Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/7KnjVvOK_v_coK8AwCKn_NCLTQI.roa
File:                     7KnjVvOK_v_coK8AwCKn_NCLTQI.roa (raw, json)
Hash identifier:          /CuuVBysWTxJJdoikTqQCoRVDx4ozhv1Dflxxmxsq6s=
Subject key identifier:   EC:A9:E3:56:F3:8A:FE:FF:DC:A0:AF:00:C0:22:A7:FC:D0:8B:4D:02
Certificate issuer:       /CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
Certificate serial:       01EC603F
Authority key identifier: 6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/7KnjVvOK_v_coK8AwCKn_NCLTQI.roa
Signing time:             Mon 11 Apr 2022 14:43:50 +0000
ROA not before:           Mon 11 Apr 2022 14:43:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49305
IP address blocks:        178.255.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32268351 (0x1ec603f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
        Validity
            Not Before: Apr 11 14:43:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eca9e356f38afeffdca0af00c022a7fcd08b4d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:e2:5a:6f:2b:3d:ec:50:66:75:51:ba:43:
                    ed:51:75:74:6b:c4:41:23:af:ad:eb:56:ce:75:a8:
                    02:58:93:1a:6b:bf:ed:5d:8b:6d:1f:ee:08:7b:ae:
                    c2:b1:b8:b5:55:72:7c:83:3e:6a:fa:6d:56:a9:1b:
                    d3:2e:2d:a3:75:90:8f:f6:85:9d:f7:52:fa:ad:47:
                    43:da:fe:c6:34:8f:71:67:27:f2:06:76:26:18:22:
                    bb:a2:e0:85:5d:1f:7a:94:22:41:f2:ad:3f:dc:12:
                    fc:6c:f7:53:f2:b8:18:3f:94:f9:c3:d1:9e:32:82:
                    e6:3d:da:1e:59:b4:f1:02:42:04:3b:08:73:d5:78:
                    83:79:4c:89:b9:38:de:56:03:ea:a2:88:fd:26:9c:
                    0d:6a:b7:94:9d:3f:b7:06:d1:7d:7f:9f:0e:9b:df:
                    8c:35:5d:f3:9f:a1:28:42:26:87:b9:ba:20:55:f2:
                    3a:69:bd:34:1f:0d:b4:74:09:10:e6:40:09:0f:36:
                    c4:fd:ff:c8:dd:59:2d:cd:7e:27:8c:c3:a6:56:77:
                    50:68:24:a1:52:b8:bb:ae:d1:8f:6e:e5:26:e7:93:
                    27:db:3a:0e:e4:7d:72:94:98:70:76:71:83:93:ea:
                    08:56:51:ac:21:81:5f:ed:28:c9:58:db:20:62:ee:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:E3:56:F3:8A:FE:FF:DC:A0:AF:00:C0:22:A7:FC:D0:8B:4D:02
            X509v3 Authority Key Identifier:
                keyid:6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/7KnjVvOK_v_coK8AwCKn_NCLTQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/aoGFt4Y_wsW1T-TNJtet_2oOEoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:15:56:d1:3d:09:03:be:6b:59:4c:56:40:d7:64:67:af:5a:
         3a:3b:ac:f0:e3:8b:f5:a2:3b:b7:8f:c6:de:90:ca:07:fa:12:
         46:b9:c8:f5:ea:d9:ae:8f:d2:a5:a4:d9:4a:68:a2:be:d7:34:
         ef:02:59:db:d5:79:c6:a7:04:d8:33:00:40:f6:34:29:92:3d:
         46:25:96:ef:5b:11:69:05:e1:0d:f8:c6:a1:65:2f:72:0a:93:
         e8:3a:ea:45:d7:df:85:69:79:ad:9a:0a:61:e6:2b:a4:05:78:
         01:74:3b:d1:ed:58:c2:d8:d7:35:64:3b:f9:8d:b7:50:5a:19:
         cc:bc:84:fd:c1:00:2f:3e:2c:e0:b3:81:cb:1f:ab:99:3c:ea:
         0d:bd:7b:86:02:73:1f:7a:25:d2:24:cd:13:15:10:da:50:96:
         01:e2:2b:cd:94:70:9d:78:ae:9e:9b:04:bf:1d:e3:3e:7d:72:
         a5:97:bd:9b:7e:e6:67:26:8c:5a:d2:c7:96:1b:8d:e1:e7:0f:
         ee:3b:b3:52:b9:4e:c8:c9:ef:a8:78:bd:54:99:de:1d:1f:68:
         c9:40:b7:49:8c:eb:7b:27:5f:e5:b3:7b:c0:69:f4:4a:a6:63:
         68:c5:fd:6c:10:fe:d6:e1:21:71:f6:31:2c:cc:d8:2a:b8:7e:
         f7:ce:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:03 2024 by rpki-client on console-ams.rpki-client.org