Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/31OHOGs3NbrebwTXh6RaXuPYD-o.roa
File:                     31OHOGs3NbrebwTXh6RaXuPYD-o.roa (raw, json)
Hash identifier:          psQAk6cNe1tIghzrGl1+Pocr9OLxwaME2idkN9gHhi8=
Subject key identifier:   DF:53:87:38:6B:37:35:BA:DE:6F:04:D7:87:A4:5A:5E:E3:D8:0F:EA
Certificate issuer:       /CN=cf073901dd8550f6c24fca46ae266091c8064886
Certificate serial:       076ECF
Authority key identifier: CF:07:39:01:DD:85:50:F6:C2:4F:CA:46:AE:26:60:91:C8:06:48:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwc5Ad2FUPbCT8pGriZgkcgGSIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/31OHOGs3NbrebwTXh6RaXuPYD-o.roa
Signing time:             Sat 01 Jan 2022 00:55:24 +0000
ROA not before:           Sat 01 Jan 2022 00:55:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42932
IP address blocks:        194.110.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487119 (0x76ecf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf073901dd8550f6c24fca46ae266091c8064886
        Validity
            Not Before: Jan  1 00:55:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df5387386b3735bade6f04d787a45a5ee3d80fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:9a:85:68:a4:2b:81:9d:d5:d0:80:ca:88:
                    34:fb:59:f3:ee:68:7a:40:bf:2c:ee:de:c5:9d:ed:
                    05:27:2b:e7:9f:e4:80:65:b3:e5:d1:20:e0:68:14:
                    c9:54:e9:3f:f5:b3:fe:ec:c8:ed:be:cc:24:f2:76:
                    4b:63:72:45:01:62:24:b6:6d:80:c2:9e:56:82:4c:
                    a4:ca:6d:43:02:c5:bc:12:fe:57:79:dc:52:d2:ff:
                    ab:09:af:e3:d0:6d:66:bc:3e:c6:e6:22:22:2b:c8:
                    02:82:a3:aa:b5:7e:d4:a0:14:3d:5d:be:f4:c4:bb:
                    3d:92:bb:a8:15:87:14:22:15:60:47:00:c7:d8:de:
                    f1:84:8d:86:f4:ef:a4:8f:c7:7a:fb:83:b8:2d:33:
                    8f:f9:46:d4:e9:ff:ac:63:35:c2:08:61:83:4b:85:
                    cb:67:a8:0d:12:e7:29:48:80:03:b0:79:52:40:8d:
                    73:cd:5a:6b:ff:5c:91:c5:b4:a9:bc:04:cd:7b:47:
                    5e:6b:db:b6:99:69:59:05:06:85:2a:4f:15:1d:87:
                    c0:dd:f9:ac:72:38:50:b9:7d:65:cc:64:66:6b:8e:
                    d2:ac:2a:40:12:47:55:84:25:c2:e7:95:62:9a:93:
                    9b:b9:d3:8c:d0:96:21:cd:ed:9f:be:9d:d2:94:0e:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:87:38:6B:37:35:BA:DE:6F:04:D7:87:A4:5A:5E:E3:D8:0F:EA
            X509v3 Authority Key Identifier:
                keyid:CF:07:39:01:DD:85:50:F6:C2:4F:CA:46:AE:26:60:91:C8:06:48:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwc5Ad2FUPbCT8pGriZgkcgGSIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/31OHOGs3NbrebwTXh6RaXuPYD-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:68:7e:78:09:dc:22:73:e7:bc:2b:47:d9:62:86:ff:85:49:
         a6:5d:fd:9c:56:7c:dc:01:f8:01:d2:87:ac:14:ee:20:2b:e2:
         b5:7c:24:f7:c7:82:8a:61:06:a5:75:dc:28:a1:e8:39:5d:2d:
         23:86:44:66:f7:b3:d3:ba:a6:bf:9e:36:c5:39:18:47:c8:32:
         80:d1:16:ab:65:d6:b2:d7:1c:59:a9:62:08:9f:50:5b:34:a4:
         fa:3e:11:4e:35:73:42:52:97:34:78:69:0f:cb:65:51:ef:b3:
         e2:7a:08:3f:19:67:29:59:15:47:1c:78:6a:d5:79:87:c6:4f:
         5c:c2:9e:17:e2:72:5c:94:b2:37:ac:7f:36:e1:7f:d7:6d:7e:
         66:da:fd:13:1b:28:fe:99:e2:62:e2:d3:a3:73:37:b6:f9:c7:
         37:cc:ba:67:37:76:72:4a:45:73:43:ea:c5:b1:a3:84:c2:89:
         1e:ea:c1:81:93:13:b4:55:65:d7:43:1d:80:5a:c5:ab:36:e5:
         98:2c:26:cc:69:42:bc:bb:5d:b9:be:be:78:b4:20:60:52:d3:
         d2:8e:55:0c:16:09:0d:6c:0d:fa:c1:ec:a3:73:7d:7e:40:5a:
         ec:1c:ac:d2:04:29:e9:63:5e:af:87:9a:01:6c:cc:4e:83:19:
         32:7c:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org