Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/e7rfGvuS4WTze-u8htWGwSA7MNk.roa
File:                     e7rfGvuS4WTze-u8htWGwSA7MNk.roa (raw, json)
Hash identifier:          a1E+zVDWQN7egZcTcjlwKJ9XZD7tbDOZVJXTRnfOQSE=
Subject key identifier:   7B:BA:DF:1A:FB:92:E1:64:F3:7B:EB:BC:86:D5:86:C1:20:3B:30:D9
Certificate issuer:       /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial:       04CC4DC3
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/e7rfGvuS4WTze-u8htWGwSA7MNk.roa
Signing time:             Sat 01 Jan 2022 16:02:27 +0000
ROA not before:           Sat 01 Jan 2022 16:02:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41995
IP address blocks:        88.214.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80498115 (0x4cc4dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
        Validity
            Not Before: Jan  1 16:02:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bbadf1afb92e164f37bebbc86d586c1203b30d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a1:a0:94:ac:1e:4a:80:d2:f8:52:d0:93:cb:
                    01:63:4b:ca:1c:dc:04:5b:66:93:6d:ba:c6:34:44:
                    bc:a3:1e:da:2e:ea:31:66:07:c2:e8:35:25:4b:c7:
                    ef:d1:db:53:dc:46:01:81:df:65:8d:80:e1:ad:cc:
                    93:7c:1b:d6:5d:46:fc:94:b3:89:92:c2:f4:16:13:
                    d1:fc:bd:bb:67:c8:77:c0:df:4f:9c:1d:7b:2e:ae:
                    80:ad:c2:9c:64:ba:af:af:c9:a0:6b:bd:80:e0:a7:
                    2d:b6:eb:db:4d:0a:94:36:6c:83:44:a6:cc:cf:db:
                    c1:d2:24:28:ec:4d:b0:67:28:3b:da:c0:47:9f:23:
                    b4:69:3c:66:4b:6c:f8:37:b1:da:6c:ed:c1:d7:65:
                    ae:6f:d5:69:b9:5e:51:1d:c8:35:c7:36:bc:67:20:
                    1b:6a:6d:83:df:1b:1d:92:ff:fe:1f:47:a1:7f:20:
                    c6:61:13:b1:55:39:49:b9:a8:ea:f8:df:e2:e9:48:
                    f4:d9:e9:b3:be:36:2b:a8:88:56:2f:bb:54:5d:12:
                    f8:54:1e:59:d0:0a:6e:29:63:de:41:2c:ae:a3:4d:
                    6b:52:d9:96:3b:76:d6:3b:69:9d:09:6e:23:fb:17:
                    27:dc:6f:a7:0c:ce:39:9e:1d:7c:cf:f6:c9:71:eb:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BA:DF:1A:FB:92:E1:64:F3:7B:EB:BC:86:D5:86:C1:20:3B:30:D9
            X509v3 Authority Key Identifier:
                keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/e7rfGvuS4WTze-u8htWGwSA7MNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:05:33:5f:43:4b:fc:00:60:e4:c0:cc:a4:03:10:b0:d3:99:
         7a:4b:df:96:99:68:b7:fc:ab:b9:55:81:d5:29:28:92:d4:04:
         6b:69:4c:ca:42:fe:a5:4d:b0:33:95:b4:28:22:ca:92:39:a4:
         14:e4:00:b0:e5:7d:6f:7d:d1:2a:9b:d8:3e:37:e8:ce:91:c3:
         0f:42:54:af:dc:7c:52:d8:56:05:96:3e:2f:c8:57:60:36:fc:
         93:53:31:c7:f4:38:f6:5f:42:7a:66:f7:7d:19:43:0e:6c:95:
         02:e2:ae:b6:96:08:13:0b:04:31:73:3f:a3:7e:98:2a:c0:99:
         9e:a1:a1:e5:c2:5f:8e:86:18:48:77:40:29:3a:62:52:ae:79:
         e3:ff:dd:f8:46:01:09:4e:2b:15:76:83:a1:15:a4:c6:a6:d8:
         ef:67:69:96:ad:bd:39:92:a9:cd:7c:ba:94:ff:36:d9:cf:5a:
         20:1a:81:0c:f2:70:43:a0:9e:ba:1f:15:85:04:fc:08:53:c7:
         3d:06:1e:0a:38:74:09:4c:a9:22:1c:f4:44:ae:3f:02:f2:f5:
         af:c0:f3:2e:ee:74:0c:2b:a2:29:d9:b4:ca:b4:ee:66:61:9c:
         a9:aa:d1:71:6b:b9:d1:41:56:62:76:93:92:43:ae:48:10:0f:
         a6:18:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:21 2024 by rpki-client on console-fra.rpki-client.org