Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/_s9-bO1qXlWBiHhBi4CyVKW0viQ.roa
File:                     _s9-bO1qXlWBiHhBi4CyVKW0viQ.roa (raw, json)
Hash identifier:          6JP+j5cCQgocgKa3i2Y6sKDKn15UWPbSVIxh2mMYm5k=
Subject key identifier:   FE:CF:7E:6C:ED:6A:5E:55:81:88:78:41:8B:80:B2:54:A5:B4:BE:24
Certificate issuer:       /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial:       0181F732CD8F58BD05EF1C0A93021822DBCA
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/_s9-bO1qXlWBiHhBi4CyVKW0viQ.roa
Signing time:             Wed 13 Jul 2022 10:55:10 +0000
ROA not before:           Wed 13 Jul 2022 10:55:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213296
IP address blocks:        185.177.78.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:32:cd:8f:58:bd:05:ef:1c:0a:93:02:18:22:db:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Jul 13 10:55:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fecf7e6ced6a5e55818878418b80b254a5b4be24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:1a:e1:d0:a9:8e:6d:bc:bf:7d:57:00:e4:
                    29:f6:ad:d1:df:5a:61:ba:59:cf:1a:21:37:7b:b1:
                    56:45:bd:60:34:ad:51:e8:8d:0b:14:4d:dc:b0:fd:
                    7f:dc:68:d9:0e:ae:b1:fb:82:e2:88:a7:47:51:3c:
                    56:9a:51:fb:ff:ec:78:bc:5e:0b:f8:73:17:ca:b5:
                    20:75:92:b2:82:da:4a:d5:f4:ba:4c:20:ca:74:93:
                    94:9d:79:2c:20:05:52:c8:98:52:3f:fb:14:f3:2d:
                    3b:8c:7a:65:26:e1:aa:4f:30:bf:d3:f6:60:fb:c8:
                    5f:1d:30:c8:ab:fd:23:e1:86:84:94:d3:24:ee:8f:
                    fc:49:82:90:f7:fa:0f:4d:eb:d1:ff:cf:93:bf:f9:
                    cd:e3:e2:e6:8f:fc:62:80:50:d2:10:05:89:a0:d5:
                    ee:af:4e:13:6c:c8:82:a0:80:7d:ee:7f:73:49:86:
                    04:c1:25:50:67:8e:ce:78:ee:1d:e6:f5:d3:87:16:
                    a9:1d:64:d3:a7:38:6a:3c:1c:a0:12:13:01:91:3a:
                    14:e8:d4:f3:8e:e3:8f:ea:ca:c2:49:f3:d6:a5:d0:
                    eb:0b:70:1a:05:3c:39:f8:2c:6f:f4:24:92:ed:66:
                    87:52:76:b0:55:83:0e:1b:33:24:57:a4:14:6b:b9:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CF:7E:6C:ED:6A:5E:55:81:88:78:41:8B:80:B2:54:A5:B4:BE:24
            X509v3 Authority Key Identifier:
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/_s9-bO1qXlWBiHhBi4CyVKW0viQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:93:4a:07:22:69:fc:74:17:61:d2:d3:59:99:75:33:6b:b9:
         14:29:e5:a0:b9:a3:e2:7a:1d:4f:cf:a6:85:92:f7:24:83:55:
         40:43:15:e5:ff:af:60:89:32:01:0e:64:5b:58:32:43:a2:3a:
         1b:de:b8:26:8c:fc:6c:e1:43:ba:cd:97:b3:d4:e3:61:c2:ca:
         65:45:24:af:e5:4f:f6:35:16:c0:5a:5a:12:a8:19:db:fa:35:
         9f:83:91:fe:54:70:4d:8c:ca:3a:48:a9:1b:ba:4c:d1:6b:dc:
         a6:7f:4e:af:49:8c:cb:f7:56:b2:13:40:a5:c5:fe:a1:eb:c5:
         38:e4:c6:6f:6f:69:0f:89:5b:c9:42:b0:f0:a9:fe:b8:29:9a:
         37:3c:75:a1:19:db:f1:0b:bb:9c:53:1b:95:07:4e:08:c1:80:
         49:cc:40:8e:a9:a3:5c:ac:ac:61:cc:7b:72:4a:bb:d8:e3:bd:
         a2:78:95:7d:3a:7f:c6:69:9e:65:03:47:7a:7e:e4:48:44:11:
         c0:ff:73:f3:a7:fc:03:77:63:4e:13:76:78:cb:17:7c:68:11:
         f9:ee:28:07:e4:29:2a:d4:25:f1:5e:67:7b:ad:ff:0a:6c:1a:
         c2:ec:83:f6:f4:bc:cc:d1:bb:7f:81:b6:f1:48:1d:0c:34:76:
         fb:4f:9c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org