Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2Vh5SnrTGBHXs9_5xAM4gLCEEB0.roa
File:                     2Vh5SnrTGBHXs9_5xAM4gLCEEB0.roa (raw, json)
Hash identifier:          hRmmvEbW9z1PkycRiN0eD4gLgNn6zBDaciECs04NhN8=
Subject key identifier:   D9:58:79:4A:7A:D3:18:11:D7:B3:DF:F9:C4:03:38:80:B0:84:10:1D
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       01837B5FA1D097F1AD158D8D5FC26199B159
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2Vh5SnrTGBHXs9_5xAM4gLCEEB0.roa
Signing time:             Mon 26 Sep 2022 19:56:48 +0000
ROA not before:           Mon 26 Sep 2022 19:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        82.118.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7b:5f:a1:d0:97:f1:ad:15:8d:8d:5f:c2:61:99:b1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Sep 26 19:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d958794a7ad31811d7b3dff9c4033880b084101d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:63:5a:f8:34:10:1f:3d:32:b4:25:56:32:
                    a1:05:93:d6:cd:95:ba:d1:51:22:28:d3:86:2c:ab:
                    cc:af:16:ab:2e:51:7e:e7:e5:73:5b:22:90:d0:81:
                    18:c8:ad:39:cc:10:27:68:22:80:6e:50:4c:e3:97:
                    26:35:b0:3e:2b:94:bd:11:ac:55:93:57:09:47:ff:
                    5e:11:f3:02:47:04:c4:3e:49:a7:ea:5f:b0:c2:fe:
                    f0:94:07:83:12:df:e5:30:3a:64:26:89:52:57:d0:
                    bc:c4:61:9e:9f:64:3d:70:5a:49:17:a5:29:c7:d6:
                    51:7a:82:8d:0e:9d:47:c8:81:42:b9:5b:c4:6e:27:
                    ce:ab:98:7c:15:55:a2:3d:f3:f6:25:f8:e5:23:01:
                    53:bd:a6:de:29:9c:81:fc:77:f6:e6:51:c2:bf:4d:
                    3e:4d:f9:28:56:4a:99:cd:57:9d:14:59:39:38:c3:
                    8a:7d:bb:a7:34:34:fa:79:92:34:62:e7:2e:32:b8:
                    68:96:88:08:eb:73:73:0b:c1:5c:df:69:b1:4a:ce:
                    94:18:9a:f9:e1:06:6d:4f:b2:e8:89:cf:2b:26:6d:
                    e9:af:fa:c9:aa:9f:3f:23:37:d7:99:29:b1:78:5c:
                    c8:91:28:e1:a6:9a:26:ed:c8:f9:1c:a2:c8:95:c6:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:58:79:4A:7A:D3:18:11:D7:B3:DF:F9:C4:03:38:80:B0:84:10:1D
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2Vh5SnrTGBHXs9_5xAM4gLCEEB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:c1:7c:10:72:c4:96:c1:74:92:d5:4b:56:25:ec:3e:83:
         de:2f:86:ca:9c:52:f6:39:57:13:99:d6:06:0b:12:cd:d3:40:
         40:0a:e6:c5:84:17:9c:2d:1d:3f:65:35:d4:44:7e:de:c3:69:
         03:76:a6:4a:f5:44:67:fc:3a:a8:7a:5d:f0:78:e7:63:78:69:
         46:f6:40:88:4c:c9:2b:44:63:11:97:14:44:49:18:58:4b:8f:
         93:21:3e:66:d2:21:dc:e8:e1:b8:ae:fd:85:3f:30:06:1c:fb:
         dc:ae:5e:99:51:8c:44:5b:f8:5f:12:76:40:9d:2c:f3:5c:79:
         d9:54:72:4f:2c:be:f2:42:a6:d6:f0:c1:cd:22:03:90:e6:74:
         88:d0:ac:e0:94:49:4f:83:80:18:f1:99:70:bd:c8:d2:02:72:
         9b:4c:3a:46:6b:50:7e:cb:98:98:dd:b9:45:32:df:60:31:df:
         c3:e2:cf:cf:41:c1:a1:ee:dc:52:ed:20:60:26:36:07:b1:2d:
         4a:c7:c6:ad:58:a3:fb:d0:3a:a6:27:1b:d0:95:9b:ce:db:68:
         b8:16:51:c6:18:d7:9e:2d:67:8c:e7:5c:e9:62:2c:51:b6:ce:
         9b:50:b2:36:21:77:e4:ae:d2:5d:c4:55:6f:40:7b:da:c2:73:
         e0:23:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org