Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/hM1lUUsZcVtvlo8UpgXul__GV_8.roa
File:                     hM1lUUsZcVtvlo8UpgXul__GV_8.roa (raw, json)
Hash identifier:          SZ2uFC2CDBZ1ugQfAR2FaOIOAYst1Hd9aihwVeHBI9w=
Subject key identifier:   84:CD:65:51:4B:19:71:5B:6F:96:8F:14:A6:05:EE:97:FF:C6:57:FF
Certificate issuer:       /CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Certificate serial:       E06CD1
Authority key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/hM1lUUsZcVtvlo8UpgXul__GV_8.roa
Signing time:             Sat 01 Jan 2022 07:59:04 +0000
ROA not before:           Sat 01 Jan 2022 07:59:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        37.72.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14707921 (0xe06cd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
        Validity
            Not Before: Jan  1 07:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84cd65514b19715b6f968f14a605ee97ffc657ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:b0:ee:42:e0:1c:7f:ce:70:bf:e0:59:e7:
                    dc:01:05:45:68:78:2b:0b:5a:a7:54:06:be:f2:bb:
                    72:bc:5b:31:4f:16:b8:49:31:40:0a:4c:32:31:2d:
                    dd:02:1c:ae:bf:90:a7:2d:0b:3c:68:0a:aa:58:d0:
                    88:71:eb:40:66:31:09:04:2c:fb:7e:00:8c:83:25:
                    61:ae:b2:17:22:c5:9d:81:9c:b1:7c:6f:b9:be:f5:
                    13:bc:1c:bd:28:9b:00:38:32:da:bd:af:b5:ed:f5:
                    b8:02:97:c3:5c:39:bf:b6:64:3f:e2:4d:42:05:3a:
                    7c:0b:08:03:ec:5a:3c:e3:84:6d:38:93:e4:11:35:
                    de:11:c2:50:33:ce:61:78:c2:49:96:35:24:52:33:
                    10:82:7c:f2:1c:63:3f:e9:1c:c1:ec:51:53:51:e8:
                    64:ba:4b:bf:dc:6e:e8:a0:41:5a:61:1d:0a:99:3a:
                    fa:d5:9e:38:e0:0f:6d:d8:fd:a5:6b:cf:91:a1:7e:
                    d2:eb:97:4e:ec:e3:da:dc:86:9b:5e:20:c7:1f:cb:
                    e9:9b:2e:b8:4c:23:5a:a5:d3:f5:dc:77:8b:76:a5:
                    75:e6:6d:eb:68:ca:1a:1d:18:19:43:13:e6:c4:ac:
                    cf:04:9f:c8:1c:de:0f:2f:b7:5a:96:d4:28:bd:30:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:65:51:4B:19:71:5B:6F:96:8F:14:A6:05:EE:97:FF:C6:57:FF
            X509v3 Authority Key Identifier:
                keyid:73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/hM1lUUsZcVtvlo8UpgXul__GV_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:0b:5f:d2:84:3a:94:f2:9d:c6:ba:d3:1b:4a:e4:93:d3:
         23:28:3b:66:9e:e8:77:3c:e7:2e:e8:40:a7:92:b8:6e:07:c4:
         49:75:7c:1b:04:04:02:a7:93:58:4b:81:a8:53:64:cd:82:7b:
         c0:a3:f6:06:87:ee:ae:da:86:81:b9:61:8b:07:66:dd:b3:a1:
         f9:b3:25:2d:8a:8c:a9:b7:62:e9:92:93:6a:74:5b:29:12:40:
         a2:6c:e4:13:a6:e7:4f:a7:08:eb:a7:9c:5d:4c:10:fd:51:bc:
         46:ef:c5:3f:85:d6:2f:eb:ed:9d:31:7f:29:85:36:f2:c5:d5:
         d3:bb:5a:23:f1:ee:53:eb:a1:7c:ba:da:82:dd:b9:8a:9a:f0:
         80:f4:16:9d:a8:05:eb:cd:bb:3d:d0:57:dc:97:85:e8:51:da:
         d8:c4:2f:69:bf:6b:34:2a:8b:87:3e:87:e7:7a:13:1c:37:c7:
         74:ce:25:c0:9b:35:35:96:0d:b7:4c:f0:d1:16:8c:7c:04:73:
         4d:eb:7f:fb:6d:65:c6:48:32:c6:2c:d9:f6:eb:27:29:d4:49:
         46:fb:48:15:c3:87:a9:e5:2c:ab:28:cc:70:ba:e7:2e:7e:94:
         d7:ba:bf:cb:62:00:88:93:aa:c6:c1:2c:9d:59:a0:e8:a0:da:
         fc:f4:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org