Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/cXT6rAY6JxlaXCUsAEsluUuVOC8.roa
File:                     cXT6rAY6JxlaXCUsAEsluUuVOC8.roa (raw, json)
Hash identifier:          zVlE6IImjYFKZRGvmVyH1EQnHFN98DB87pWuTELqBEQ=
Subject key identifier:   71:74:FA:AC:06:3A:27:19:5A:5C:25:2C:00:4B:25:B9:4B:95:38:2F
Certificate issuer:       /CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
Certificate serial:       AED114
Authority key identifier: 7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/cXT6rAY6JxlaXCUsAEsluUuVOC8.roa
Signing time:             Sat 01 Jan 2022 08:04:30 +0000
ROA not before:           Sat 01 Jan 2022 08:04:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209854
IP address blocks:        194.26.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11456788 (0xaed114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
        Validity
            Not Before: Jan  1 08:04:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7174faac063a27195a5c252c004b25b94b95382f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:5a:c3:d5:61:d7:32:78:3a:5d:f6:b4:64:
                    d0:ff:a3:72:d8:80:aa:00:c2:97:ab:e7:6d:a0:d6:
                    27:b8:4e:a0:24:a8:0b:52:30:cf:3e:89:14:02:7b:
                    4d:d1:aa:c5:46:76:67:a0:78:83:84:8e:be:b8:fa:
                    83:4a:c3:4b:90:8c:ad:01:1f:f2:6e:20:65:05:36:
                    55:1a:6b:4e:b1:f6:07:65:f7:64:be:64:42:a7:52:
                    73:39:c3:8d:89:99:3c:00:8b:84:7f:2c:ca:cf:7a:
                    d1:19:bd:c0:76:5c:7c:18:16:2c:df:b0:f1:76:4b:
                    66:f2:f7:83:00:10:92:a0:52:62:ee:3d:e1:5a:c1:
                    fa:70:c4:5e:3a:b1:32:fd:08:5f:b9:aa:68:85:98:
                    8d:ce:fe:c4:d0:4b:c3:34:11:92:bc:00:97:1d:03:
                    19:90:19:51:58:5d:70:80:24:e3:69:f2:b1:bd:2f:
                    55:a8:93:3f:75:8c:38:85:ab:d5:8e:20:f8:06:1e:
                    69:5f:c1:f2:d5:7f:7c:09:69:1a:f4:77:e0:9d:16:
                    a2:87:56:8e:25:20:4a:f8:33:79:c6:14:70:10:b2:
                    47:85:f5:44:44:26:91:95:c6:7e:b4:50:54:a1:c0:
                    18:b2:87:5d:52:58:23:c1:a9:1f:9a:bc:50:ef:f8:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:74:FA:AC:06:3A:27:19:5A:5C:25:2C:00:4B:25:B9:4B:95:38:2F
            X509v3 Authority Key Identifier:
                keyid:7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/cXT6rAY6JxlaXCUsAEsluUuVOC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:40:39:0f:0e:8c:04:1e:7f:01:18:82:cd:dc:e3:3b:c0:43:
         f9:f8:dc:3a:3d:b9:27:89:d6:fe:cb:36:24:25:c2:38:c4:d8:
         fc:07:fd:aa:b0:a6:bd:94:10:ad:7c:78:1c:ce:8d:66:72:e6:
         46:d3:22:94:0f:b8:5c:31:a7:eb:1b:76:60:4b:f0:b2:19:73:
         e6:29:39:a9:06:0f:b9:b0:48:b7:34:c0:25:5d:c7:5b:90:fe:
         53:94:24:c1:6f:ac:73:2a:2f:9b:11:50:77:78:4e:07:9d:4a:
         ef:cc:75:4c:57:d2:a0:3f:da:e4:c3:85:cf:73:ae:9e:cc:94:
         80:53:3c:81:c4:55:42:28:8c:f3:5d:92:24:78:cd:08:de:34:
         4c:ab:7b:a2:fe:b8:81:0e:76:50:7f:a4:63:4a:1d:0d:ce:5c:
         6c:67:f8:15:28:ce:cb:9c:4b:e6:da:34:48:6f:36:de:5a:db:
         dd:f3:9e:f5:37:44:43:cc:92:9f:92:3e:9d:f0:1f:a9:fe:72:
         d6:be:ea:13:34:63:69:bc:95:2f:1c:9e:dc:b8:dc:5d:59:62:
         d2:25:c8:f8:db:4f:5d:28:67:df:34:57:23:b5:f6:05:16:17:
         92:00:d7:e6:df:1f:5a:75:4a:c4:52:8f:ab:ee:2f:46:81:86:
         33:5c:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:14 2024 by rpki-client on console-ams.rpki-client.org