Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/EBJu_x0Cfv-E3SRS2gs2kj4HJEc.roa
File:                     EBJu_x0Cfv-E3SRS2gs2kj4HJEc.roa (raw, json)
Hash identifier:          55XtmlaBoYwQ5VBUE1zyNt6RjgnooCGCHFpLVoQmpEM=
Subject key identifier:   10:12:6E:FF:1D:02:7E:FF:84:DD:24:52:DA:0B:36:92:3E:07:24:47
Certificate issuer:       /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial:       018CC5001A21215A11D596588773022F5729
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/EBJu_x0Cfv-E3SRS2gs2kj4HJEc.roa
Signing time:             Mon 01 Jan 2024 12:29:27 +0000
ROA not before:           Mon 01 Jan 2024 12:29:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212384
IP address blocks:        212.46.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:1a:21:21:5a:11:d5:96:58:87:73:02:2f:57:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
        Validity
            Not Before: Jan  1 12:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10126eff1d027eff84dd2452da0b36923e072447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8f:cb:21:f1:5e:4e:38:8e:01:9e:83:60:65:
                    a6:4a:41:d9:02:8a:d8:dd:d4:18:c7:a1:ab:45:df:
                    95:af:76:5a:98:e5:e1:86:77:f1:f1:cc:4e:4b:34:
                    34:0e:e2:2b:01:e4:bf:d2:4b:bb:44:9a:4e:35:5e:
                    98:dc:90:dd:1b:50:30:54:bb:aa:48:73:9c:9d:d3:
                    64:db:af:a1:f0:4b:ed:b2:0e:92:1e:f0:1b:54:38:
                    b9:7f:c3:1f:41:2d:a7:98:fe:4b:2c:93:ca:03:3c:
                    92:5f:86:e7:3c:e1:13:11:19:c7:c2:8f:3b:7e:39:
                    ab:b9:0c:fa:03:b4:ad:7b:9d:f4:81:73:d6:a0:7c:
                    50:eb:c5:81:62:f5:af:15:29:37:6c:23:6e:9b:8c:
                    d9:6a:1c:aa:d1:bf:e4:a7:ea:44:86:ba:99:f7:13:
                    e7:55:22:2b:81:80:92:ce:04:74:31:e6:5c:f0:86:
                    3c:eb:38:75:44:82:19:e5:4b:3f:bf:d7:6d:ae:9a:
                    11:cf:42:3a:9b:e4:c4:7a:80:c4:ed:84:1f:19:0a:
                    dd:8c:13:2f:86:b5:23:6c:dc:2f:d1:d1:0f:94:be:
                    87:8c:fa:6e:f4:6b:9c:53:93:99:0d:63:90:c9:8c:
                    fb:4f:1f:b4:bb:f7:50:97:94:fc:85:a2:14:39:b3:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:6E:FF:1D:02:7E:FF:84:DD:24:52:DA:0B:36:92:3E:07:24:47
            X509v3 Authority Key Identifier:
                keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/EBJu_x0Cfv-E3SRS2gs2kj4HJEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:60:87:ce:cf:17:59:ce:69:bb:4b:04:35:30:df:c9:27:71:
         de:11:58:1b:8d:b5:c2:83:8e:fd:42:4c:2f:fe:4e:9c:dd:44:
         18:ee:8d:59:fe:a9:b7:76:e9:41:82:a1:3c:bc:19:43:b6:c7:
         4f:74:39:8e:5c:4d:a6:71:ef:3b:39:09:32:5e:48:99:a2:db:
         07:f0:7d:33:d6:79:cc:f2:8a:29:50:f7:66:91:1d:79:48:f1:
         20:51:ec:39:06:a6:61:9d:55:6b:dd:c9:69:1f:c5:97:64:bf:
         e8:c9:15:95:24:7d:60:22:64:eb:46:e0:9c:42:2c:99:21:3b:
         e0:31:e5:34:be:55:09:04:ee:b7:df:66:6e:11:01:c7:3d:95:
         d8:8c:62:2d:5c:ef:e4:45:53:8e:f3:ce:42:50:15:c9:12:af:
         67:b0:6d:6c:9c:4d:46:80:7d:7f:27:6c:92:7c:a1:1c:9c:94:
         89:98:ce:45:9e:b2:0f:35:2a:a3:9d:19:4d:45:2b:8b:91:c5:
         9c:2c:af:d7:89:c1:26:dc:3e:76:28:13:f4:cf:a9:c7:57:f3:
         40:9a:4d:7c:4e:48:1d:76:d4:92:9e:59:05:6b:df:c0:cf:7a:
         6a:96:e1:2c:67:a0:cc:c5:cc:01:84:6d:33:26:b9:86:39:6d:
         e1:2f:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org