Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/LE1KtZuKaI9xdGLcxmW1Sm13YLA.roa
File:                     LE1KtZuKaI9xdGLcxmW1Sm13YLA.roa (raw, json)
Hash identifier:          GI76sBm6tgiYwlO9RyA7uerNSSmTCnkJNF9O9x8GCxs=
Subject key identifier:   2C:4D:4A:B5:9B:8A:68:8F:71:74:62:DC:C6:65:B5:4A:6D:77:60:B0
Certificate issuer:       /CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
Certificate serial:       04C7E497
Authority key identifier: B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/LE1KtZuKaI9xdGLcxmW1Sm13YLA.roa
Signing time:             Sat 01 Jan 2022 14:07:58 +0000
ROA not before:           Sat 01 Jan 2022 14:07:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43833
IP address blocks:        80.254.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80209047 (0x4c7e497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
        Validity
            Not Before: Jan  1 14:07:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c4d4ab59b8a688f717462dcc665b54a6d7760b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:10:b3:15:28:98:10:2d:37:f7:cf:4e:d1:
                    77:d1:0a:a1:36:92:35:6f:54:c6:cf:9d:4c:b1:61:
                    78:20:7a:e0:06:86:be:59:da:31:7c:6b:07:be:10:
                    41:8c:f2:87:6c:41:d3:e4:51:d1:84:35:d3:03:49:
                    f7:d1:73:aa:8f:da:98:35:8e:11:d5:4a:dd:3e:1c:
                    14:01:ba:13:eb:c6:95:3d:86:2d:18:e0:b7:b8:0f:
                    f7:1d:8b:7c:f9:0b:f8:e2:62:0c:4c:a4:54:35:76:
                    64:05:7f:1c:7a:86:3d:a1:24:a5:4b:94:96:f1:76:
                    08:e0:cb:7f:ff:cd:a4:d5:36:3b:cb:e0:49:2d:eb:
                    84:c5:d2:b3:f8:5a:9d:78:13:87:76:48:6f:90:5e:
                    b8:7d:69:de:47:88:5b:cf:51:81:e0:5a:8b:f1:3b:
                    26:16:37:ef:46:21:ab:43:26:f9:5e:28:7f:96:cb:
                    6e:81:03:7f:73:9b:2e:d2:19:7a:d7:c0:1f:18:2f:
                    31:d5:93:1c:80:d9:26:37:a3:bc:ca:7b:57:51:11:
                    6c:34:9b:a3:28:d3:24:72:8d:0b:d2:ff:ae:02:f6:
                    49:73:b9:cf:5e:88:eb:4f:51:49:e0:8b:1a:c3:98:
                    a0:cf:86:d5:ef:93:8c:69:0e:fc:f3:66:04:a5:f9:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:4A:B5:9B:8A:68:8F:71:74:62:DC:C6:65:B5:4A:6D:77:60:B0
            X509v3 Authority Key Identifier:
                keyid:B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/LE1KtZuKaI9xdGLcxmW1Sm13YLA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.254.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:a6:c5:81:7a:7f:9b:2b:c1:f4:7d:39:ca:1e:f9:88:a3:
         18:41:a3:50:d5:b4:c5:ff:5c:99:67:32:17:9f:14:45:0d:e9:
         3a:d4:6c:b8:50:e4:a2:bc:0b:2b:df:66:62:32:80:88:a7:75:
         96:54:5f:69:63:8b:c2:67:ce:34:fe:b2:d1:bd:75:46:a9:7e:
         d5:01:5e:ef:cd:bb:05:e5:e3:07:ff:fb:35:29:f8:16:c4:78:
         0f:85:18:15:e9:a6:6f:2a:77:26:84:4d:40:86:c9:20:c0:e6:
         34:8e:d5:6f:c6:0e:30:e9:d8:82:b6:5a:5c:92:71:18:0e:3b:
         d4:a0:64:53:12:28:b1:6e:29:46:2f:d0:5e:6b:44:aa:b8:0e:
         9f:df:8c:d5:a5:fb:57:90:cb:a6:ba:85:3b:69:92:3d:68:8f:
         82:d2:68:6c:dd:96:6c:19:da:62:99:4b:c1:b1:2e:45:ac:5a:
         1e:65:9b:69:7b:6f:45:ba:0b:5b:86:7f:a4:34:41:e2:b3:92:
         45:74:5a:bf:39:96:03:a7:e5:1c:47:49:93:8e:92:6d:dc:b9:
         ea:e7:24:a8:bd:b4:82:66:6c:94:00:0b:97:3f:71:c9:e8:41:
         78:1c:13:a4:73:d3:ed:3c:98:09:4a:76:52:30:6d:d0:60:44:
         c4:8b:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:24 2024 by rpki-client on console-ams.rpki-client.org