Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/B7DnFzPKISGVd0zVV97abi9pny4.roa
File:                     B7DnFzPKISGVd0zVV97abi9pny4.roa (raw, json)
Hash identifier:          j2EMDzRl12naohpBUjsEBjh2RoQzQcbJtLgfpbWz6sE=
Subject key identifier:   07:B0:E7:17:33:CA:21:21:95:77:4C:D5:57:DE:DA:6E:2F:69:9F:2E
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       04553CE3
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/B7DnFzPKISGVd0zVV97abi9pny4.roa
Signing time:             Wed 11 May 2022 06:17:39 +0000
ROA not before:           Wed 11 May 2022 06:17:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        213.225.239.0/24 maxlen: 24
                          213.225.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72695011 (0x4553ce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: May 11 06:17:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07b0e71733ca212195774cd557deda6e2f699f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:1d:44:83:27:4e:1f:ce:20:7f:dd:5c:0c:
                    d7:a1:8f:0d:03:b6:bd:5d:2f:95:ad:25:01:e6:ca:
                    b7:45:c1:79:6e:9c:f2:6b:ba:c5:76:ec:e9:33:53:
                    17:88:34:25:11:7c:6c:b2:85:9f:d7:84:8a:03:4b:
                    6d:22:6a:44:74:11:00:e7:d5:79:64:f0:6d:9d:2c:
                    92:65:c3:39:38:ac:85:71:03:b8:2c:80:c5:62:27:
                    32:71:76:f4:f8:c4:b0:a6:cc:12:b0:de:52:28:e5:
                    3f:1b:31:7f:fe:e8:ec:fc:35:ff:f9:79:a3:83:99:
                    7a:09:36:87:df:1b:8a:48:bd:32:f7:a8:2b:1a:87:
                    97:b0:9d:f9:cc:5d:53:5f:40:e1:1a:46:a3:74:c6:
                    99:fb:eb:63:bc:35:91:44:92:6b:94:d5:b5:a7:8c:
                    8a:ee:bd:71:79:75:b4:ca:50:cf:eb:5f:74:bd:18:
                    89:dc:ad:25:bd:93:cc:db:c0:ac:bf:90:56:0b:cd:
                    9e:3b:66:59:13:dc:38:bb:76:5a:a9:95:52:ff:df:
                    c2:d6:38:72:e3:4c:3c:ac:25:26:7f:69:63:8e:26:
                    6c:84:2a:4c:a6:60:6e:eb:3e:be:6c:68:fb:1a:d5:
                    8b:00:59:e4:64:15:cb:06:f1:98:ab:df:de:e5:40:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B0:E7:17:33:CA:21:21:95:77:4C:D5:57:DE:DA:6E:2F:69:9F:2E
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/B7DnFzPKISGVd0zVV97abi9pny4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.225.237.0/24
                  213.225.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:8b:51:b7:7a:24:d6:c8:ff:72:58:a8:c3:3f:1d:83:bf:
         4c:2c:08:6a:98:e8:06:41:45:fd:24:74:46:36:2b:4c:82:d2:
         e9:e6:97:26:dc:9b:ad:3d:36:cd:3d:a7:37:0b:3f:30:13:9f:
         61:1c:aa:e1:69:5b:60:f7:bf:a7:9d:79:cd:3f:12:e5:5f:36:
         10:0d:5a:3b:dd:e4:8f:26:d0:e6:3c:71:09:ee:62:63:b9:69:
         b6:f6:0c:9d:47:11:14:f9:e3:29:fd:0e:d2:fb:31:cb:d4:c7:
         6b:0f:86:30:71:82:29:43:20:53:cb:1b:a8:95:fb:c0:7a:ef:
         98:1c:43:43:46:d8:2f:82:a7:e3:41:17:2c:ef:9b:0a:40:88:
         e1:ba:db:f8:d9:75:5f:7d:42:f7:aa:e6:54:18:fb:fa:39:74:
         59:69:ad:f3:bc:a9:f5:3d:7d:d1:04:a5:5a:db:a6:29:1a:e6:
         ab:33:7a:3d:ad:0c:07:58:88:c2:1e:bb:f2:b9:9f:29:db:b8:
         82:2f:1a:8c:bf:cf:88:5f:4a:ea:80:44:5e:e7:8b:7a:0e:a9:
         7c:37:89:7c:de:79:80:a2:b6:f4:0c:59:8d:79:23:9e:63:d6:
         ba:0f:99:a3:98:68:e6:b8:fd:b3:68:83:e2:70:87:71:8d:be:
         fe:03:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org