Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/1-qGP9pNdbETGwC7aFVWoZAo0y3U.roa
File:                     1-qGP9pNdbETGwC7aFVWoZAo0y3U.roa (raw, json)
Hash identifier:          KK0hgtaBmrzbSGTH1lJkjrM9PjoSVjiCXxHt/Xkx+Ow=
Subject key identifier:   FA:A1:8F:F6:93:5D:6C:44:C6:C0:2E:DA:15:55:A8:64:0A:34:CB:75
Certificate issuer:       /CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Certificate serial:       0181F45577B0A2F3DD9AEADD97E0D2DD1E62
Authority key identifier: 23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/1-qGP9pNdbETGwC7aFVWoZAo0y3U.roa
Signing time:             Tue 12 Jul 2022 21:34:10 +0000
ROA not before:           Tue 12 Jul 2022 21:34:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        212.52.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:55:77:b0:a2:f3:dd:9a:ea:dd:97:e0:d2:dd:1e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b78d77a05449b1756083d03f1fd2373a6125a6
        Validity
            Not Before: Jul 12 21:34:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=faa18ff6935d6c44c6c02eda1555a8640a34cb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:63:ed:6a:bd:db:f0:9a:63:6d:65:c7:50:
                    96:67:1c:a4:7e:d9:7c:7b:91:95:2c:e4:c3:cd:78:
                    62:78:e2:83:e6:12:d2:2d:f8:91:60:aa:d0:09:0f:
                    d5:bf:a2:14:cf:cc:8a:35:83:1c:ed:ef:85:e5:68:
                    49:07:44:63:9f:47:b6:f2:30:5f:9e:58:09:6e:8b:
                    7a:ba:1e:fa:8a:96:c2:3a:74:40:c7:98:b5:dc:cf:
                    e9:95:80:a1:93:10:47:9a:f8:ee:94:c6:77:d1:47:
                    52:f3:4a:66:7a:84:cf:b7:d4:fc:8f:23:4e:7c:5d:
                    34:8f:71:77:8a:0b:1e:c5:2c:31:87:e3:97:99:07:
                    45:e5:37:cb:d5:ab:6e:e8:10:60:de:2b:09:57:c2:
                    00:61:6a:69:e9:1f:1a:c0:72:f2:89:7c:0c:71:03:
                    e9:a8:06:c5:1a:59:14:95:a0:2d:57:c8:0c:53:68:
                    64:8d:27:47:a8:bb:1e:70:1f:ec:c5:db:1f:73:94:
                    9a:d2:24:1d:13:d6:2c:e8:34:ea:e0:6c:ce:03:99:
                    1e:a4:30:22:40:9c:8b:3f:e6:c5:3b:63:49:51:60:
                    7f:8f:80:23:13:85:cf:65:31:0f:b9:58:82:f2:d2:
                    5a:90:43:f4:e1:83:84:85:d0:00:2f:a6:54:5a:f4:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A1:8F:F6:93:5D:6C:44:C6:C0:2E:DA:15:55:A8:64:0A:34:CB:75
            X509v3 Authority Key Identifier:
                keyid:23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/1-qGP9pNdbETGwC7aFVWoZAo0y3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:06:19:12:76:58:06:64:65:ef:d1:04:03:08:83:ad:e9:
         52:85:12:6d:55:f7:f4:c1:bc:02:79:d7:2a:cf:db:7d:b2:43:
         05:be:8a:2a:a7:ab:9b:e3:4b:29:c9:fe:30:7b:98:fc:95:19:
         64:40:36:10:b1:ea:28:47:e3:a2:01:ba:98:88:ae:ba:ad:da:
         d9:bd:44:b8:b3:2f:6e:5a:e1:cf:a0:1d:30:92:e0:a6:8f:95:
         2d:f6:25:d0:eb:c5:8a:6c:ea:60:80:74:54:ae:b0:09:44:87:
         d7:9c:99:b0:9b:52:6f:64:3e:e3:c2:8a:45:45:52:e2:06:11:
         c1:72:5a:7c:00:83:9a:03:73:49:62:2f:1b:f4:d8:b8:26:35:
         bb:bd:e5:55:1d:7d:31:b2:6b:79:ad:66:8f:b0:b3:c4:71:1a:
         ae:21:a7:e8:a7:70:d1:05:af:fa:93:db:ed:83:f0:82:62:a9:
         02:d0:2c:ea:1b:62:34:25:ed:bb:f6:49:70:1a:b7:a7:57:ed:
         bc:d2:20:83:7e:b1:b1:66:8b:a7:89:94:cb:0f:a0:1f:63:5b:
         20:75:ed:af:c5:08:bf:c2:e3:bc:b6:d4:18:2c:99:8f:3d:cf:
         f1:26:4c:57:93:5a:41:27:75:ff:37:76:c2:b5:ff:c9:a9:80:
         04:de:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:37 2024 by rpki-client on console-fra.rpki-client.org