:5d:19:0a:ea:b6:3d:3d:fa:9d:34:
         22:e7:6c:20:d1:47:90:7d:ca:e9:fa:7e:80:3f:b1:ec:9c:e4:
         1d:4d:e8:80:c0:e2:98:95:6a:94:b8:02:3c:5f:b7:6a:59:5c:
         60:ea:aa:45:00:0d:ac:1e:8b:94:1d:21:e9:95:d6:8a:11:88:
         7e:2b:a7:d8:ac:d2:bf:65:34:6e:7d:a3:8a:3e:b0:b4:31:d9:
         a7:47:84:89:50:b8:ba:8d:b4:9d:d7:55:72:57:aa:6a:44:f7:
         68:b5:75:81:49:ad:20:9d:a7:61:ab:8f:f8:cc:b9:f9:38:5e:
         72:ce:23:fe:27:37:ae:b5:f9:15:01:60:88:10:c8:69:c0:b9:
         86:35:24:67:80:60:0f:9d:cf:be:ce:3a:e1:ba:93:4b:82:05:
         1e:91:2c:9f:3b:04:37:26:c1:4d:e4:ae:01:e3:71:a7:f8:27:
         57:5e:bf:da:00:15:af:a4:15:a5:a3:16:95:7e:af:53:ac:0a:
         e4:35:0f:d9:43:10:7b:fe:24:e9:fb:a5:b2:c6:70:85:a5:f8:
         e8:6a:75:70:30:3d:e6:1a:8f:70:e5:0e:b6:b0:2f:92:81:64:
         af:38:55:24:85:5a:9f:b3:8a:44:76:a2:22:2b:18:65:fc:03:
         f8:80:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:03 2024 by rpki-client on console-fra.rpki-client.org