Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/X-ikXjhy-q91pAdqZjM3yRvHxp8.roa
File:                     X-ikXjhy-q91pAdqZjM3yRvHxp8.roa (raw, json)
Hash identifier:          7cG78q2BJu7Mycy6DjHVfSuJeDcihAvliZI7Yp0rD+k=
Subject key identifier:   5F:E8:A4:5E:38:72:FA:AF:75:A4:07:6A:66:33:37:C9:1B:C7:C6:9F
Certificate issuer:       /CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
Certificate serial:       020E8C
Authority key identifier: C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/X-ikXjhy-q91pAdqZjM3yRvHxp8.roa
Signing time:             Tue 26 Apr 2022 09:57:42 +0000
ROA not before:           Tue 26 Apr 2022 09:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34471
IP address blocks:        176.56.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134796 (0x20e8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
        Validity
            Not Before: Apr 26 09:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fe8a45e3872faaf75a4076a663337c91bc7c69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:76:cc:a4:e0:f9:30:f0:42:03:62:e7:39:
                    f8:f7:55:f7:5d:59:23:da:cd:a3:17:3e:d6:a6:ed:
                    7c:85:52:24:54:0a:6f:aa:9b:0c:6d:cf:47:c1:33:
                    a9:a1:2d:d5:d8:8d:6d:00:75:21:51:2f:6e:3d:ad:
                    e7:1d:d3:e0:75:1a:61:55:12:25:bb:d6:23:ac:ea:
                    3b:f7:53:2a:62:10:5f:4f:8d:a3:88:aa:8b:ab:3d:
                    eb:82:8b:8e:7d:54:b6:f9:d8:58:27:8d:c9:44:1b:
                    49:db:f0:ff:40:6b:4c:88:40:fe:80:59:5a:1f:d8:
                    59:ed:70:ed:fc:82:75:28:d3:28:83:51:0b:90:35:
                    99:fc:6a:6c:5c:7b:55:42:8e:e2:cb:e8:0e:12:13:
                    9a:87:12:e4:b6:d4:ef:0f:06:dd:e7:77:c5:bb:ed:
                    55:09:a5:bc:41:80:4c:87:a1:ab:e4:dd:a7:56:f0:
                    87:81:10:c1:3e:30:b8:f1:70:bb:76:68:59:16:4d:
                    e8:3a:c1:d4:0f:40:2d:ea:6c:b0:cf:af:60:aa:06:
                    fb:33:f7:84:7b:7f:3d:19:44:49:70:f9:24:69:6c:
                    73:70:ad:e8:08:d7:70:25:1d:6c:45:76:6a:9b:3b:
                    17:31:70:68:86:34:de:de:c6:61:7c:64:57:0e:e6:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:A4:5E:38:72:FA:AF:75:A4:07:6A:66:33:37:C9:1B:C7:C6:9F
            X509v3 Authority Key Identifier:
                keyid:C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/X-ikXjhy-q91pAdqZjM3yRvHxp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:0e:62:43:77:ef:4c:21:0b:ec:39:06:c2:35:6a:c8:a2:2d:
         ca:de:63:b5:52:f8:d2:d4:4b:6f:54:2d:14:61:f0:f3:5e:73:
         54:86:47:33:38:df:e4:72:07:04:38:1a:8b:6c:99:13:07:28:
         1c:e3:07:fe:f8:5a:6f:b7:78:53:b6:4b:ea:24:eb:bd:e3:ab:
         7b:c6:52:a7:18:4b:c3:c1:24:98:5e:a5:d1:4b:0b:76:dc:7a:
         44:67:d7:1d:bb:39:79:af:c2:7a:00:50:62:70:c0:21:b5:c3:
         3c:a4:b8:df:4e:40:36:17:08:35:0a:6d:21:5e:70:ef:0b:c8:
         48:4d:e9:c4:d1:94:ca:d9:f0:58:83:92:2d:bd:ea:d3:7f:14:
         d8:a7:6a:ef:2e:87:a4:cb:c7:ed:76:39:d2:05:6f:4f:6d:dc:
         d5:cd:32:94:e0:94:fa:6a:93:c0:27:1b:63:51:05:ef:b0:4b:
         83:2c:ae:d6:8c:30:5d:54:3c:8c:70:e5:2f:56:45:01:7f:89:
         f1:d1:2a:b5:27:8a:4f:74:47:bd:97:e1:68:d8:89:44:ef:83:
         63:4c:ee:3c:f8:e4:31:ec:63:d1:a2:06:27:39:e4:a6:e8:eb:
         b6:52:4d:5b:8c:80:a7:dd:5c:f0:56:43:d4:04:2d:3b:25:ab:
         61:a0:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org