Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/r12Q66-eeyoA8uL6gxCnDZ-8DZ4.roa
File:                     r12Q66-eeyoA8uL6gxCnDZ-8DZ4.roa (raw, json)
Hash identifier:          VICVxeol9skn36FqfEi8KtH5u7Bllntl0ESby754a2A=
Subject key identifier:   AF:5D:90:EB:AF:9E:7B:2A:00:F2:E2:FA:83:10:A7:0D:9F:BC:0D:9E
Certificate issuer:       /CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
Certificate serial:       0186365AD5EE1E2C71D21D2126A51AB5F740
Authority key identifier: 7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/r12Q66-eeyoA8uL6gxCnDZ-8DZ4.roa
Signing time:             Thu 09 Feb 2023 13:26:08 +0000
ROA not before:           Thu 09 Feb 2023 13:26:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206092
IP address blocks:        85.8.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:5a:d5:ee:1e:2c:71:d2:1d:21:26:a5:1a:b5:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
        Validity
            Not Before: Feb  9 13:26:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af5d90ebaf9e7b2a00f2e2fa8310a70d9fbc0d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:73:79:8d:ca:21:83:1e:ef:39:a8:63:5c:
                    da:55:2a:5e:45:db:52:cd:5c:45:87:3c:6a:4a:25:
                    f9:47:97:3b:32:8d:59:36:c3:49:51:3a:2b:25:24:
                    73:14:b1:59:cf:75:0e:d8:fb:c3:f9:da:27:28:41:
                    de:6a:7c:bd:89:78:38:dc:c9:ca:bc:ca:79:37:e5:
                    e6:22:9d:88:23:c5:3c:ac:b2:14:24:83:c8:40:94:
                    c9:7b:c5:28:42:54:b9:df:ed:de:d7:43:5d:27:ce:
                    9f:45:c6:04:7a:6c:6c:9f:07:6f:e0:33:10:85:50:
                    6c:1f:7e:94:db:8d:ae:f4:f6:01:27:61:db:aa:b5:
                    30:aa:1a:14:06:86:0c:ba:4d:f7:b7:b1:9a:42:5d:
                    60:b9:6c:36:6a:c1:f6:ee:41:92:e9:43:f3:c1:33:
                    b1:94:f1:11:d2:7f:b1:76:d7:82:c6:f3:a0:d1:d1:
                    cc:02:d1:0e:ce:37:d5:df:d1:6c:63:ad:ba:8f:32:
                    81:1e:7f:70:e9:c9:eb:3e:0b:52:ca:4f:dd:e1:66:
                    84:99:48:c8:ff:77:f7:bf:0a:d4:d6:aa:61:74:c8:
                    d2:92:26:77:5f:92:69:d0:e4:5b:04:97:7d:61:b6:
                    9a:c7:45:e4:3e:3e:02:fa:dd:2a:68:a6:12:b9:30:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5D:90:EB:AF:9E:7B:2A:00:F2:E2:FA:83:10:A7:0D:9F:BC:0D:9E
            X509v3 Authority Key Identifier:
                keyid:7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/r12Q66-eeyoA8uL6gxCnDZ-8DZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/f5S3O0Fy-zG3a7nxRns25auaLt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.8.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:c9:70:a9:12:06:66:09:af:8d:c6:6d:99:b3:cb:b0:ec:
         a6:31:ff:38:6d:6d:04:74:ec:80:2e:49:30:4e:a5:be:c2:2d:
         86:ca:3c:cf:d2:31:54:92:e2:d1:91:5a:6a:0d:dc:f9:aa:a7:
         d1:8d:9e:d6:a4:30:2a:17:4d:39:21:6e:7c:1d:a6:89:78:ee:
         8f:92:a1:6d:9e:80:b2:07:c6:2a:09:b2:3c:a8:75:bd:5d:6f:
         72:90:e2:8b:d0:5a:4c:83:3e:38:88:8d:3b:4f:b1:2b:aa:33:
         92:a9:cf:f7:d2:1d:63:b9:e3:a3:6f:c9:a1:c4:e4:c0:a8:34:
         ad:b2:5f:0d:86:5c:aa:86:a3:a7:c4:06:22:20:9b:ea:b3:e8:
         a8:14:0e:cb:58:07:6b:c5:8f:28:80:26:72:d7:4d:cf:86:48:
         b6:1b:ee:1c:88:ad:1b:76:e5:3e:6d:a0:f7:2d:dd:33:38:3e:
         52:5e:e2:c6:b1:4f:d8:f9:71:fb:4d:9b:be:ae:84:50:57:6b:
         47:09:89:5d:bf:6e:89:b1:29:12:a5:ae:f5:1d:88:3b:c0:20:
         10:bb:8d:03:21:6f:ed:7b:f9:47:30:8b:fb:54:29:17:ae:10:
         3a:ad:26:86:af:f2:92:e8:a6:53:18:62:80:b5:71:3c:6c:3b:
         25:40:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:51 2024 by rpki-client on console-fra.rpki-client.org