Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/eLi3F0zHUOsLBtuR01MhEUbUijQ.roa
File:                     eLi3F0zHUOsLBtuR01MhEUbUijQ.roa (raw, json)
Hash identifier:          4yR+IVWiwDQO81/sxSo3o6v+caH36o3ykxvpH4KkaEo=
Subject key identifier:   78:B8:B7:17:4C:C7:50:EB:0B:06:DB:91:D3:53:21:11:46:D4:8A:34
Certificate issuer:       /CN=e32bfdccd3bb06102d47a657e60b8d7a3b044579
Certificate serial:       01889171F7D6FD8FB12DAC6FA918AD4D7BA8
Authority key identifier: E3:2B:FD:CC:D3:BB:06:10:2D:47:A6:57:E6:0B:8D:7A:3B:04:45:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yv9zNO7BhAtR6ZX5guNejsERXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/eLi3F0zHUOsLBtuR01MhEUbUijQ.roa
Signing time:             Tue 06 Jun 2023 16:02:25 +0000
ROA not before:           Tue 06 Jun 2023 16:02:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51765
IP address blocks:        212.18.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:71:f7:d6:fd:8f:b1:2d:ac:6f:a9:18:ad:4d:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bfdccd3bb06102d47a657e60b8d7a3b044579
        Validity
            Not Before: Jun  6 16:02:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78b8b7174cc750eb0b06db91d353211146d48a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:c0:f6:60:40:bc:6d:da:ab:af:eb:7a:0e:
                    70:a8:0f:51:d6:4f:4c:30:42:c8:f0:76:b1:f3:26:
                    18:39:ca:9f:ba:a8:a7:71:ef:92:51:43:cc:57:47:
                    aa:86:28:b8:61:e2:02:11:c9:8a:be:5f:25:f6:30:
                    5f:5d:17:63:e4:14:56:10:cc:4f:6e:98:06:27:3a:
                    c3:84:b9:fa:a4:14:2b:10:aa:64:2c:8b:1a:8f:46:
                    ff:39:26:25:c0:68:e4:9b:2b:92:a9:c6:59:c0:9b:
                    51:56:45:37:29:c3:cc:e3:3c:5f:dc:0f:a7:68:ff:
                    91:89:38:40:f6:72:b3:73:50:6c:e5:a6:64:3d:75:
                    2a:9f:6a:c7:cc:9d:c8:2a:f4:4c:54:3e:b7:d1:d5:
                    05:73:18:7a:db:9c:91:cf:c2:6a:36:f0:cd:9a:07:
                    f4:db:60:99:b2:12:af:09:c8:78:63:e7:11:a4:69:
                    20:73:83:c1:cd:6f:a4:b0:b3:81:19:2f:ce:2a:75:
                    71:ab:b4:99:0e:32:98:bc:5f:2a:27:8e:4e:3c:08:
                    01:c6:ae:9b:1f:44:9b:36:af:35:15:1f:da:49:d6:
                    c4:6a:e9:8e:bb:a5:cb:bf:6f:e0:03:12:30:47:f3:
                    9c:27:fa:40:aa:4f:f9:d4:56:af:65:45:9f:e8:c2:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:B7:17:4C:C7:50:EB:0B:06:DB:91:D3:53:21:11:46:D4:8A:34
            X509v3 Authority Key Identifier:
                keyid:E3:2B:FD:CC:D3:BB:06:10:2D:47:A6:57:E6:0B:8D:7A:3B:04:45:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yv9zNO7BhAtR6ZX5guNejsERXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/eLi3F0zHUOsLBtuR01MhEUbUijQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/4yv9zNO7BhAtR6ZX5guNejsERXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:da:15:56:1e:ad:c1:89:67:3f:a2:a7:c0:29:91:39:4c:
         95:da:28:0f:65:eb:6e:a4:2b:f7:e4:72:19:49:ba:2f:f9:4a:
         10:47:0f:62:a0:59:74:d2:96:a0:dd:46:81:da:66:76:13:98:
         82:e3:63:ee:67:d2:8d:d3:a9:9e:4c:d8:29:7c:53:ae:7f:52:
         ff:00:ed:eb:3a:63:71:6d:ab:f5:fc:da:79:9e:32:2e:81:5c:
         58:4c:6b:09:1b:1e:5b:bf:da:c6:bf:13:db:82:84:dd:66:66:
         71:1e:79:07:c5:13:34:29:28:81:4e:c3:93:4d:0d:71:be:c3:
         12:36:43:28:33:fd:44:45:16:a2:b3:32:ca:d5:6c:a7:41:03:
         04:20:b7:e5:3f:d6:a1:26:3f:55:68:b8:21:2b:a3:a5:f8:09:
         24:b2:2b:da:ad:17:52:ff:4e:3d:5f:4c:78:0e:a9:ed:21:69:
         63:47:42:34:b0:32:4c:50:56:3f:b5:7a:20:b4:aa:4e:b6:00:
         bd:14:d1:bc:60:43:d0:90:0f:ac:01:54:13:f3:cc:cb:44:12:
         b2:00:fe:e1:74:a9:8b:93:2e:e0:1f:73:63:37:22:b2:4b:07:
         92:29:99:74:80:2d:98:8f:2c:20:af:a7:79:06:87:4d:d2:67:
         bc:1f:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org