Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/sbYrGC4VCrfw1HpVbJuAfJrV8_w.roa
File:                     sbYrGC4VCrfw1HpVbJuAfJrV8_w.roa (raw, json)
Hash identifier:          uHL5UwmRpPxltWZZcyy1IP7AFaDkcWIZa+3Wm9ZSLmc=
Subject key identifier:   B1:B6:2B:18:2E:15:0A:B7:F0:D4:7A:55:6C:9B:80:7C:9A:D5:F3:FC
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       09756DC2
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/sbYrGC4VCrfw1HpVbJuAfJrV8_w.roa
Signing time:             Sat 01 Jan 2022 12:03:31 +0000
ROA not before:           Sat 01 Jan 2022 12:03:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202505
IP address blocks:        2.59.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158690754 (0x9756dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Jan  1 12:03:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b1b62b182e150ab7f0d47a556c9b807c9ad5f3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e1:a6:5a:d5:f9:2e:60:3f:7e:1b:e6:f7:c2:
                    31:e5:d5:86:bb:bf:20:30:1a:68:f5:9f:13:5f:d6:
                    2c:e8:04:98:c8:dd:a7:6c:85:c7:a1:02:75:5c:d1:
                    80:e8:fa:c6:dc:86:3c:78:86:6e:ef:0e:84:47:37:
                    26:19:2e:2c:ea:e6:a8:0c:62:cc:6d:0d:42:a1:eb:
                    00:a6:c9:e6:c8:87:ba:38:d4:a9:98:a0:17:69:3f:
                    b4:14:7b:61:15:f3:b5:28:8f:cd:ed:61:7f:b0:f9:
                    1c:46:f5:c6:4a:4e:30:e1:14:32:20:76:bc:db:87:
                    ef:ab:6a:42:1e:4a:c4:34:28:89:41:4b:7e:1f:44:
                    d0:43:4b:2b:9b:1d:2e:54:6c:2c:dc:0d:67:56:81:
                    b4:3b:13:41:92:65:d4:b0:20:50:c9:94:10:34:f6:
                    9c:a2:8f:e5:3b:ba:b6:e7:51:0d:34:ce:78:10:ed:
                    05:e3:30:b2:fd:67:23:c7:ee:3e:c1:9d:ad:2a:d5:
                    f1:ef:f5:6a:57:4c:23:47:da:3e:29:68:bb:fc:eb:
                    64:26:1c:75:66:20:cb:48:de:c8:a7:25:b1:f4:4f:
                    c8:b2:fc:83:9f:22:03:a4:4a:c1:97:f6:a8:96:a4:
                    ed:3c:ba:95:7c:d4:a3:52:e2:5e:ca:8a:b3:95:6d:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B6:2B:18:2E:15:0A:B7:F0:D4:7A:55:6C:9B:80:7C:9A:D5:F3:FC
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/sbYrGC4VCrfw1HpVbJuAfJrV8_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:37:01:6c:c2:6c:44:2b:56:ba:74:a5:2c:a4:49:8a:40:f6:
         37:22:25:15:f2:6d:2f:7b:7c:2a:d4:9c:80:43:bc:f9:90:72:
         84:e7:5a:00:fe:c0:5f:10:bd:a5:f3:0e:f2:e2:32:72:c1:7a:
         3d:39:06:5a:29:5f:82:45:47:02:4d:1c:f7:e9:a7:12:26:f2:
         96:55:4e:d9:54:b5:8e:b0:51:01:dd:e6:60:e0:29:17:f7:0f:
         27:2b:f8:57:fc:3b:e5:2f:42:bb:b4:d2:f9:28:31:72:2c:af:
         3e:d9:02:af:0d:f6:aa:ba:24:02:90:ff:9c:83:3f:9f:df:18:
         f2:69:8d:10:4d:12:ca:b6:b9:92:e1:1d:a1:b5:ff:8d:14:57:
         a2:10:b1:4b:24:61:5c:d3:0e:cc:9f:53:91:84:4b:3c:21:6e:
         9b:51:85:92:75:3d:b4:60:2c:db:4d:e5:10:eb:3c:48:7d:2c:
         49:05:d2:bd:74:63:cf:b9:d8:8e:c7:c0:12:ec:31:cb:89:b6:
         d7:89:14:93:0f:50:7d:04:5d:c0:4d:a7:bf:7e:c1:17:7e:62:
         03:6d:9a:c3:49:e6:3c:1f:63:4f:19:02:da:aa:46:4b:aa:d3:
         35:ff:49:9d:02:5d:d7:51:09:d1:98:c3:fe:63:dd:bd:54:77:
         9e:e3:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org