Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/84e3uSkbPB_s2JEFpG97rp_2v9I.roa
File:                     84e3uSkbPB_s2JEFpG97rp_2v9I.roa (raw, json)
Hash identifier:          3I1Xk4PhajAduq9rjXQjqsQCSBK5b4LNsmYnQKID2s0=
Subject key identifier:   F3:87:B7:B9:29:1B:3C:1F:EC:D8:91:05:A4:6F:7B:AE:9F:F6:BF:D2
Certificate issuer:       /CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
Certificate serial:       0170DF13
Authority key identifier: 6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/84e3uSkbPB_s2JEFpG97rp_2v9I.roa
Signing time:             Wed 16 Feb 2022 22:08:22 +0000
ROA not before:           Wed 16 Feb 2022 22:08:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211519
IP address blocks:        178.255.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24174355 (0x170df13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
        Validity
            Not Before: Feb 16 22:08:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f387b7b9291b3c1fecd89105a46f7bae9ff6bfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:fa:3b:47:1d:55:4d:98:33:c1:51:0d:0a:
                    db:f2:b2:79:5c:09:69:8f:ae:79:f7:c9:1f:72:79:
                    f1:44:bc:32:c7:78:fb:de:4e:e8:90:e7:61:43:9b:
                    a7:9f:cd:92:32:39:f2:ba:df:b3:18:8b:01:c4:b4:
                    c4:f7:7f:95:73:96:cf:9c:a8:3e:7d:9f:9b:78:ec:
                    a3:86:69:c4:f2:d2:ce:81:4b:91:f3:f9:34:22:16:
                    ec:54:4d:03:bf:2d:1c:cb:40:dc:87:80:c6:42:84:
                    79:be:ab:d2:8e:6a:6e:0e:52:c5:d6:4a:39:b5:83:
                    e6:b9:83:da:3d:97:a9:69:e4:a5:b1:46:78:43:7e:
                    08:20:7d:15:3a:d7:5d:61:83:e4:e3:8a:a3:b1:f9:
                    5f:ee:24:63:88:2f:3b:72:90:6d:31:e4:fb:c1:79:
                    dd:8f:7f:f8:be:da:4e:d2:36:1d:b4:35:b9:64:3a:
                    7f:19:a9:d1:9f:3b:64:6f:86:fa:ed:9c:9b:92:aa:
                    6f:fc:ee:52:4b:93:dd:48:ab:a3:98:50:6e:d3:05:
                    d8:be:ea:cc:df:4f:f1:a4:55:71:44:f4:ad:96:91:
                    21:23:d4:0d:5b:5d:33:1b:8a:2c:0d:67:c7:9a:53:
                    a3:34:dd:31:7d:f8:1d:14:87:ed:59:f9:df:df:7d:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:B7:B9:29:1B:3C:1F:EC:D8:91:05:A4:6F:7B:AE:9F:F6:BF:D2
            X509v3 Authority Key Identifier:
                keyid:6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/84e3uSkbPB_s2JEFpG97rp_2v9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/aoGFt4Y_wsW1T-TNJtet_2oOEoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:ad:bf:b8:0e:71:76:81:67:c6:c6:2b:1d:68:32:c3:7a:
         1b:2f:68:77:8d:82:b8:ba:47:bf:29:d9:b9:53:8b:e4:cf:bd:
         ba:ca:ec:4c:26:b1:bc:c8:c6:23:ff:5f:d9:92:28:3d:9d:ef:
         4d:f8:e1:32:12:8a:81:0d:51:74:8b:c5:e0:1c:d9:f0:12:1a:
         56:77:3b:03:85:73:89:4f:13:64:67:1e:d8:e0:95:8a:38:5c:
         05:05:e1:93:6f:ab:98:3c:9b:ab:b8:e7:6a:4e:76:a9:07:0c:
         0a:90:49:e6:33:7d:df:b7:54:ce:80:54:91:3c:c6:bc:a0:52:
         e7:af:a4:3a:97:cd:92:15:ac:75:b9:2a:7e:6d:d6:3a:93:f7:
         fe:e3:98:c7:27:e4:45:ac:a2:75:a7:3e:06:c0:95:3c:4d:bb:
         44:9d:82:61:d7:64:08:46:0b:73:7e:53:ff:29:f3:99:b3:ae:
         ab:dd:12:35:d6:8f:ec:ef:7a:12:88:08:36:30:ab:8c:7d:95:
         2b:c6:3b:4c:36:d5:ae:9a:7d:e2:08:b2:cc:37:12:84:91:27:
         11:13:45:ec:c7:71:41:bd:f7:8b:30:f1:97:0f:d9:da:a1:c0:
         07:41:07:84:0c:12:19:9d:4c:88:c1:4e:6f:fb:9e:ac:d1:59:
         66:da:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:52 2024 by rpki-client on console-fra.rpki-client.org