Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/7AfEMR42W2_BzMx1r9nBn6zjNpM.roa
File:                     7AfEMR42W2_BzMx1r9nBn6zjNpM.roa (raw, json)
Hash identifier:          mSP+suETllFZUUMTgI3mBn2iMAqSN1HcT0o/IHt+6tc=
Subject key identifier:   EC:07:C4:31:1E:36:5B:6F:C1:CC:CC:75:AF:D9:C1:9F:AC:E3:36:93
Certificate issuer:       /CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Certificate serial:       0184D0F61C8D870B77F1A7CA4166579875A5
Authority key identifier: FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/7AfEMR42W2_BzMx1r9nBn6zjNpM.roa
Signing time:             Fri 02 Dec 2022 03:51:40 +0000
ROA not before:           Fri 02 Dec 2022 03:51:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        188.95.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d0:f6:1c:8d:87:0b:77:f1:a7:ca:41:66:57:98:75:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
        Validity
            Not Before: Dec  2 03:51:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec07c4311e365b6fc1cccc75afd9c19face33693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:35:8e:93:8f:52:f5:ef:7d:b2:cb:2e:c5:
                    90:ef:2d:11:c0:24:66:c5:3c:0c:4b:00:07:48:b7:
                    65:75:18:de:c4:bc:68:70:3c:30:ce:c5:00:18:35:
                    78:4e:e5:17:20:af:6e:40:ee:80:ed:6d:d8:d8:24:
                    43:f8:36:f2:c2:ef:52:ce:e8:6f:bd:81:bc:4a:5b:
                    86:f8:90:dd:e1:85:a2:c2:46:b9:9d:89:0c:4d:08:
                    de:41:01:8e:0a:05:ec:6d:fd:74:e3:7a:12:2c:aa:
                    73:d3:61:0e:79:85:69:2f:6d:19:f9:8e:17:f1:43:
                    2d:d6:ed:9f:5b:3b:11:a4:6f:fc:ae:c4:68:3d:91:
                    02:4e:ca:08:a8:2c:84:6e:42:d4:62:64:f0:21:43:
                    87:14:c2:9f:1e:8e:c2:82:b7:72:1a:47:57:65:77:
                    e6:ca:a3:56:8a:d9:e2:1e:8c:69:5d:68:ad:f6:08:
                    fd:00:8d:14:3c:79:3b:e7:42:bf:76:42:9f:f9:88:
                    0d:a7:07:88:46:f5:b4:da:e3:cf:6c:3b:e6:db:6d:
                    75:36:da:05:cf:7f:6e:67:aa:07:57:ef:ee:15:71:
                    a2:8a:b3:42:ff:c3:cc:96:7c:40:bc:03:e1:ae:8d:
                    c5:08:ed:c0:2c:99:99:c2:81:25:22:88:72:bf:19:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:C4:31:1E:36:5B:6F:C1:CC:CC:75:AF:D9:C1:9F:AC:E3:36:93
            X509v3 Authority Key Identifier:
                keyid:FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/7AfEMR42W2_BzMx1r9nBn6zjNpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:fd:90:f3:fa:5a:88:aa:d1:a6:b2:53:58:3f:5e:56:a2:
         41:f2:29:c6:ff:a2:d6:10:33:42:9a:33:4e:25:24:7c:48:14:
         ec:cd:75:de:32:66:77:7c:24:7d:d8:65:06:11:aa:34:f1:45:
         07:3b:09:50:47:62:a8:62:e0:7a:f1:dd:e1:74:22:f4:e9:57:
         aa:94:7c:c1:70:c3:9b:51:a5:ae:bf:1c:66:50:94:8e:42:de:
         5d:35:21:7d:cd:43:96:6f:5c:92:84:2a:d7:6d:41:0b:49:79:
         63:98:be:15:cd:d4:d0:1d:e9:6e:02:40:b0:20:59:d5:65:61:
         69:0c:78:db:51:9b:98:19:32:c6:dc:1c:3a:2a:ef:a0:10:5c:
         8e:97:04:85:f7:a6:30:58:4c:9f:50:6b:46:9c:81:04:54:5f:
         73:44:79:3e:79:e4:3f:c7:a7:2d:ba:e8:05:95:ed:62:c0:a2:
         96:9d:f1:00:2f:85:1d:1a:05:59:4f:2e:a5:e9:5e:e6:f3:57:
         e0:ed:37:64:90:69:e9:bf:f7:8c:8e:0c:4d:e9:24:0c:a7:51:
         0e:8d:5d:0a:24:35:fe:1b:c3:73:28:6e:cb:cb:4d:c0:c9:46:
         5f:1a:e8:dc:87:cc:85:d9:42:1b:c0:f5:69:22:b2:8c:b1:f4:
         f9:0b:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:31 2024 by rpki-client on console-fra.rpki-client.org