Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/m1v0tipDiBWPUb4rpmRBHESKEQY.roa
File:                     m1v0tipDiBWPUb4rpmRBHESKEQY.roa (raw, json)
Hash identifier:          GRPqM0Bo0VfSUDYVWznoADToE37vNnysEwZFLLtx/dM=
Subject key identifier:   9B:5B:F4:B6:2A:43:88:15:8F:51:BE:2B:A6:64:41:1C:44:8A:11:06
Certificate issuer:       /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial:       02994C56
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/m1v0tipDiBWPUb4rpmRBHESKEQY.roa
Signing time:             Thu 10 Mar 2022 16:50:14 +0000
ROA not before:           Thu 10 Mar 2022 16:50:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        37.44.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43600982 (0x2994c56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
        Validity
            Not Before: Mar 10 16:50:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b5bf4b62a4388158f51be2ba664411c448a1106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:11:d2:ee:a5:fc:56:91:b8:0b:68:81:73:
                    fc:01:41:ac:f7:d9:8f:10:48:49:4f:a4:89:fd:c6:
                    db:6b:c2:ed:c2:9c:d0:9a:33:78:0c:28:d3:7c:38:
                    58:a5:94:68:1f:27:66:7d:66:bf:a5:18:15:a0:8c:
                    1d:ba:a4:19:4e:9d:ab:02:a9:42:fc:97:8f:e8:4f:
                    3d:3c:92:f8:ce:03:bd:c2:0c:ba:43:c3:26:e0:64:
                    0f:ea:33:9f:ed:1b:65:a8:fa:62:84:f5:53:f6:7e:
                    6d:2c:23:8a:2d:e8:65:07:22:a7:48:6e:00:a6:fc:
                    95:49:13:35:15:ea:d0:e2:13:47:c4:de:ff:56:e5:
                    9e:d8:43:fc:93:16:47:ad:79:23:64:9d:da:56:d1:
                    c8:21:d6:5b:14:b6:41:bb:71:83:19:ec:d3:b2:9c:
                    b9:9e:d0:cd:2b:09:90:e0:0a:43:7a:a7:2b:b7:b7:
                    47:e8:78:cc:ac:f0:36:30:8b:a2:a0:eb:ce:c9:b6:
                    20:4f:8b:38:7d:e4:01:70:1b:c4:f6:4f:72:a2:cd:
                    1b:36:5a:f1:7e:20:d3:d4:69:a2:19:84:7b:fe:ed:
                    f4:41:7e:03:2b:da:2e:21:1a:27:56:aa:82:cc:03:
                    c5:b7:3e:9a:09:06:5d:ac:ad:f3:04:de:c4:4c:54:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5B:F4:B6:2A:43:88:15:8F:51:BE:2B:A6:64:41:1C:44:8A:11:06
            X509v3 Authority Key Identifier:
                keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/m1v0tipDiBWPUb4rpmRBHESKEQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.44.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:fa:d8:d7:b9:bd:3c:a2:c1:8f:a1:fc:91:d9:e3:35:74:ca:
         ee:79:41:c2:36:fc:04:d6:ec:09:c8:88:82:06:d7:fe:e5:19:
         ac:79:64:46:0c:af:2e:4d:56:c4:82:f6:57:48:a9:58:6b:1e:
         12:0e:74:89:b3:cf:30:f9:c5:e1:b8:ca:b1:17:8b:ce:90:20:
         46:0b:23:56:1b:8e:e2:d9:76:94:fd:41:02:e7:c8:c6:ce:7b:
         34:ca:a3:ef:23:42:1f:90:00:a0:30:41:90:8f:c3:14:6d:8f:
         5b:78:07:00:6b:9a:0e:65:9c:8d:d8:85:89:93:18:cb:e7:66:
         bf:4a:2e:51:94:63:0b:37:e5:70:02:1c:37:0d:d3:be:be:11:
         fb:5a:b8:2b:96:52:6a:95:9b:10:3c:e9:2e:7b:2b:5a:03:f2:
         f4:9c:b5:ae:35:d9:12:13:66:c3:af:65:30:d5:cf:df:5c:70:
         6d:e4:a6:05:31:26:49:3d:74:f2:76:f7:4a:9f:d7:c9:d0:4a:
         5d:73:08:59:c1:5e:95:f5:bc:54:f3:43:51:98:ad:26:40:9c:
         74:83:44:20:9d:79:94:f8:b2:02:17:10:76:39:11:66:e4:b3:
         59:7f:b2:79:80:d9:c4:80:01:e4:a4:13:b2:23:24:0e:19:50:
         af:68:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:22 2024 by rpki-client on console-fra.rpki-client.org