Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/7DGiH_mQ7SUva9LffdqEzDjk9jE.roa
File:                     7DGiH_mQ7SUva9LffdqEzDjk9jE.roa (raw, json)
Hash identifier:          pxku+olrN1LtjPYZ+4Hwcx/Xv6W8RWgufKOCrm2cbiw=
Subject key identifier:   EC:31:A2:1F:F9:90:ED:25:2F:6B:D2:DF:7D:DA:84:CC:38:E4:F6:31
Certificate issuer:       /CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Certificate serial:       8CD4FB
Authority key identifier: 67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/7DGiH_mQ7SUva9LffdqEzDjk9jE.roa
Signing time:             Sat 01 Jan 2022 04:01:20 +0000
ROA not before:           Sat 01 Jan 2022 04:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24875
IP address blocks:        212.18.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9229563 (0x8cd4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
        Validity
            Not Before: Jan  1 04:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec31a21ff990ed252f6bd2df7dda84cc38e4f631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:bb:ef:ae:15:6f:4b:50:27:de:f5:72:dd:
                    cb:c1:57:4b:e8:3c:b0:76:2a:38:81:fd:aa:0e:10:
                    35:36:06:e7:2a:14:d6:ea:1b:73:77:02:06:c2:23:
                    3a:9e:7a:4c:16:b3:bd:18:5f:24:8b:0f:11:23:80:
                    05:08:29:bd:47:9e:07:f3:c8:b3:d5:b5:25:4d:c8:
                    b5:d7:19:f8:fd:ab:3e:2a:0d:41:fa:c8:55:b7:d4:
                    22:dc:20:14:03:a5:1a:23:d9:19:78:32:a0:c9:13:
                    9a:f4:e2:cb:1a:88:3b:09:28:3d:8d:f5:b1:bc:8d:
                    02:79:79:1c:e9:71:b8:47:57:94:12:a3:12:61:f2:
                    3a:86:fc:69:b6:e9:7f:f7:52:1e:c4:b9:d4:b6:e5:
                    dd:88:b6:96:17:1a:70:28:0c:97:69:17:18:b1:66:
                    4c:96:48:0b:a4:9d:ed:0d:0e:e9:e6:bf:35:51:2d:
                    14:d6:fc:0f:03:59:9a:9f:44:8f:03:46:9d:b9:19:
                    ce:27:fe:15:d4:aa:02:9b:69:c9:79:2f:e9:23:54:
                    2f:71:e3:89:e8:c4:7e:3d:8a:62:07:6c:44:e9:94:
                    0d:da:30:88:6d:1d:d6:b4:dc:63:01:fb:84:dd:e6:
                    ac:46:0e:90:89:45:c8:b7:45:48:4e:23:a7:7c:83:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:A2:1F:F9:90:ED:25:2F:6B:D2:DF:7D:DA:84:CC:38:E4:F6:31
            X509v3 Authority Key Identifier:
                keyid:67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/7DGiH_mQ7SUva9LffdqEzDjk9jE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:74:f9:3d:64:ae:01:93:57:ee:f4:8a:59:ce:ed:38:14:b2:
         89:ca:ed:ea:b6:34:94:42:54:23:e7:43:72:ee:05:b0:fc:5b:
         4f:6e:3a:8e:8f:87:33:53:cd:e8:62:bc:c8:76:87:cd:0d:1c:
         9a:39:d5:22:a7:73:27:a4:4d:99:ab:14:e6:b3:67:92:12:af:
         0e:d0:d0:e6:c6:0c:0f:96:5a:c0:cf:97:a9:cf:45:2a:5c:16:
         b7:2c:e3:31:0c:36:40:36:08:05:4e:81:97:4a:5a:3a:8a:17:
         89:a1:15:80:e2:44:01:e7:5e:47:38:66:9a:fd:f3:26:aa:18:
         f8:1a:e2:33:db:96:5f:52:9f:16:31:f2:37:44:42:4f:5d:c0:
         df:98:2e:7a:7f:b0:4e:3a:5b:e4:9d:af:98:5d:25:b2:d1:c6:
         d8:5e:05:0b:9e:3c:aa:09:88:3f:d1:70:8c:3f:8d:b3:d8:6d:
         9a:d0:40:6a:a1:5c:35:5b:21:7a:3e:81:81:4b:93:13:22:99:
         dd:97:d4:b6:a2:aa:ac:d1:b6:a2:14:c0:02:e3:f4:ff:4a:c5:
         9e:f9:36:1d:45:6e:73:3c:7b:27:50:8f:49:e8:97:07:d3:85:
         ae:0a:f9:b0:fb:e8:24:e4:e8:aa:fe:a8:87:ba:81:1d:b2:67:
         f7:17:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:23 2024 by rpki-client on console-ams.rpki-client.org