Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/72uci0FTuGjGvt7j9AvkhrAs4eY.roa
File:                     72uci0FTuGjGvt7j9AvkhrAs4eY.roa (raw, json)
Hash identifier:          JGCH125SW9kw9Fzj6YJF37ftLL2LrT4yl5kdleDjjJk=
Subject key identifier:   EF:6B:9C:8B:41:53:B8:68:C6:BE:DE:E3:F4:0B:E4:86:B0:2C:E1:E6
Certificate issuer:       /CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Certificate serial:       65D189
Authority key identifier: 96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/72uci0FTuGjGvt7j9AvkhrAs4eY.roa
Signing time:             Sat 01 Jan 2022 03:52:34 +0000
ROA not before:           Sat 01 Jan 2022 03:52:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        193.239.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6672777 (0x65d189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
        Validity
            Not Before: Jan  1 03:52:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef6b9c8b4153b868c6bedee3f40be486b02ce1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:f0:51:00:21:26:15:04:89:0c:d8:ca:a7:
                    40:06:7f:1e:dd:3e:d6:e0:ea:88:ff:5e:77:85:57:
                    7c:a7:36:fa:b7:c7:f4:92:91:99:f7:73:c9:92:c8:
                    d3:40:ee:0c:35:61:f5:68:66:2b:dc:6b:f1:d5:e2:
                    12:1f:03:ab:09:23:bb:51:27:9c:a5:9d:21:b6:da:
                    53:94:24:b6:11:cf:b5:74:51:1b:6b:2e:64:73:a9:
                    e5:e9:68:ac:d3:09:89:32:0c:e7:4a:af:11:25:38:
                    4b:3d:52:dd:6b:aa:91:af:e4:98:5c:af:c1:48:15:
                    ff:35:2d:04:55:aa:75:b9:52:f8:9d:41:65:29:c4:
                    a6:59:2b:b1:0e:06:a9:01:92:56:62:12:d8:89:7c:
                    bf:9f:42:67:3e:0f:59:53:54:5b:0c:84:76:e2:33:
                    8c:1a:bb:74:aa:56:62:78:d9:04:f8:2e:b1:c9:29:
                    d4:74:f2:b1:6a:a8:a0:0c:cd:fb:39:4a:81:36:69:
                    71:22:f2:ca:fc:05:46:25:a6:b8:77:7e:6d:23:d1:
                    33:3c:1f:c1:df:dd:c5:d8:d4:82:60:eb:a4:d8:b6:
                    bf:1f:b4:25:a4:4a:41:42:1a:5b:c3:0f:44:73:e4:
                    87:ab:f5:87:2c:26:16:47:ae:44:ce:2c:67:ff:ac:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:9C:8B:41:53:B8:68:C6:BE:DE:E3:F4:0B:E4:86:B0:2C:E1:E6
            X509v3 Authority Key Identifier:
                keyid:96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/72uci0FTuGjGvt7j9AvkhrAs4eY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:96:62:09:8d:ba:dc:7b:de:a8:d6:e2:0e:21:10:bf:9d:33:
         3f:d8:87:00:24:d5:f1:12:c2:58:88:5f:c3:b5:f6:39:54:24:
         39:d9:d7:5b:83:73:ac:5f:cb:eb:c2:91:bb:97:67:3d:75:3d:
         9f:42:fb:79:ab:55:32:4b:52:c2:7f:27:6f:a9:e2:f5:be:dc:
         aa:36:2c:c2:e6:1a:f8:48:99:17:df:e8:94:2a:11:d0:94:f9:
         f6:d7:b0:0b:78:40:48:f6:93:d5:c3:b8:69:48:93:d1:61:8f:
         6d:80:07:64:e4:ad:04:c4:8e:c7:32:75:d3:e3:09:86:25:13:
         d3:01:e1:41:31:b8:6f:50:2c:2e:e4:23:b6:d9:6a:ee:69:da:
         d0:f7:ca:88:23:c7:02:b5:9b:9c:c8:db:e6:14:1c:ec:fd:8d:
         a6:e3:73:01:a2:b4:ff:96:a7:01:24:60:9c:f9:96:99:da:83:
         d1:c1:90:99:72:71:d7:64:30:ea:70:43:de:83:ee:78:a9:81:
         5f:5c:7b:a0:ab:a6:1c:4a:a7:34:91:04:23:37:11:61:93:82:
         9a:1b:f1:2b:72:45:56:27:81:43:f6:71:f3:54:ce:ee:c0:14:
         24:eb:83:a2:63:1c:55:d7:58:3f:46:99:c3:86:29:d7:2e:b9:
         f8:ac:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:23 2024 by rpki-client on console-ams.rpki-client.org