Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/v3dR29QyFMVgHhk7k32ev4KN_jE.roa
File:                     v3dR29QyFMVgHhk7k32ev4KN_jE.roa (raw, json)
Hash identifier:          sIO19qNfsCDyZM647C7avbd74buFWdf6an7AWqivHIA=
Subject key identifier:   BF:77:51:DB:D4:32:14:C5:60:1E:19:3B:93:7D:9E:BF:82:8D:FE:31
Certificate issuer:       /CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
Certificate serial:       01788DB0
Authority key identifier: 57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/v3dR29QyFMVgHhk7k32ev4KN_jE.roa
Signing time:             Thu 07 Apr 2022 00:31:58 +0000
ROA not before:           Thu 07 Apr 2022 00:31:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49581
IP address blocks:        176.97.210.0/24 maxlen: 24
                          2a12:b200::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24677808 (0x1788db0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
        Validity
            Not Before: Apr  7 00:31:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf7751dbd43214c5601e193b937d9ebf828dfe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:f5:28:d8:50:9f:e3:60:ec:be:e6:47:49:
                    ca:83:c1:16:e0:a5:b7:05:bf:8f:aa:f7:66:cd:de:
                    1d:3f:51:48:aa:43:6c:b8:37:58:48:61:f9:00:34:
                    45:0c:cc:55:36:25:09:55:0f:46:1c:7e:de:76:78:
                    d9:5c:44:14:09:52:3d:0b:b7:85:ca:41:4f:b0:7c:
                    f4:1c:5b:90:71:1c:0a:61:12:4e:42:9d:ae:5f:a6:
                    4d:e2:f0:32:5c:63:08:96:3a:f2:4a:39:c2:71:7c:
                    4c:7a:5a:bd:e4:46:24:80:8d:31:f9:3b:f0:e8:f9:
                    c6:0a:c5:c7:eb:d3:5c:0e:16:43:5f:69:14:50:e6:
                    01:74:e6:85:a5:80:2b:67:ce:b8:15:93:c7:64:1a:
                    f4:52:f4:dc:c9:36:df:37:88:58:85:7a:d9:ac:78:
                    c0:9a:58:cc:7b:13:e7:b7:89:51:2a:30:46:cc:d2:
                    4c:26:7e:1b:c6:03:c0:d5:8f:a2:be:d0:fc:d4:1b:
                    af:40:b0:b7:25:35:d7:5a:63:5b:f5:a0:86:17:97:
                    c4:b1:2f:70:87:a0:28:72:9f:cc:05:01:b2:2c:28:
                    dd:5f:96:87:0b:7a:08:7a:a9:10:4d:8d:23:be:e6:
                    44:e3:88:21:75:e2:c4:8a:3f:51:76:cb:a0:51:da:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:77:51:DB:D4:32:14:C5:60:1E:19:3B:93:7D:9E:BF:82:8D:FE:31
            X509v3 Authority Key Identifier:
                keyid:57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/v3dR29QyFMVgHhk7k32ev4KN_jE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.210.0/24
                IPv6:
                  2a12:b200::/29

    Signature Algorithm: sha256WithRSAEncryption
         c1:cd:81:bb:ca:c7:18:cf:2f:83:0c:4d:81:04:47:57:2c:ee:
         10:48:9a:54:58:14:99:7f:8b:f0:5f:d9:b3:ed:63:88:11:60:
         cb:d9:25:27:4c:6d:e5:3a:a0:39:dc:d1:6d:6f:45:a9:34:06:
         e9:76:e3:68:4c:03:db:41:ab:c2:9d:27:9f:36:9c:31:76:14:
         35:a3:bd:56:fb:fa:46:58:30:af:7a:50:02:33:9d:c6:af:f4:
         cc:21:d0:99:e4:dc:7f:5f:03:10:10:6a:da:f1:be:75:65:1b:
         c6:92:5d:2a:e8:83:7a:56:b9:09:41:25:d8:c9:78:92:46:8c:
         60:a1:80:9c:36:82:10:7f:30:0e:24:08:21:72:1a:b1:1b:16:
         80:b3:7c:89:37:af:b6:24:2e:3b:bf:17:0e:d1:92:44:18:9f:
         52:b1:3c:64:c7:13:0e:4d:1e:b0:c7:15:1b:3b:2b:ce:59:ec:
         c0:24:49:d0:f2:ce:26:46:04:36:3a:d6:98:cb:fb:4e:80:5a:
         a9:4a:1f:9b:be:b2:04:ff:f6:eb:36:39:f6:17:ad:0e:65:90:
         00:e8:87:b2:dd:bb:5e:c5:c4:f5:4f:76:0e:ee:10:2c:bf:d1:
         51:95:d0:db:02:31:7a:1b:ba:6f:6e:99:df:02:0c:ff:40:20:
         22:05:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org