Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/cX0EXZF4GzLThaF1Ed9XiLs840U.roa
File:                     cX0EXZF4GzLThaF1Ed9XiLs840U.roa (raw, json)
Hash identifier:          XuweqRQmBbjhedmU21QYESKe4HOBFN1l0RvPI+LhNe8=
Subject key identifier:   71:7D:04:5D:91:78:1B:32:D3:85:A1:75:11:DF:57:88:BB:3C:E3:45
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       0A6B40AD
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/cX0EXZF4GzLThaF1Ed9XiLs840U.roa
Signing time:             Fri 15 Apr 2022 13:27:24 +0000
ROA not before:           Fri 15 Apr 2022 13:27:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48678
IP address blocks:        185.136.205.0/24 maxlen: 24
                          185.136.207.0/24 maxlen: 24
                          185.207.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174801069 (0xa6b40ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Apr 15 13:27:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=717d045d91781b32d385a17511df5788bb3ce345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:8a:34:67:07:15:79:a9:ff:9c:4c:40:22:
                    31:56:33:15:48:47:e3:77:1e:65:af:49:7d:30:4c:
                    57:48:dd:1d:e4:18:b8:45:60:03:dd:4c:72:73:59:
                    19:ba:d5:a2:db:b7:43:7c:19:0a:3b:a5:bf:9b:68:
                    27:3f:3f:1b:15:99:c1:7f:25:3d:ad:72:c7:6d:73:
                    95:9b:e0:96:18:fc:71:26:fd:f7:c9:fc:ee:7e:d1:
                    19:b7:38:84:81:73:48:44:f7:40:91:8d:12:42:0e:
                    56:b4:f3:ec:f5:a5:f4:f4:3d:83:ba:4d:94:d3:ab:
                    e9:c7:92:fa:c0:d8:bf:4c:fb:83:e7:d2:c3:3b:a2:
                    99:d8:85:7d:79:ea:75:b3:75:0e:05:ac:db:7e:f5:
                    f7:7f:6e:71:61:07:4d:e4:cd:f3:ee:8c:26:6e:ba:
                    a1:b8:42:1d:fd:5e:68:ea:4a:f6:0b:02:11:e7:0d:
                    59:8c:14:7b:b2:82:9e:c5:b3:aa:16:3a:8d:c2:b2:
                    e5:32:02:cd:d1:00:5a:0e:e4:f8:dc:ff:a2:f9:a5:
                    76:be:f0:37:bb:3f:0f:75:8c:9f:cf:c5:f3:48:de:
                    20:62:b0:e6:33:4e:01:c6:3d:94:3a:74:e9:9e:b2:
                    2a:aa:33:cb:58:f5:ea:14:ba:86:ad:cb:ee:a4:b2:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:04:5D:91:78:1B:32:D3:85:A1:75:11:DF:57:88:BB:3C:E3:45
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/cX0EXZF4GzLThaF1Ed9XiLs840U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.205.0/24
                  185.136.207.0/24
                  185.207.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:55:b0:99:48:ce:ca:f6:42:70:70:2e:96:97:ae:3b:d3:0b:
         3a:f8:7a:d1:55:26:f1:42:fe:00:d2:de:1a:7d:ff:c2:73:30:
         26:c8:df:d2:9f:db:f7:c0:e1:c5:1c:95:43:d9:c2:be:a4:47:
         43:e4:66:2b:9b:97:69:2c:96:3a:f0:db:1e:1a:f0:a1:2f:4e:
         1f:42:10:be:3d:75:8a:6b:c7:0e:d1:86:3a:33:35:c2:08:17:
         d7:8f:30:1f:7f:4f:60:58:69:9b:cc:2c:cc:6f:a0:3d:ce:7c:
         64:9c:d5:71:c8:e6:ce:e7:d1:cd:60:54:ee:2a:a3:26:28:41:
         4a:42:8d:7f:ed:d2:de:c7:8d:f0:23:d7:3c:61:d0:19:dc:a8:
         1d:fe:e7:1a:6f:d0:0e:13:04:4a:7c:07:75:85:b8:1e:4d:d7:
         fa:1c:e2:f8:d8:e6:7d:4d:bd:9a:20:aa:57:88:82:bf:d2:bd:
         59:98:31:61:de:0c:67:d6:8d:cd:be:0e:28:0c:f4:7e:e9:09:
         1b:7f:44:c9:13:03:59:3c:cb:4d:28:2a:93:06:d7:b3:07:66:
         72:02:27:e6:bf:f6:3a:8c:10:da:93:50:98:6b:0f:3f:91:21:
         97:54:e4:ee:07:1f:28:b3:d1:72:c7:97:df:68:d7:a2:fc:f4:
         88:e4:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org