Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/LGw3CIAXjVZy2lOrT99mBWQNEao.roa
File:                     LGw3CIAXjVZy2lOrT99mBWQNEao.roa (raw, json)
Hash identifier:          vZzS3oeoWHEYpvFyJ2SJxP6RHHyjBIukO2LFvfgK/Ck=
Subject key identifier:   2C:6C:37:08:80:17:8D:56:72:DA:53:AB:4F:DF:66:05:64:0D:11:AA
Certificate issuer:       /CN=8e13c2ae52bb38337357be221ebc175c4838c9e8
Certificate serial:       7DFE
Authority key identifier: 8E:13:C2:AE:52:BB:38:33:73:57:BE:22:1E:BC:17:5C:48:38:C9:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhPCrlK7ODNzV74iHrwXXEg4yeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/LGw3CIAXjVZy2lOrT99mBWQNEao.roa
Signing time:             Wed 18 May 2022 11:44:06 +0000
ROA not before:           Wed 18 May 2022 11:44:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12446
IP address blocks:        80.247.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32254 (0x7dfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e13c2ae52bb38337357be221ebc175c4838c9e8
        Validity
            Not Before: May 18 11:44:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c6c370880178d5672da53ab4fdf6605640d11aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:05:c1:07:c7:7b:b5:f9:ef:dc:0a:74:f3:
                    57:fe:84:a2:54:69:51:e3:b8:90:32:eb:ab:6a:46:
                    19:35:46:a5:de:86:b5:d1:bf:59:51:4d:0b:c1:15:
                    23:71:72:c7:29:57:fc:37:1b:94:a2:9b:3a:70:82:
                    f3:19:af:bf:70:31:4f:59:b2:2a:c0:54:7e:51:7e:
                    61:42:75:0f:19:5a:dc:9c:bc:9e:fa:55:13:3d:1f:
                    b4:b3:f6:71:bc:dc:48:1c:3a:4d:9e:84:3b:f3:46:
                    cd:ec:a2:dd:0a:ac:8f:98:68:75:a0:9b:b0:4b:5e:
                    1f:cc:ca:0f:c3:ce:47:3c:cb:9c:eb:2a:6e:7c:0e:
                    5c:b3:ce:d1:44:7e:69:69:b3:cb:94:6b:a9:07:2e:
                    6b:6c:8a:6b:af:6f:66:da:ae:2c:ae:84:51:41:54:
                    49:04:64:bd:c3:67:de:43:07:b6:fd:a4:d3:dd:ec:
                    74:cf:9d:0c:c2:e3:e3:e6:e7:3a:a0:aa:b7:54:bf:
                    b2:90:c5:28:22:3b:41:c7:60:27:54:18:9a:e9:52:
                    9e:b6:db:33:dc:fd:a6:e0:c0:db:2f:57:8f:dc:cd:
                    4c:ff:ff:06:19:e8:4e:4a:30:a2:62:ca:7b:db:72:
                    72:ce:0c:9c:ee:6b:fe:e2:f5:4e:3c:98:c7:f9:e6:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6C:37:08:80:17:8D:56:72:DA:53:AB:4F:DF:66:05:64:0D:11:AA
            X509v3 Authority Key Identifier:
                keyid:8E:13:C2:AE:52:BB:38:33:73:57:BE:22:1E:BC:17:5C:48:38:C9:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhPCrlK7ODNzV74iHrwXXEg4yeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/LGw3CIAXjVZy2lOrT99mBWQNEao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/jhPCrlK7ODNzV74iHrwXXEg4yeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.247.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:07:53:e2:09:a0:43:80:9f:9c:37:6b:a7:c6:80:0d:b9:f1:
         ec:d5:3c:3c:96:f2:27:89:5b:37:49:76:47:83:b4:87:bc:44:
         b1:9c:3c:9a:66:ba:04:cb:56:68:47:5b:86:a1:b6:dc:f9:cf:
         2a:1d:4f:a3:1f:f5:b9:e6:a8:13:4f:9f:8c:03:12:fd:d3:2e:
         42:b8:ca:9f:7e:e7:18:2d:56:ca:2d:43:83:46:3e:64:94:1e:
         87:7c:cd:1f:20:c1:d8:6c:66:b4:0f:6e:07:68:a6:96:1f:0f:
         78:a9:fa:f9:84:64:84:84:0c:17:50:33:6d:61:6c:ad:e8:f4:
         63:d8:87:00:1a:19:d0:f6:ab:34:ea:c5:05:d7:c7:22:37:63:
         71:c5:cb:cc:db:92:ca:4c:70:eb:74:4e:e6:5c:a2:8b:51:0b:
         00:fc:72:68:5c:81:ef:b8:78:4f:4e:c3:1d:e0:d3:74:4e:5d:
         53:d3:f9:1a:3c:71:a4:8b:2e:af:53:ff:8a:21:87:d1:79:09:
         f7:10:f6:89:0a:b6:a2:b9:47:c9:30:21:f8:61:23:ed:82:8f:
         ec:3b:91:3f:e5:6d:df:2e:c7:07:e3:47:7c:07:4c:11:8e:d6:
         b3:bc:ec:c6:5d:c9:d6:22:b3:73:11:53:a6:1f:01:5b:08:16:
         5d:f0:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org