Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/zOeebQtdHgm--311HFgPCvIr62A.roa
File:                     zOeebQtdHgm--311HFgPCvIr62A.roa (raw, json)
Hash identifier:          qQ2tmErI/aeH7MviOJs8QmKydbvUjdkq3/kLDM0Yukc=
Subject key identifier:   CC:E7:9E:6D:0B:5D:1E:09:BE:FB:7D:75:1C:58:0F:0A:F2:2B:EB:60
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0183C1CC072F68BFC6CD42A18C8BE6696A93
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/zOeebQtdHgm--311HFgPCvIr62A.roa
Signing time:             Mon 10 Oct 2022 12:08:37 +0000
ROA not before:           Mon 10 Oct 2022 12:08:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205431
IP address blocks:        194.113.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:cc:07:2f:68:bf:c6:cd:42:a1:8c:8b:e6:69:6a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Oct 10 12:08:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cce79e6d0b5d1e09befb7d751c580f0af22beb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:68:40:7a:42:b4:8d:29:a0:8a:98:02:c9:
                    a9:23:dd:93:78:22:71:54:ab:dc:c5:01:04:53:84:
                    a6:30:b4:c3:24:71:f7:20:e2:c5:9b:1f:4f:c2:67:
                    59:de:77:a9:e3:49:87:c4:9b:42:18:02:2c:d6:7b:
                    1b:3f:54:c5:1b:7d:51:f3:85:02:5d:00:75:e0:9b:
                    24:fb:51:e3:82:c8:52:d5:92:f4:b6:0a:9e:2f:f5:
                    3d:02:78:f1:f2:4b:4e:f5:7b:df:b8:8c:77:00:39:
                    f4:e4:1a:93:88:2a:f6:e9:9c:eb:84:d0:0e:2b:5a:
                    a7:dd:02:72:ba:d0:fa:cc:d5:35:ef:ef:68:b6:8b:
                    1d:f7:f3:04:d5:47:e3:5d:25:6d:8f:5b:95:e7:71:
                    3a:b6:df:41:b5:87:16:59:7f:ad:08:a2:a2:32:85:
                    b9:e8:17:21:48:85:5b:cb:2f:9c:76:57:10:4e:e9:
                    b4:b9:78:3d:28:59:ac:4b:5e:44:93:33:be:c8:5d:
                    21:c3:fc:ea:ab:f6:79:09:d9:d6:83:9c:d3:3a:1b:
                    37:d0:3e:7a:f5:c9:d3:fc:65:f7:00:f8:3e:c8:49:
                    7b:8b:c7:16:df:f9:fd:ff:f0:af:16:04:bc:37:9f:
                    c5:44:39:75:7d:8b:c2:cf:7d:1f:6a:54:5c:47:45:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E7:9E:6D:0B:5D:1E:09:BE:FB:7D:75:1C:58:0F:0A:F2:2B:EB:60
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/zOeebQtdHgm--311HFgPCvIr62A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:96:ef:45:43:22:76:2e:fa:0a:a8:08:15:e6:bf:c1:23:16:
         46:cd:fc:89:4a:41:aa:12:28:b1:94:08:cc:1d:73:89:dc:2d:
         94:8a:35:97:56:f0:8d:e7:dd:2b:5d:dd:d2:03:eb:bc:7f:aa:
         aa:3c:41:ed:15:40:02:83:ce:ca:29:2a:32:c3:ec:32:49:11:
         4d:c5:9c:9f:f6:3e:28:6c:85:eb:07:2f:ed:83:63:e7:07:a0:
         82:5f:d6:29:6e:ef:b4:25:ea:b1:74:48:5c:16:05:d2:3e:d4:
         0d:25:bc:7f:aa:79:a6:63:df:2e:40:aa:ac:2c:08:8b:a5:b6:
         95:23:a9:42:f3:5c:36:df:f8:23:66:8a:26:86:a4:8a:0c:9b:
         04:2e:ac:2d:25:22:6c:29:cc:4b:4a:71:9d:19:98:83:3b:cd:
         7e:3b:bc:45:66:ba:12:83:df:20:1f:a3:25:36:f6:26:ce:a0:
         9d:b1:d6:8f:b3:79:87:46:a1:04:51:bc:ed:17:28:5e:5e:fa:
         ff:5c:87:67:42:5e:57:bc:31:59:5d:ca:74:34:b7:2a:36:6a:
         16:cc:6a:05:f4:a5:7f:67:c8:67:38:21:42:32:04:94:de:b6:
         9a:e2:d7:9f:6b:6b:09:b5:fb:21:86:72:f8:8a:48:91:ea:58:
         a6:29:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org