Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/Vr6e2Ic9R8Q4L2f_GtIbTzczTnU.roa
File:                     Vr6e2Ic9R8Q4L2f_GtIbTzczTnU.roa (raw, json)
Hash identifier:          7sXiwUW6CUc/QZUAkuzjPAhQL91XeO8dFiCMMNG2HPU=
Subject key identifier:   56:BE:9E:D8:87:3D:47:C4:38:2F:67:FF:1A:D2:1B:4F:37:33:4E:75
Certificate issuer:       /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial:       0800E4EF
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/Vr6e2Ic9R8Q4L2f_GtIbTzczTnU.roa
Signing time:             Tue 17 May 2022 17:57:29 +0000
ROA not before:           Tue 17 May 2022 17:57:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207480
IP address blocks:        195.39.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134276335 (0x800e4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
        Validity
            Not Before: May 17 17:57:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56be9ed8873d47c4382f67ff1ad21b4f37334e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:90:f5:40:ed:03:5b:1f:6d:23:1a:11:37:
                    43:7d:1d:e7:c9:78:c4:0d:ab:35:d5:6b:11:d8:5c:
                    e5:8b:7c:fe:d5:32:25:09:38:17:55:24:a2:f7:01:
                    eb:64:a6:2d:72:46:e2:13:95:bf:82:ba:7b:43:7f:
                    3b:80:7a:01:30:e9:99:e4:46:61:60:d1:0d:e9:5f:
                    a3:ee:70:b1:97:b7:60:37:d9:64:9e:9d:a1:5d:81:
                    10:6c:26:bb:68:1e:7b:29:76:fe:7e:36:37:10:4e:
                    fd:f4:c7:7e:cb:4e:57:8a:27:80:05:cb:40:e0:97:
                    5e:ab:56:0e:4b:88:85:a9:a3:9e:09:7c:85:89:5d:
                    f6:a8:1d:7d:ae:7b:7d:36:2f:97:07:2c:60:78:c4:
                    76:84:ab:e5:83:a6:1b:d7:d4:8e:04:ef:dc:5f:f3:
                    3c:04:d3:23:2b:5b:ab:4a:ed:65:65:0a:56:d3:4c:
                    a9:49:b7:be:c2:59:0c:95:f3:98:55:93:c2:88:dc:
                    14:11:e1:4d:57:02:74:38:58:63:87:d3:1b:c8:7b:
                    97:69:f2:45:63:8c:4a:ee:47:2e:49:37:f6:1a:3c:
                    ce:ff:6d:78:d8:a7:85:04:12:39:2f:6e:51:c8:f7:
                    b4:9e:76:41:6b:b1:00:eb:ee:45:41:4d:65:16:9b:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:9E:D8:87:3D:47:C4:38:2F:67:FF:1A:D2:1B:4F:37:33:4E:75
            X509v3 Authority Key Identifier:
                keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/Vr6e2Ic9R8Q4L2f_GtIbTzczTnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.39.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:d8:25:59:a7:8d:c6:13:3a:25:52:49:35:7f:f8:d1:50:
         fb:fe:23:c9:11:3a:1d:55:84:57:96:0a:8d:32:68:79:9d:17:
         2a:47:89:9d:bd:9a:b5:5a:c2:d9:a4:c5:32:3d:84:a2:3e:ba:
         22:4e:59:05:d0:0f:32:80:12:4d:e1:aa:83:7d:9d:9a:90:5b:
         62:55:4c:ac:b5:41:59:95:c2:50:ea:0f:5f:5a:63:8f:9e:c3:
         d9:9f:89:52:ea:c2:a8:9e:83:55:e2:b8:fe:28:1c:f7:d7:0b:
         b3:d6:40:6e:72:43:38:d2:13:b4:90:1a:35:67:a3:e9:ee:3a:
         49:b5:c3:4a:cd:68:2c:6f:7b:78:61:b7:89:db:23:59:14:53:
         8b:95:b0:df:0e:a4:82:5e:b4:1b:40:e9:12:6a:b2:2d:95:3b:
         6c:fc:08:67:b6:ff:81:f3:b0:56:a8:16:0d:57:9d:4d:19:29:
         05:de:41:89:cc:56:a3:66:41:39:16:33:9a:59:e4:ad:bc:57:
         8e:f6:22:8f:09:66:57:f9:25:a6:21:6f:45:c9:10:a3:04:d5:
         eb:90:7a:7f:90:93:78:15:48:d1:d4:7f:7f:cf:cf:94:47:17:
         37:1c:d2:2b:ab:31:73:1d:2d:f4:b6:75:91:af:2e:29:a7:7e:
         7f:3f:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org