Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa
File:                     2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa (raw, json)
Hash identifier:          8KbfLqZ9S1kWBp+NjwDb4dzMjxjxxvebAECLlXRQMYw=
Subject key identifier:   D9:DE:57:6B:AA:7B:41:84:F6:4C:7F:F8:3E:2A:2D:03:DE:D9:A5:1E
Certificate issuer:       /CN=eb81f2566177790fad880d610e37cdd209847207
Certificate serial:       03A92759
Authority key identifier: EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa
Signing time:             Sat 01 Jan 2022 12:02:05 +0000
ROA not before:           Sat 01 Jan 2022 12:02:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        185.217.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61417305 (0x3a92759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb81f2566177790fad880d610e37cdd209847207
        Validity
            Not Before: Jan  1 12:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9de576baa7b4184f64c7ff83e2a2d03ded9a51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:50:e7:e5:3a:59:fc:c8:bc:f7:2a:ef:4f:
                    97:15:32:56:af:6b:69:8b:76:26:ce:e6:e1:f8:0b:
                    85:15:df:09:1f:2e:a0:bb:7c:29:6c:08:06:0c:fb:
                    1d:a7:8e:47:c5:35:b7:fb:85:9e:53:59:20:60:e7:
                    1e:d6:89:04:fe:35:a9:4b:c3:a4:39:91:f3:07:b5:
                    ad:bd:72:40:03:f4:b7:13:b3:d1:4d:50:27:52:b2:
                    af:39:26:86:5a:70:f6:6a:7d:a1:4c:1c:f1:3f:4c:
                    c0:13:06:fc:f6:d3:8c:38:3a:fb:2e:39:03:ca:25:
                    a4:01:1e:dd:d5:c7:13:d4:5c:63:82:5e:cb:38:1a:
                    75:44:71:94:92:ca:b0:6d:35:36:2e:13:c3:bb:51:
                    b2:ee:9f:af:4c:65:fb:56:ed:10:97:38:8c:6f:2f:
                    71:c3:e0:76:65:54:99:47:a5:b5:96:aa:b0:c1:12:
                    90:18:a9:15:eb:26:0a:c6:14:d7:c5:6a:88:6f:83:
                    e5:23:48:52:1e:c2:0f:39:ca:be:62:94:53:1b:f2:
                    7d:70:00:50:dd:88:9f:12:f8:2f:87:b0:0e:80:37:
                    ac:5e:9e:bf:bb:22:28:e6:53:42:b4:a6:f2:57:51:
                    0a:6e:ef:0b:ca:8e:6e:4d:df:ec:93:0d:e5:1b:51:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:57:6B:AA:7B:41:84:F6:4C:7F:F8:3E:2A:2D:03:DE:D9:A5:1E
            X509v3 Authority Key Identifier:
                keyid:EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:d2:9e:89:4c:10:96:7e:93:22:7e:3c:8f:12:4b:89:e6:
         64:51:d7:47:03:b4:0b:7f:b3:3c:89:7f:e9:52:e5:dd:c3:2b:
         5e:70:41:dc:cd:1c:05:54:06:1f:09:b0:44:31:bf:45:9d:13:
         46:d4:0b:b6:4b:03:58:b3:16:78:e2:d1:36:2b:40:7e:f2:ba:
         9e:02:02:4f:1a:37:82:63:20:31:08:65:f6:34:59:05:d4:c8:
         b0:c7:6a:fe:1c:73:0f:5c:23:9e:34:5c:08:07:fd:24:3d:06:
         18:43:9f:6e:a2:c9:c9:c9:eb:81:0b:21:86:fb:30:20:f8:94:
         21:6c:a6:bb:bc:57:65:1b:25:e6:9b:14:a1:e8:6b:c1:09:61:
         ed:66:4b:73:75:1d:fa:c9:70:0c:22:14:4c:b6:74:7e:df:89:
         67:f8:8e:1b:a1:ed:95:8d:f3:69:79:13:75:91:4a:24:4d:ff:
         5b:2f:7b:57:ba:5c:8b:6f:a0:6b:4e:e8:81:5d:52:5f:7f:dc:
         b8:ee:fe:7a:91:47:b0:c8:30:89:34:05:ee:d0:ec:d2:f5:3d:
         84:ae:20:4b:cf:f0:b4:48:44:b4:43:c5:4b:f5:ca:87:68:0f:
         19:e0:63:6e:54:17:2c:0a:12:5a:f6:3b:21:41:d1:f9:d2:b0:
         81:5a:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:39 2024 by rpki-client on console-fra.rpki-client.org