Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/lGLupZQ6Sd1UzP4NnUtuol-jbLQ.roa
File:                     lGLupZQ6Sd1UzP4NnUtuol-jbLQ.roa (raw, json)
Hash identifier:          DXd2A2ocyv9uZ+blpwo0lAjqc+OZ/S+HKUhVTiBRM6w=
Subject key identifier:   94:62:EE:A5:94:3A:49:DD:54:CC:FE:0D:9D:4B:6E:A2:5F:A3:6C:B4
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       0A68BDC0
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/lGLupZQ6Sd1UzP4NnUtuol-jbLQ.roa
Signing time:             Fri 15 Apr 2022 13:27:05 +0000
ROA not before:           Fri 15 Apr 2022 13:27:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44547
IP address blocks:        185.136.205.0/24 maxlen: 24
                          185.136.207.0/24 maxlen: 24
                          185.207.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174636480 (0xa68bdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Apr 15 13:27:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9462eea5943a49dd54ccfe0d9d4b6ea25fa36cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:65:d9:f3:fc:f3:5e:92:3a:91:0a:e1:23:
                    6a:0d:c6:b6:fa:58:b8:23:cb:bb:b5:2d:fd:ef:fb:
                    3f:c9:79:86:cf:b3:7e:4e:b5:a0:f5:46:ef:fb:59:
                    97:e4:63:60:58:24:b9:6b:27:ad:65:d5:5c:2d:6f:
                    e2:81:ce:3b:08:c5:89:97:a2:b5:89:e6:f8:8e:08:
                    59:29:56:bf:28:d9:97:6b:6d:76:56:29:6f:63:18:
                    64:85:c8:68:f6:22:6a:dd:56:53:a7:fe:cd:65:91:
                    2a:fe:16:8a:41:40:46:d7:b4:3b:05:23:df:7b:a3:
                    be:42:27:85:a1:70:cb:3c:f5:54:0e:0e:0f:3d:4b:
                    67:f0:95:88:12:a1:7d:d5:e1:f2:9c:26:44:65:3b:
                    a9:a9:b0:28:eb:86:8d:be:32:89:1a:80:52:4a:e1:
                    f3:b4:59:8c:52:11:45:8b:d1:c1:55:29:8b:2f:7e:
                    fb:73:ec:57:27:c9:4d:cc:70:02:e6:3c:51:fd:d1:
                    6c:fc:90:c8:72:8f:29:00:d5:7a:3a:b8:b1:86:df:
                    8f:01:c1:02:7a:b4:7b:66:2a:e4:10:15:bb:8e:e8:
                    dc:61:a5:6e:37:00:94:d7:c5:bd:69:8b:79:8c:75:
                    23:d2:89:27:eb:34:9f:b4:5e:6d:05:95:16:c3:4f:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:62:EE:A5:94:3A:49:DD:54:CC:FE:0D:9D:4B:6E:A2:5F:A3:6C:B4
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/lGLupZQ6Sd1UzP4NnUtuol-jbLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.205.0/24
                  185.136.207.0/24
                  185.207.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:34:61:12:fa:82:ea:df:b4:4b:5d:20:11:cc:c7:f7:88:6c:
         10:be:e1:f2:ee:ef:eb:83:b4:63:d0:f6:10:e5:27:b5:96:90:
         4a:61:80:d4:5a:59:66:6f:2a:4e:a6:22:27:d9:04:6b:be:78:
         ec:53:fb:09:9d:d1:57:9d:3e:a7:01:39:27:a9:ac:ba:4b:2c:
         63:e6:4a:07:2d:b8:e6:3f:25:e2:b8:45:9a:0a:5c:1d:47:73:
         a5:5f:d3:bc:db:89:04:7a:54:7b:ea:27:64:c4:fe:7b:a7:90:
         7d:4c:98:b1:34:36:63:8f:cf:42:be:d2:3e:08:7c:18:89:f0:
         9a:67:ff:af:6d:cb:8a:82:aa:fb:63:d2:ed:1f:22:2f:c8:f1:
         9d:fd:5d:29:53:82:67:a4:45:8e:c5:0c:c6:9d:7d:f6:0b:2c:
         d3:01:f8:55:fd:28:70:d6:f6:e9:43:19:65:16:5e:99:cf:67:
         97:07:e4:da:45:e6:ba:5f:7c:a8:27:f8:b3:d8:ee:3c:99:07:
         47:c3:31:e9:1a:b1:92:8f:b3:2c:ed:11:33:92:f4:22:fe:c3:
         f5:b9:63:5d:8c:81:33:5d:eb:ba:d9:54:74:4c:87:e7:2d:82:
         03:45:13:10:32:b3:63:11:09:13:8d:33:0b:60:ee:42:54:4e:
         71:83:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org