Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/W7NUumcvvCmS1ktz18Z-oi5TAxM.roa
File:                     W7NUumcvvCmS1ktz18Z-oi5TAxM.roa (raw, json)
Hash identifier:          9Ky3Am+PvwbCUFZZLVx5TMbIO0vrhVOQCVKEoPYv7l0=
Subject key identifier:   5B:B3:54:BA:67:2F:BC:29:92:D6:4B:73:D7:C6:7E:A2:2E:53:03:13
Certificate issuer:       /CN=e45060149aff5c4f908feea9b4123fcfddf0513c
Certificate serial:       F47C20
Authority key identifier: E4:50:60:14:9A:FF:5C:4F:90:8F:EE:A9:B4:12:3F:CF:DD:F0:51:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5FBgFJr_XE-Qj-6ptBI_z93wUTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/W7NUumcvvCmS1ktz18Z-oi5TAxM.roa
Signing time:             Thu 12 May 2022 10:44:02 +0000
ROA not before:           Thu 12 May 2022 10:44:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        37.16.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16022560 (0xf47c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45060149aff5c4f908feea9b4123fcfddf0513c
        Validity
            Not Before: May 12 10:44:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bb354ba672fbc2992d64b73d7c67ea22e530313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:30:08:87:b1:4c:fd:57:70:59:27:32:b2:
                    b5:a9:c6:60:ff:77:dc:48:6d:78:ed:2e:7e:a9:23:
                    81:0f:ed:d8:11:53:17:14:e0:57:2e:6a:e6:65:b4:
                    a5:a1:28:f5:af:da:7c:dd:f9:38:4a:4c:bc:30:41:
                    ad:7b:9a:e2:27:6b:1f:9e:45:83:e0:1d:f9:93:2c:
                    26:ec:16:18:c4:e6:94:73:67:e1:e2:84:59:cb:78:
                    36:ac:74:a8:31:fa:05:3b:32:ca:e2:23:a2:3a:2e:
                    30:2d:cb:69:4c:00:e4:15:bb:87:0b:b5:ec:18:ce:
                    48:0e:d4:2f:a4:f9:04:4c:98:67:ab:f4:81:ec:79:
                    8b:d6:1d:84:4a:e2:89:3f:e4:e9:a7:bb:2a:66:f0:
                    6a:e8:82:82:1d:53:90:f7:f7:c6:27:51:50:4a:36:
                    67:65:21:d7:40:7f:80:49:c2:11:b3:ea:0a:d6:d0:
                    6c:6a:d7:e0:2d:95:c7:a5:6e:7f:e6:c2:fa:66:33:
                    7c:5a:ab:19:8c:89:fb:3d:cb:f6:27:1b:96:ca:14:
                    65:9b:90:42:09:d1:13:09:1f:bd:05:50:4b:ef:14:
                    67:58:01:95:d2:d5:ee:ca:8e:34:d5:d1:04:83:12:
                    95:ab:a4:81:6d:05:de:de:41:45:67:09:4a:d4:0e:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B3:54:BA:67:2F:BC:29:92:D6:4B:73:D7:C6:7E:A2:2E:53:03:13
            X509v3 Authority Key Identifier:
                keyid:E4:50:60:14:9A:FF:5C:4F:90:8F:EE:A9:B4:12:3F:CF:DD:F0:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FBgFJr_XE-Qj-6ptBI_z93wUTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/W7NUumcvvCmS1ktz18Z-oi5TAxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/5FBgFJr_XE-Qj-6ptBI_z93wUTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:70:47:c5:f2:39:68:8a:d5:a4:16:93:3c:f5:8b:61:0f:
         45:0f:a8:9a:83:be:a1:02:eb:95:be:f2:7a:83:4b:7a:f4:5c:
         43:c2:9f:63:e8:51:c6:fc:e9:82:d5:85:b3:76:b0:1b:62:3b:
         81:7b:ec:ac:a7:cd:41:01:0a:a2:63:98:86:17:e3:41:da:7e:
         b3:bf:c5:8f:2f:ae:30:b4:38:89:d0:ba:8f:e4:03:86:74:91:
         fe:15:4d:ba:b6:ed:9f:eb:30:93:bd:9f:bd:bd:d5:5b:6c:06:
         f3:de:91:bd:64:6a:37:0f:15:b9:ea:cd:6f:ec:55:8a:2d:c3:
         07:74:dd:1a:0b:03:d6:4c:fb:34:5c:5b:46:c6:15:00:8d:a1:
         96:01:63:b3:c6:e5:ee:5d:ef:c2:b9:fe:05:94:26:2b:d6:4d:
         4a:39:57:0a:c7:88:65:07:5b:2f:be:8a:76:76:78:09:b6:9e:
         83:26:a7:d3:bf:e7:53:0f:a6:59:e4:0d:47:40:5e:a1:5a:66:
         4e:10:f5:e9:76:42:78:9e:18:52:ae:a6:c7:c0:83:43:a1:4e:
         89:f6:32:67:0f:59:13:2b:8b:b3:5f:ad:fe:78:55:3c:5f:cb:
         a0:57:36:6f:bb:18:0a:eb:83:61:fb:a7:e1:94:b6:06:9f:6f:
         34:2f:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org