Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/OR0Ak2ybqg8CSAKbmbn-wC1idHM.roa
File:                     OR0Ak2ybqg8CSAKbmbn-wC1idHM.roa (raw, json)
Hash identifier:          u9GEo3KQEp8FW89AOZSIS0d5h++SD5xS6NrqYsV14jY=
Subject key identifier:   39:1D:00:93:6C:9B:AA:0F:02:48:02:9B:99:B9:FE:C0:2D:62:74:73
Certificate issuer:       /CN=5160a68d52a38108270add46493b731dd298bd80
Certificate serial:       044E87F2
Authority key identifier: 51:60:A6:8D:52:A3:81:08:27:0A:DD:46:49:3B:73:1D:D2:98:BD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWCmjVKjgQgnCt1GSTtzHdKYvYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/OR0Ak2ybqg8CSAKbmbn-wC1idHM.roa
Signing time:             Sat 01 Jan 2022 16:05:35 +0000
ROA not before:           Sat 01 Jan 2022 16:05:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50796
IP address blocks:        37.32.56.0/21 maxlen: 24
                          185.3.196.0/22 maxlen: 24
                          178.22.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72255474 (0x44e87f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5160a68d52a38108270add46493b731dd298bd80
        Validity
            Not Before: Jan  1 16:05:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=391d00936c9baa0f0248029b99b9fec02d627473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:8d:4c:75:67:b9:d5:a6:12:ce:aa:b3:ad:
                    1e:95:b8:8f:00:39:6a:f7:e5:66:bb:88:87:a8:9c:
                    e0:55:3a:d3:0b:29:3b:43:c9:08:63:f1:5c:26:71:
                    09:e1:b8:9f:34:e0:89:5b:d7:f3:e6:30:05:70:74:
                    48:e3:02:28:23:85:00:7d:40:c7:35:b4:26:00:e0:
                    41:d6:05:ac:3e:3b:51:71:83:8f:0e:43:80:fd:df:
                    ef:5a:af:28:b7:f9:cb:b6:71:e0:e9:cb:2b:86:32:
                    d8:da:de:fa:94:9c:fe:6d:b5:78:14:b3:f7:0f:fa:
                    8d:5f:c4:08:88:48:e1:9a:f5:2a:ff:a1:35:a9:03:
                    17:62:6c:97:a5:70:62:5f:af:9e:2f:a9:f8:9d:28:
                    52:95:2e:fa:f7:f0:2d:a8:e3:90:0f:47:51:e5:e7:
                    23:fb:f2:47:ef:03:28:0e:61:64:80:ad:ab:ab:16:
                    76:98:20:94:3d:10:92:55:02:93:68:a4:dc:d0:91:
                    ce:75:89:76:a9:60:15:0d:57:8d:09:61:f9:d6:49:
                    f9:bd:3d:58:d6:d6:bc:48:e7:dc:c2:6e:98:4d:f5:
                    9c:f2:e7:6c:98:b5:9f:57:58:41:24:fc:6e:bc:5d:
                    21:67:51:d0:d0:a5:60:18:3e:50:06:95:a8:47:3a:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:00:93:6C:9B:AA:0F:02:48:02:9B:99:B9:FE:C0:2D:62:74:73
            X509v3 Authority Key Identifier:
                keyid:51:60:A6:8D:52:A3:81:08:27:0A:DD:46:49:3B:73:1D:D2:98:BD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWCmjVKjgQgnCt1GSTtzHdKYvYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/OR0Ak2ybqg8CSAKbmbn-wC1idHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/UWCmjVKjgQgnCt1GSTtzHdKYvYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.56.0/21
                  178.22.0.0/21
                  185.3.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:1e:4c:d1:48:cc:b1:a2:95:4a:12:65:85:60:71:83:2a:41:
         9a:e0:79:1c:80:f4:24:ed:9b:ac:15:dd:80:b4:ec:c0:fc:80:
         ba:30:7c:09:bd:e6:09:a4:b0:95:b5:87:ba:20:cf:66:04:43:
         25:ad:dc:c6:d6:bc:b1:f2:fe:3a:6d:ca:78:4c:b4:bf:6e:64:
         d4:67:e7:11:bb:ca:07:23:10:62:75:32:2d:8e:bf:4c:ad:cc:
         ea:1a:08:f9:90:6f:83:7e:9c:b9:ce:56:6a:31:95:1a:5a:b1:
         a3:35:3d:4a:af:61:76:8d:2a:47:5b:bf:ad:b9:e5:55:bd:78:
         b5:d8:92:c5:26:3b:8b:ac:ca:42:43:97:bd:27:b0:e8:b0:4b:
         c7:cb:15:42:db:28:29:95:81:d3:7e:19:fe:c6:ea:12:e7:e6:
         f8:54:b2:90:82:c7:16:02:ea:07:05:9e:33:bc:84:ec:27:fa:
         bc:22:d9:05:3e:e9:a8:ce:6b:0d:75:4a:8f:be:84:e1:12:23:
         fe:e8:20:d1:32:58:41:c7:e8:24:38:d8:7b:fe:9f:6c:04:07:
         88:a9:c6:93:3c:6d:8c:bf:9d:7e:42:a0:f5:61:03:f8:ed:6d:
         1d:00:b1:99:82:2b:ce:9c:6c:6d:c7:ee:93:b0:c1:c7:0d:8c:
         ce:8c:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org