Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/ftP0M_Stig0v44cPm9v7P36N3g4.roa
File:                     ftP0M_Stig0v44cPm9v7P36N3g4.roa (raw, json)
Hash identifier:          eIH2kePRV96t4x3bTE9s8PGRjBZ6SS6yWTuOuUZ9e74=
Subject key identifier:   7E:D3:F4:33:F4:AD:8A:0D:2F:E3:87:0F:9B:DB:FB:3F:7E:8D:DE:0E
Certificate issuer:       /CN=52f2b1b3a98e83c06162550f791f4bcaa313903a
Certificate serial:       01839E9C47B7981E064BC5389FB5714D6295
Authority key identifier: 52:F2:B1:B3:A9:8E:83:C0:61:62:55:0F:79:1F:4B:CA:A3:13:90:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvKxs6mOg8BhYlUPeR9LyqMTkDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/ftP0M_Stig0v44cPm9v7P36N3g4.roa
Signing time:             Mon 03 Oct 2022 16:09:45 +0000
ROA not before:           Mon 03 Oct 2022 16:09:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35608
IP address blocks:        185.207.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:9e:9c:47:b7:98:1e:06:4b:c5:38:9f:b5:71:4d:62:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f2b1b3a98e83c06162550f791f4bcaa313903a
        Validity
            Not Before: Oct  3 16:09:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ed3f433f4ad8a0d2fe3870f9bdbfb3f7e8dde0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:61:cb:82:de:1a:6b:2d:d5:0f:6b:3a:ff:
                    17:62:7d:7a:fd:e5:70:ca:3d:63:2e:cd:4c:72:66:
                    42:27:be:31:f3:ac:b9:9d:54:d5:5a:b3:21:5f:78:
                    6b:90:b7:0e:e2:24:ae:1b:79:c1:fa:8b:fc:a6:49:
                    5b:d3:82:12:63:09:fb:a1:ba:54:c7:0f:f3:9e:7c:
                    3a:08:80:a0:7a:c6:84:f1:2e:0e:8c:5c:8a:dd:da:
                    01:90:c9:f4:fc:26:98:02:e8:0e:23:90:aa:a1:98:
                    50:b7:bd:98:ce:26:d9:5c:7f:85:33:d1:f9:9e:b7:
                    ac:38:4f:cc:da:ba:e3:12:cd:a0:ab:86:01:3e:bb:
                    24:ac:70:02:dd:32:c2:57:fe:2b:de:7e:03:21:cf:
                    31:33:99:3e:fa:ec:d6:12:92:fa:d2:c2:16:92:1f:
                    f7:ab:94:ca:09:b9:17:e8:26:69:db:8c:a1:3c:c7:
                    97:06:12:5d:4a:f1:61:cb:f2:f9:a7:43:dc:d6:70:
                    9d:46:56:b8:72:bc:2b:12:7f:cc:e4:9a:86:60:6e:
                    87:0c:b1:b3:62:96:0a:c9:ed:6d:30:47:da:10:15:
                    16:4d:a0:59:c9:46:e6:d2:43:45:cd:ba:31:7b:8f:
                    10:18:89:9e:bd:a8:ad:d4:b8:f2:b7:38:16:88:98:
                    4c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:F4:33:F4:AD:8A:0D:2F:E3:87:0F:9B:DB:FB:3F:7E:8D:DE:0E
            X509v3 Authority Key Identifier:
                keyid:52:F2:B1:B3:A9:8E:83:C0:61:62:55:0F:79:1F:4B:CA:A3:13:90:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvKxs6mOg8BhYlUPeR9LyqMTkDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/ftP0M_Stig0v44cPm9v7P36N3g4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/UvKxs6mOg8BhYlUPeR9LyqMTkDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:fc:d7:c9:7b:59:6c:3f:61:b4:b2:e1:d2:76:0e:8f:7f:
         e3:d4:8e:8b:b4:5e:6b:58:f4:83:53:39:e0:b3:8c:3c:bd:ce:
         f8:17:ec:76:1e:03:dc:8c:e6:83:0a:a6:cc:27:99:8b:5a:ee:
         53:a2:c0:dc:da:9d:13:6d:01:71:32:9a:5e:a6:8f:c6:26:5e:
         47:67:89:49:c7:2b:fa:94:af:6f:5b:f5:ba:24:ed:f9:2e:70:
         5a:01:e1:f4:82:81:e2:21:50:ea:0f:f3:47:c3:3e:ab:96:e2:
         38:c5:93:c1:00:ec:5c:68:8e:f8:bc:c2:90:23:a1:e4:30:67:
         98:06:ab:0e:d2:54:36:81:77:3e:a1:eb:40:3c:32:65:4b:6c:
         46:76:8a:3d:50:5b:fe:b3:22:34:93:9f:ac:7c:28:13:94:5f:
         4f:d4:53:91:24:01:e4:38:1a:b2:80:4a:0e:2f:dd:35:bf:2b:
         f3:a6:ac:c6:6a:16:3f:5a:21:fe:9f:52:c9:2d:e3:43:e2:b7:
         92:f3:54:c8:b3:ee:7b:fc:bb:8e:95:f2:9f:5d:d5:ff:d0:79:
         e8:53:d2:2e:f4:a2:6e:55:e7:79:f1:6b:f6:13:82:65:14:7a:
         34:ba:4e:9f:96:4f:08:81:4d:0a:7a:0f:14:0f:4b:49:d3:c3:
         fc:f4:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:21 2024 by rpki-client on console-fra.rpki-client.org