Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/U_4Y9tntx_t_uK_9oJibTEIwmLg.roa
File:                     U_4Y9tntx_t_uK_9oJibTEIwmLg.roa (raw, json)
Hash identifier:          s9kLif90VCLQ6dwG5KbQCDv3AXCi1/DKjeoskarWOcA=
Subject key identifier:   53:FE:18:F6:D9:ED:C7:FB:7F:B8:AF:FD:A0:98:9B:4C:42:30:98:B8
Certificate issuer:       /CN=c2075ef63bf652fdbd05af61743e1bc29396a2f7
Certificate serial:       B7F900
Authority key identifier: C2:07:5E:F6:3B:F6:52:FD:BD:05:AF:61:74:3E:1B:C2:93:96:A2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wgde9jv2Uv29Ba9hdD4bwpOWovc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/U_4Y9tntx_t_uK_9oJibTEIwmLg.roa
Signing time:             Sat 01 Jan 2022 06:06:05 +0000
ROA not before:           Sat 01 Jan 2022 06:06:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        31.222.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12056832 (0xb7f900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2075ef63bf652fdbd05af61743e1bc29396a2f7
        Validity
            Not Before: Jan  1 06:06:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53fe18f6d9edc7fb7fb8affda0989b4c423098b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:b2:65:35:9d:84:49:e5:59:d2:36:4b:37:
                    c5:22:22:4d:3c:e9:93:c9:e0:b1:64:4a:67:0c:bb:
                    5e:c2:49:b4:cb:7e:c4:da:da:de:d1:ea:09:10:65:
                    d6:0a:2f:1b:d5:96:20:1b:f3:2f:83:22:ed:85:2a:
                    6a:aa:82:a9:ac:49:91:e2:ab:28:99:f8:6d:c3:bf:
                    67:c4:da:a3:8f:29:3e:65:e2:3e:d0:23:25:9b:5d:
                    66:b6:05:fb:3b:8b:cd:6d:9c:3d:ab:6f:4a:96:91:
                    c1:1b:cf:01:ac:49:93:5b:6a:ae:d4:b0:ee:91:54:
                    57:1c:5e:a9:90:a9:60:17:ab:de:c2:cd:ae:be:37:
                    82:ce:f7:59:9a:34:f9:1b:4f:94:66:00:26:b5:83:
                    66:af:c5:e8:56:89:df:65:3a:57:ca:fb:d6:e1:3b:
                    b2:26:b0:97:46:c5:ab:22:9e:59:e8:00:8b:50:04:
                    03:77:a4:04:48:15:14:26:0e:68:16:3f:08:e4:52:
                    4b:6d:c1:f2:84:e0:e4:9a:e9:cb:bc:1a:e1:c4:71:
                    e8:06:54:17:f9:4e:ad:b2:08:8a:95:62:c1:e2:9b:
                    ce:b7:54:e0:fc:89:a2:a6:d5:10:f7:ec:57:dd:09:
                    f6:6a:27:e3:76:cd:e1:4c:e9:37:df:49:08:86:3f:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FE:18:F6:D9:ED:C7:FB:7F:B8:AF:FD:A0:98:9B:4C:42:30:98:B8
            X509v3 Authority Key Identifier:
                keyid:C2:07:5E:F6:3B:F6:52:FD:BD:05:AF:61:74:3E:1B:C2:93:96:A2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgde9jv2Uv29Ba9hdD4bwpOWovc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/U_4Y9tntx_t_uK_9oJibTEIwmLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/wgde9jv2Uv29Ba9hdD4bwpOWovc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:dd:e6:29:37:5a:1c:42:c7:68:12:55:af:b0:34:9c:85:
         56:84:0c:c1:38:58:3b:a5:3c:27:71:63:67:78:01:b3:37:d0:
         24:92:0b:fd:42:2c:ae:01:38:ad:d7:f4:a5:d0:ef:39:17:7b:
         5d:bb:1e:f9:71:35:6c:fd:ef:f4:84:46:23:fb:40:73:ec:45:
         ef:0c:f3:47:9f:d3:68:53:d2:bb:95:87:d3:92:ba:16:f4:71:
         ae:bb:45:5c:89:67:40:3b:5c:30:e6:40:1d:88:92:d1:80:16:
         60:5e:44:c3:ba:97:28:49:64:36:34:4a:c4:f5:b7:72:db:3a:
         4e:8e:1a:50:c8:95:fc:1e:0b:2c:37:50:cf:c9:5d:f1:f6:7e:
         8b:55:14:43:15:64:41:13:28:41:4f:b9:06:b6:24:ac:4f:bb:
         65:45:d7:d4:d8:a4:ba:2a:c8:8f:2d:cb:53:0a:a3:fa:75:ba:
         ac:12:1b:e2:93:90:d4:6c:11:90:39:49:0e:5b:27:8d:fa:4c:
         21:bb:d4:16:b0:91:41:b7:64:94:a5:66:2d:75:59:5c:39:10:
         ec:6a:fa:da:70:8a:a0:a4:33:ff:d8:d1:e4:d8:18:c3:7f:8d:
         b3:9a:9c:fd:38:ad:58:34:f0:77:22:3e:7a:e0:06:bf:3e:1c:
         0e:c0:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:24 2024 by rpki-client on console-fra.rpki-client.org