Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/NXUHCAp_qe31Y03oIPfjTuAX8j8.roa
File:                     NXUHCAp_qe31Y03oIPfjTuAX8j8.roa (raw, json)
Hash identifier:          U/SPVqlxxNd6YdJlDVjw6qxiaaghRWv4MV+bsQpe6Ys=
Subject key identifier:   35:75:07:08:0A:7F:A9:ED:F5:63:4D:E8:20:F7:E3:4E:E0:17:F2:3F
Certificate issuer:       /CN=6fa29a11bb6e671f0985581ec073db92fce6b6a2
Certificate serial:       010AB2E6
Authority key identifier: 6F:A2:9A:11:BB:6E:67:1F:09:85:58:1E:C0:73:DB:92:FC:E6:B6:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6KaEbtuZx8JhVgewHPbkvzmtqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/NXUHCAp_qe31Y03oIPfjTuAX8j8.roa
Signing time:             Sat 01 Jan 2022 02:55:15 +0000
ROA not before:           Sat 01 Jan 2022 02:55:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        185.212.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17478374 (0x10ab2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa29a11bb6e671f0985581ec073db92fce6b6a2
        Validity
            Not Before: Jan  1 02:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=357507080a7fa9edf5634de820f7e34ee017f23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:8c:77:21:12:38:94:96:5c:e0:18:84:81:
                    19:84:23:42:1c:23:4e:17:59:cb:d9:23:60:3d:19:
                    22:43:d2:6f:08:60:ec:dc:e2:39:f6:50:b4:92:c5:
                    5f:18:85:8b:a5:f5:6c:f6:f0:4e:68:3f:3a:31:2e:
                    e6:2f:04:3a:3e:56:47:f9:6f:95:50:09:95:1b:25:
                    28:e7:8a:49:2d:9a:da:df:4f:10:fb:5a:5d:c3:6f:
                    c6:73:e1:d0:d8:56:70:0e:de:83:5d:51:5b:ae:86:
                    a6:7d:36:a0:fc:f9:7c:46:a2:cd:66:cd:c6:65:54:
                    c1:76:26:3d:10:0e:77:85:1d:04:aa:6b:7d:e0:ee:
                    cf:39:85:ab:05:7c:16:db:6f:12:3b:78:c4:f8:c2:
                    99:92:b2:1e:b2:56:5b:6a:b3:7b:c5:77:23:f2:d2:
                    9b:f6:9e:27:bc:63:6e:e1:2d:65:9c:b1:92:5f:b5:
                    60:bf:10:ce:0e:c6:81:58:e8:52:6b:9b:1f:a3:a7:
                    45:1f:aa:e7:42:4f:af:67:6f:ae:17:1a:dd:dd:7f:
                    a2:3f:87:3b:22:aa:93:b4:d9:7a:53:e6:ab:07:e0:
                    8a:61:07:1b:d1:9a:fb:07:ee:ec:54:34:c8:0c:14:
                    24:0d:49:f4:7b:00:8f:74:d3:7d:ea:7e:48:bb:96:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:75:07:08:0A:7F:A9:ED:F5:63:4D:E8:20:F7:E3:4E:E0:17:F2:3F
            X509v3 Authority Key Identifier:
                keyid:6F:A2:9A:11:BB:6E:67:1F:09:85:58:1E:C0:73:DB:92:FC:E6:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6KaEbtuZx8JhVgewHPbkvzmtqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/NXUHCAp_qe31Y03oIPfjTuAX8j8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/b6KaEbtuZx8JhVgewHPbkvzmtqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:6b:0a:76:01:2a:7e:5a:90:4a:f1:ba:e5:cc:76:42:15:
         b1:07:c8:e9:de:c7:31:4e:3a:d1:52:23:3b:61:e7:dc:17:3b:
         7c:6c:3a:78:50:3b:44:23:e6:47:25:3e:6d:05:7c:49:24:90:
         7d:7a:f0:13:d3:c4:1b:f1:c4:47:2a:4a:75:e3:61:cd:3f:36:
         03:9c:5a:07:0d:cf:ce:2a:f0:75:8d:6a:19:fb:c7:0f:7e:18:
         fc:a5:86:2a:f9:86:02:97:8b:33:3f:8b:b0:44:8b:66:8c:21:
         9d:e1:af:48:1c:d8:46:35:a3:39:a5:28:c7:d6:a7:4f:20:99:
         2d:b7:21:8f:27:1b:35:0d:db:d0:3e:0c:7c:45:e5:d6:d9:32:
         51:1c:cf:ee:c2:14:db:62:e2:65:06:b7:32:7f:b1:e5:8b:87:
         0e:4b:b1:97:13:a9:5e:57:6c:75:0e:07:59:43:e3:20:b9:d2:
         d0:25:9c:e5:06:a9:f1:46:c7:60:38:cb:83:6d:cf:39:bc:1d:
         9b:10:73:26:8a:52:75:08:ba:d0:6c:c7:5f:cd:75:0a:66:f3:
         a3:9a:0e:9a:50:bd:51:ba:4f:ed:53:01:06:37:e5:8d:12:20:
         82:57:0c:50:65:2d:37:3a:a0:c3:67:9d:43:e5:cc:3d:09:1f:
         d9:8b:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:34 2024 by rpki-client on console-fra.rpki-client.org