Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/yIIxwi928i7Zz6vd1tN0BDCjsuQ.roa
File:                     yIIxwi928i7Zz6vd1tN0BDCjsuQ.roa (raw, json)
Hash identifier:          0HmESIge2KC3lavm15PGdlsWtKumJAQ2lUx1YXwK7R4=
Subject key identifier:   C8:82:31:C2:2F:76:F2:2E:D9:CF:AB:DD:D6:D3:74:04:30:A3:B2:E4
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0346210A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/yIIxwi928i7Zz6vd1tN0BDCjsuQ.roa
Signing time:             Fri 21 Jan 2022 19:15:38 +0000
ROA not before:           Fri 21 Jan 2022 19:15:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        82.118.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54927626 (0x346210a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jan 21 19:15:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c88231c22f76f22ed9cfabddd6d3740430a3b2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:5a:ec:7f:8b:67:66:2f:cb:0e:5c:6b:eb:
                    d3:c5:6e:f7:67:ec:b3:26:cf:64:25:1e:29:31:1b:
                    ce:36:b1:e1:07:cd:41:0b:44:02:fa:4e:0e:b0:51:
                    f6:0a:07:78:9e:3a:6b:46:80:c5:73:a0:76:47:19:
                    f9:1e:ca:88:0c:12:0f:2f:83:85:a1:1f:80:d1:55:
                    46:3e:2e:1d:9d:fb:18:03:a3:6a:2f:d9:0b:ae:2c:
                    3d:b6:7f:93:8d:b7:42:6a:b2:41:20:29:b3:e7:67:
                    e9:2c:f0:ff:4c:40:46:0b:9a:8c:63:45:14:c7:4c:
                    cb:f8:55:9b:12:f6:0c:7b:fa:3d:41:44:69:6a:a6:
                    a1:43:e0:c5:8f:ad:b5:1e:9b:96:32:88:25:cd:a1:
                    87:85:e0:4e:dc:aa:3d:0d:32:7a:09:f1:d1:c2:aa:
                    97:08:db:21:62:d6:b8:e2:b8:ac:5d:40:63:d7:63:
                    26:4e:21:7a:d9:5f:26:f7:2c:54:e7:12:4d:16:e1:
                    32:c7:4b:af:a3:5a:6b:a6:ff:ce:01:2a:95:dd:8e:
                    0f:50:6a:c6:ec:9c:8a:f5:ca:d5:42:c3:61:1e:69:
                    77:1e:3e:a8:78:ce:e4:ea:39:9c:ba:73:e3:67:a5:
                    8d:85:bb:68:6b:b5:d6:b5:f1:8e:cd:9c:ba:99:16:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:82:31:C2:2F:76:F2:2E:D9:CF:AB:DD:D6:D3:74:04:30:A3:B2:E4
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/yIIxwi928i7Zz6vd1tN0BDCjsuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:dd:82:e5:2d:9e:2e:87:a2:e3:08:34:27:57:97:4f:32:
         1e:20:5b:2e:6a:71:bc:09:da:eb:26:33:a5:31:14:40:58:9b:
         10:6c:0e:c5:71:58:7d:8f:1e:4b:8a:db:d8:1d:ae:80:b5:96:
         b6:60:59:b2:c0:1b:c0:0e:50:35:4d:82:54:77:81:fa:02:86:
         aa:22:f3:2d:52:c6:a5:0e:98:ce:58:6f:16:25:a5:7b:cd:00:
         e6:c3:56:8c:48:82:59:7b:57:00:2e:81:81:20:24:5a:c5:99:
         40:90:ac:fe:2a:29:5d:99:d2:96:55:f7:af:fd:2f:a1:bc:80:
         94:63:d7:9a:00:c4:9e:85:af:e7:34:b6:df:55:b6:4a:93:05:
         8c:4e:5b:35:3a:05:7b:a9:b3:5b:fa:8a:1d:43:40:52:b2:7f:
         31:fc:bb:00:54:60:71:a2:1a:dc:df:83:6d:af:31:7c:56:a9:
         6c:15:71:15:2d:09:02:5a:97:7f:4b:2e:d7:62:27:44:26:2b:
         95:2e:83:20:ea:3d:68:5f:6a:3d:8a:c0:cb:3b:2c:57:e5:97:
         e0:43:e6:dc:58:b4:37:a0:99:82:be:af:de:bf:1e:41:c6:03:
         79:64:15:c7:fa:17:76:50:86:21:97:86:72:c2:8f:f9:cf:dc:
         7e:67:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org