Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/ekRyXVTNJ4tmd2uV3li9lbPHg90.roa
File:                     ekRyXVTNJ4tmd2uV3li9lbPHg90.roa (raw, json)
Hash identifier:          ptkRFL7RFyV6gAUs/OnMsnNHwQER7Ku54pajMXr5hVs=
Subject key identifier:   7A:44:72:5D:54:CD:27:8B:66:77:6B:95:DE:58:BD:95:B3:C7:83:DD
Certificate issuer:       /CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
Certificate serial:       030C7A22
Authority key identifier: 72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/ekRyXVTNJ4tmd2uV3li9lbPHg90.roa
Signing time:             Sat 01 Jan 2022 08:59:14 +0000
ROA not before:           Sat 01 Jan 2022 08:59:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210072
IP address blocks:        185.167.182.0/24 maxlen: 24
                          2a10:4a80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51149346 (0x30c7a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
        Validity
            Not Before: Jan  1 08:59:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a44725d54cd278b66776b95de58bd95b3c783dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:d5:7d:fc:05:9b:66:bd:39:f1:04:4b:ab:
                    87:2c:00:d0:89:ed:65:d3:bd:e8:5c:8d:3f:61:88:
                    79:cc:bb:b6:21:11:39:31:78:7e:61:5b:8a:f2:ad:
                    35:58:4c:92:46:1a:94:7e:72:2a:d4:88:22:84:8d:
                    f0:71:2f:9f:2e:b8:18:00:15:79:1d:11:63:73:66:
                    d3:1e:b3:ff:e9:c6:7e:89:02:15:bc:ca:b1:74:c0:
                    e1:1d:d1:c1:b4:76:92:4b:48:1b:58:f9:f0:a2:05:
                    69:1d:e6:d4:00:25:12:ad:b7:8a:c9:29:c2:51:b1:
                    ce:69:ae:15:b1:eb:b0:80:2a:78:68:97:7e:df:1b:
                    84:a6:d6:19:18:56:c7:e5:9e:cc:eb:06:b5:d8:b2:
                    e6:fe:16:8f:68:2b:cb:05:d5:e2:e9:be:f1:36:a9:
                    12:f6:73:43:fa:16:b0:32:45:e0:15:5c:9e:e6:13:
                    02:6e:7c:35:9e:17:c5:72:af:70:94:3e:44:19:c6:
                    91:0b:ab:a6:a1:31:d3:8d:ec:ab:5e:09:be:f1:a8:
                    30:06:d7:13:b2:91:b7:49:70:04:79:ac:6e:4c:eb:
                    43:aa:4a:72:db:bd:8b:75:c5:e1:fd:d9:8f:95:46:
                    35:13:96:06:2f:29:e8:5f:45:62:26:e6:b6:02:6a:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:72:5D:54:CD:27:8B:66:77:6B:95:DE:58:BD:95:B3:C7:83:DD
            X509v3 Authority Key Identifier:
                keyid:72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/ekRyXVTNJ4tmd2uV3li9lbPHg90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/cuT3uSKcXWWDiAhAtwyWpQj9B_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.182.0/24
                IPv6:
                  2a10:4a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:80:cd:fb:35:6e:2c:ce:b5:09:51:ab:3c:3f:f4:09:fc:78:
         cd:c5:d2:d5:86:4b:93:1d:ae:5c:56:e2:89:b3:aa:d1:bc:bf:
         2b:86:3d:fc:18:f8:a8:4b:fd:a4:0f:b7:a6:b7:e2:cb:ab:c4:
         fe:77:2f:ec:cd:4f:76:67:3b:47:79:5c:8b:ff:8f:fb:9d:d6:
         b5:11:12:94:0c:6e:43:2e:96:21:57:8e:26:27:fc:45:e3:e5:
         22:de:23:f6:7d:25:54:f3:6e:ba:2c:d6:aa:f6:6b:80:74:0b:
         83:30:ff:4d:36:11:6e:55:ed:33:bb:9e:cc:dd:5c:b4:68:5f:
         11:ac:b7:b3:31:84:de:09:9d:f6:e7:ab:9c:3e:ea:97:39:d6:
         aa:c8:0f:a2:c2:06:b8:9e:b1:58:ff:7c:70:b5:bf:33:d8:9f:
         05:da:8c:07:d5:a8:a8:ea:47:61:d9:4c:8b:bf:c7:38:16:60:
         67:4c:71:ad:ec:64:c5:ad:93:b0:27:7c:81:7d:2b:b8:61:ad:
         45:b7:53:ee:4f:16:de:c4:91:f2:41:aa:34:c4:e8:dc:f0:b0:
         d5:89:e4:5e:8f:93:7f:91:c6:57:ed:bc:a3:07:2f:d2:7d:ff:
         25:9a:0b:e4:c8:67:c4:8d:6d:1d:03:c2:4e:3a:b3:19:51:63:
         7b:9e:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:53 2024 by rpki-client on console-fra.rpki-client.org