Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa
File:                     e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa (raw, json)
Hash identifier:          OTFzove1jz1EUSwlVXJh+SC6mpl5u21u13cgxRp4F74=
Subject key identifier:   7B:4E:69:33:53:AF:FB:5D:FF:43:85:70:BB:D3:95:C0:77:CA:E3:56
Certificate issuer:       /CN=907b9d22c4730d56b62a4bedca00d9d6c44bd56f
Certificate serial:       9070A0
Authority key identifier: 90:7B:9D:22:C4:73:0D:56:B6:2A:4B:ED:CA:00:D9:D6:C4:4B:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kHudIsRzDVa2KkvtygDZ1sRL1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa
Signing time:             Sat 01 Jan 2022 01:03:25 +0000
ROA not before:           Sat 01 Jan 2022 01:03:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50340
IP address blocks:        195.96.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9466016 (0x9070a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907b9d22c4730d56b62a4bedca00d9d6c44bd56f
        Validity
            Not Before: Jan  1 01:03:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b4e693353affb5dff438570bbd395c077cae356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:22:61:b2:41:fc:06:0f:b2:c9:42:d3:62:
                    cc:26:e0:75:0f:d0:10:61:a5:22:99:7f:44:a2:be:
                    33:7b:62:d5:61:4d:6a:d2:a9:f8:aa:36:c5:0a:d9:
                    56:57:58:a9:92:d4:31:9c:a1:07:23:34:65:94:95:
                    cb:de:f4:bb:3b:ae:82:46:24:fd:34:08:60:b5:e6:
                    72:d9:5d:74:3f:09:54:e9:f7:06:7f:8f:ea:5b:7f:
                    7b:d1:e6:79:88:22:26:3f:43:33:ae:f8:45:81:6a:
                    6b:90:fa:e3:98:4a:7e:0c:21:8e:66:43:11:ff:cb:
                    98:d3:fd:a0:bb:bb:f9:38:a1:ac:60:cf:8f:6a:a2:
                    94:49:b2:f6:10:87:10:77:26:f3:73:1a:26:fa:71:
                    e0:a0:30:2b:87:80:a0:2f:6e:4b:e0:22:eb:60:a2:
                    f9:e0:fd:31:f4:f8:0a:a0:ba:7d:58:1b:2e:a1:0b:
                    33:bd:0a:7c:5d:07:df:2b:3d:a9:d8:4e:f0:47:5e:
                    73:7c:c6:60:26:c1:32:7c:9b:6b:10:f7:f6:1a:1c:
                    4e:85:1e:6a:8d:62:b7:21:38:17:55:c0:ff:c6:46:
                    d3:5b:3b:78:66:25:b5:de:5b:b4:39:5d:20:18:e4:
                    bc:a6:bf:21:a8:80:e9:f7:da:d1:dc:1e:03:45:95:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:69:33:53:AF:FB:5D:FF:43:85:70:BB:D3:95:C0:77:CA:E3:56
            X509v3 Authority Key Identifier:
                keyid:90:7B:9D:22:C4:73:0D:56:B6:2A:4B:ED:CA:00:D9:D6:C4:4B:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHudIsRzDVa2KkvtygDZ1sRL1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/kHudIsRzDVa2KkvtygDZ1sRL1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:50:da:10:f0:64:c0:da:49:75:b9:72:62:f5:ad:4c:ff:19:
         cf:4f:c0:89:c5:eb:3f:73:ed:d6:81:15:21:3d:da:21:bc:23:
         08:a0:d7:d4:92:ec:e8:12:5e:f4:ab:1a:78:49:37:b2:ff:e5:
         c6:45:ff:81:1b:b6:04:4c:dd:1f:16:93:6f:e9:31:19:a9:2d:
         fb:53:5d:28:64:8b:14:29:b5:4a:55:3e:21:33:24:c0:64:63:
         b3:42:7b:85:ad:8e:b2:cb:d9:6e:42:f4:4d:94:37:98:78:72:
         d6:35:94:de:35:9d:9c:67:8f:fe:6a:3c:89:48:8f:4e:26:5f:
         f3:a4:a1:86:df:56:4b:b6:a3:c4:ee:f1:fe:10:e8:ba:c5:2d:
         c4:fe:78:c7:81:6a:d2:2b:fd:a2:86:99:6c:5c:2b:ce:9e:b6:
         a6:b8:1a:9c:ac:56:6e:26:a6:d0:8c:e1:4f:2f:03:bd:38:84:
         b2:82:ab:0e:74:b9:66:f5:2e:df:7f:7b:8a:ca:b7:fc:bc:22:
         8a:d6:ba:c9:6f:97:29:20:8a:3b:1e:97:31:71:0a:9b:bd:30:
         e0:c3:de:a7:37:b9:3c:b4:0f:31:26:41:8b:98:52:d3:e8:7d:
         bb:6c:42:07:4a:fa:03:98:5e:fd:4f:b5:ca:97:e1:85:83:51:
         a4:6e:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:29 2024 by rpki-client on console-fra.rpki-client.org