Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/N4CilQ_8D-tEK9p66NDMqjWIRG4.roa
File:                     N4CilQ_8D-tEK9p66NDMqjWIRG4.roa (raw, json)
Hash identifier:          8kHqW7au3Yk8zp7V4jZntCd2eOyPCPz5iKoaN66oTkA=
Subject key identifier:   37:80:A2:95:0F:FC:0F:EB:44:2B:DA:7A:E8:D0:CC:AA:35:88:44:6E
Certificate issuer:       /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial:       F0D85C
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/N4CilQ_8D-tEK9p66NDMqjWIRG4.roa
Signing time:             Sat 01 Jan 2022 05:58:06 +0000
ROA not before:           Sat 01 Jan 2022 05:58:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210905
IP address blocks:        64.187.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15784028 (0xf0d85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
        Validity
            Not Before: Jan  1 05:58:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3780a2950ffc0feb442bda7ae8d0ccaa3588446e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:b8:5b:b8:92:bc:5d:13:d7:5e:67:65:e9:
                    a8:b8:bc:a0:bf:2b:72:26:77:5f:04:79:d7:32:56:
                    a4:dd:3a:d2:32:ce:e9:a2:6e:18:73:3a:bb:93:6e:
                    0f:66:be:90:16:e5:9a:a9:03:01:b3:18:c1:f7:35:
                    41:99:b0:aa:9b:36:d4:aa:c3:67:f8:70:79:35:bc:
                    43:3f:ab:e4:76:6a:e0:f6:f7:65:c7:a9:26:7c:a2:
                    0c:e6:84:56:91:a4:12:77:81:77:1f:14:22:9c:31:
                    de:ca:66:ac:1c:e1:8e:71:81:af:4f:92:84:be:6c:
                    aa:d4:39:9f:63:de:c2:da:94:36:c1:19:73:f9:b2:
                    6d:f3:b9:c5:08:a1:e5:c5:f9:ab:8f:29:af:07:70:
                    14:c9:11:fc:08:a2:60:37:21:78:02:dd:49:f1:89:
                    a0:b4:6d:20:b2:23:2d:32:08:08:0d:5c:98:db:de:
                    22:ef:41:62:35:88:15:94:91:4f:5d:ce:ba:24:2d:
                    cd:18:41:ff:24:46:eb:6a:18:b2:e6:4c:13:f7:38:
                    a5:6b:2a:cd:d4:65:58:1e:01:19:63:56:a2:e2:6e:
                    b7:5e:c3:0c:14:05:c7:47:19:61:28:ae:f5:79:3f:
                    7a:83:b2:21:13:80:f5:a2:34:75:27:bf:5a:d3:5c:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:80:A2:95:0F:FC:0F:EB:44:2B:DA:7A:E8:D0:CC:AA:35:88:44:6E
            X509v3 Authority Key Identifier:
                keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/N4CilQ_8D-tEK9p66NDMqjWIRG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:24:a3:90:98:61:40:b2:03:dc:e9:fa:0a:9e:d5:7a:2d:
         6e:0b:9a:cc:65:e9:b7:ec:7c:f9:6e:cb:2a:49:46:91:80:63:
         9d:fa:05:15:6a:1e:71:e6:01:71:81:43:41:b9:30:8c:46:70:
         05:b5:46:a7:20:76:89:05:23:30:2a:34:53:ed:e2:a9:94:0e:
         94:6a:11:27:54:14:5e:9a:21:52:fe:72:03:ed:94:0d:8b:6b:
         9b:d9:ff:8e:3e:2a:d2:ea:fe:72:b9:be:87:c3:60:69:5a:06:
         fc:09:96:31:7d:76:06:b1:ff:5d:2b:e1:fb:6b:5c:00:2c:7b:
         36:69:2c:82:d6:6a:10:23:20:23:2a:a0:2e:09:20:52:04:3a:
         fe:76:f5:14:04:ce:9b:4b:30:77:d1:ea:9b:1a:33:c4:93:d6:
         a7:fc:cb:b7:06:cd:fa:8e:17:79:18:22:34:76:67:97:17:34:
         3d:f6:07:de:bd:06:4b:c7:48:ff:5b:ea:36:33:5c:17:8a:03:
         03:f6:89:bd:a6:72:85:39:27:f2:62:ee:f2:fc:7a:2e:45:af:
         79:22:f9:14:94:8f:b1:76:ca:a6:b2:f1:bc:a4:90:e9:0e:7a:
         6d:88:f2:44:e8:b1:ec:29:03:d1:ea:05:43:4d:aa:ad:47:1f:
         2c:3d:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org