Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/RLyy_htS1ZtRiAEVqvbG4ltuwNM.roa
File:                     RLyy_htS1ZtRiAEVqvbG4ltuwNM.roa (raw, json)
Hash identifier:          rIPiiv6on0jgV/woaaYrWyBp/5mxfBK1o+8By+hGrOQ=
Subject key identifier:   44:BC:B2:FE:1B:52:D5:9B:51:88:01:15:AA:F6:C6:E2:5B:6E:C0:D3
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       01821A0498CB962796FCA2235CDC1CAAD60D
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/RLyy_htS1ZtRiAEVqvbG4ltuwNM.roa
Signing time:             Wed 20 Jul 2022 05:11:24 +0000
ROA not before:           Wed 20 Jul 2022 05:11:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204591
IP address blocks:        213.139.64.0/22 maxlen: 24
                          213.139.69.0/24 maxlen: 24
                          213.139.74.0/23 maxlen: 23
                          213.139.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1a:04:98:cb:96:27:96:fc:a2:23:5c:dc:1c:aa:d6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Jul 20 05:11:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44bcb2fe1b52d59b51880115aaf6c6e25b6ec0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:1c:23:65:1e:34:16:d8:8c:48:b5:e7:e0:
                    ff:04:34:14:d9:18:a5:39:51:73:1b:b0:1b:41:7f:
                    b5:6f:db:d0:b0:de:4a:c5:18:3b:b6:9c:dc:b5:54:
                    2e:3f:40:01:be:18:0d:d1:4d:8b:1f:7a:24:1c:17:
                    1f:40:99:10:aa:f2:0e:55:0c:fa:1a:b9:79:bf:13:
                    d8:eb:2b:03:d3:e8:11:89:cc:09:45:17:d3:08:7e:
                    d5:b3:d9:ab:c1:f6:be:99:cd:0d:f5:db:a0:51:93:
                    dd:33:95:89:52:bd:fb:cd:66:a5:b6:1c:bb:5e:0a:
                    33:a8:39:1d:d0:93:5f:3b:27:c2:34:46:03:75:73:
                    7c:e8:90:0b:02:23:c3:57:5d:8f:36:95:56:f6:8d:
                    ca:69:9c:51:3e:3c:04:d9:54:82:dc:05:08:45:42:
                    9e:2e:8f:be:48:5f:e4:62:3e:1c:16:1a:6f:a2:db:
                    67:2a:9e:00:23:55:af:18:93:37:a6:13:17:d6:cc:
                    20:7f:4c:c3:65:90:6b:9b:06:74:bf:72:b5:d8:21:
                    37:0f:a7:38:81:b8:f8:c9:01:a7:63:03:42:98:29:
                    09:05:e7:7f:b5:c3:de:b8:1e:23:d0:b2:ac:aa:fd:
                    89:fa:60:ab:0c:83:3d:7d:50:c1:2e:ed:55:d5:18:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BC:B2:FE:1B:52:D5:9B:51:88:01:15:AA:F6:C6:E2:5B:6E:C0:D3
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/RLyy_htS1ZtRiAEVqvbG4ltuwNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.64.0/22
                  213.139.69.0/24
                  213.139.73.0-213.139.75.255

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:cf:fc:6a:9a:b4:4d:af:d2:82:60:24:03:4a:29:c2:ba:
         87:41:3c:13:63:79:57:c9:78:dc:3d:8b:d1:e8:51:2e:af:2a:
         ea:30:17:27:0a:71:a9:5a:12:c0:75:a3:a2:75:c7:42:03:ca:
         1e:ac:f7:ba:9c:22:3f:de:10:45:ef:04:ec:13:34:cd:8a:38:
         8f:ff:04:5f:b9:c0:c2:46:5b:49:90:4d:14:62:10:72:43:81:
         12:3d:f6:8a:d0:94:fc:ea:79:94:1c:49:98:1a:f9:ea:92:e1:
         88:60:24:60:bd:53:c3:8c:6f:e9:be:f9:5f:40:58:e7:8f:71:
         d8:38:69:f6:16:42:df:7c:90:b4:b7:89:29:bf:a7:65:26:ac:
         7f:aa:f9:1d:13:2f:60:eb:00:54:95:cd:f1:c6:00:99:83:b6:
         b7:de:01:68:03:cb:f2:e9:fa:2a:c6:69:3c:14:5a:a1:aa:e6:
         3b:35:97:4a:9f:b2:8a:41:0b:61:56:88:10:dc:5b:19:64:75:
         8c:12:d4:59:6e:f9:64:0c:04:f7:65:17:b5:b6:59:52:54:e7:
         04:d4:d7:20:e0:b6:4e:2e:4d:71:60:84:66:46:60:2f:ca:6b:
         e3:1e:59:ea:4c:7a:d9:73:df:3c:be:3e:27:ab:5f:e8:b4:77:
         f7:78:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org