Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/e3iPmApzwNc_0yItXs1mSfxQbFY.roa
File:                     e3iPmApzwNc_0yItXs1mSfxQbFY.roa (raw, json)
Hash identifier:          ualbf1Npf4bHnEBm6ujBkWYfNMAuRg28qwG9Yx3Sh8E=
Subject key identifier:   7B:78:8F:98:0A:73:C0:D7:3F:D3:22:2D:5E:CD:66:49:FC:50:6C:56
Certificate issuer:       /CN=5afc91718462e5de210097413199d6ce1365776c
Certificate serial:       01856F39202F99BE6495D7DC32A973813DB6
Authority key identifier: 5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/e3iPmApzwNc_0yItXs1mSfxQbFY.roa
Signing time:             Sun 01 Jan 2023 21:24:52 +0000
ROA not before:           Sun 01 Jan 2023 21:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        194.26.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:39:20:2f:99:be:64:95:d7:dc:32:a9:73:81:3d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afc91718462e5de210097413199d6ce1365776c
        Validity
            Not Before: Jan  1 21:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b788f980a73c0d73fd3222d5ecd6649fc506c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:f1:27:e6:e3:54:c9:49:85:07:b5:66:9f:
                    6c:04:6d:01:00:f6:1d:b5:45:cd:5a:44:e8:e9:37:
                    9a:bf:9f:9f:03:9e:a2:6f:6c:f3:d7:d8:a3:ef:66:
                    10:99:09:33:ed:17:e2:2b:d4:2b:d2:3b:8e:68:b7:
                    57:e7:69:82:60:8c:39:dd:41:c2:9e:a7:50:7b:7b:
                    fe:13:b7:72:c9:83:a8:3d:c5:bb:4a:a4:1e:45:4d:
                    a8:f3:e9:df:77:81:7f:c9:70:a2:66:aa:2d:00:c3:
                    dc:eb:2c:9f:ea:09:33:1c:d4:9e:41:3c:f3:86:07:
                    74:6b:70:56:b6:56:f9:89:29:4a:68:aa:c4:5b:77:
                    d1:98:58:3c:9b:fd:94:f8:59:62:49:8e:b5:70:0d:
                    e8:3a:81:ab:6f:43:67:79:62:dd:7e:8f:a4:ba:78:
                    d3:d6:bd:db:6f:ff:a0:11:89:21:e4:7a:4c:83:5e:
                    31:d5:a3:8a:8b:84:b4:d5:69:ac:c4:2e:50:c1:15:
                    90:00:1e:81:98:1f:0d:5b:04:dd:9f:13:53:a5:c9:
                    a1:6a:9c:b5:09:cf:59:69:a2:9e:b7:2d:e2:2e:48:
                    f6:4f:dd:8e:0c:2f:67:c1:a4:3b:75:e9:f7:14:83:
                    71:44:45:5f:89:83:36:2d:e8:7f:98:65:bd:fe:b7:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:78:8F:98:0A:73:C0:D7:3F:D3:22:2D:5E:CD:66:49:FC:50:6C:56
            X509v3 Authority Key Identifier:
                keyid:5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/e3iPmApzwNc_0yItXs1mSfxQbFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:81:cd:cf:5e:38:83:a7:7a:83:cb:3a:24:12:42:21:58:
         45:5f:d6:16:f9:90:e0:65:84:f7:f7:df:3f:90:63:ef:2f:21:
         bb:79:dc:f2:15:ff:5a:20:e4:79:aa:e5:8c:db:95:80:28:76:
         cc:c1:19:b7:ee:00:78:f2:26:4f:f5:df:80:54:a3:c8:3b:4f:
         a7:6c:b8:ba:3d:3f:da:b1:36:80:4a:9b:e3:55:82:20:d8:af:
         79:9b:ed:42:56:c7:2c:dd:b4:63:c3:01:95:74:b0:78:cd:e5:
         d2:0d:b7:50:e5:b7:ad:0c:c7:4e:12:70:22:c8:1d:3e:5a:11:
         e1:77:aa:a9:61:3c:e9:78:ad:21:39:7e:86:60:d9:64:bf:7f:
         7b:5f:8a:70:9d:99:cd:ee:66:8d:bb:9a:9a:69:cd:6e:e7:ee:
         dd:92:96:93:b1:38:c4:4d:7e:a1:08:33:fa:64:32:8e:d2:67:
         75:7b:fe:64:9b:61:dd:e3:3c:41:23:fd:71:5f:5c:24:9a:1e:
         ba:d2:20:6c:88:39:cb:20:3d:64:c2:f1:75:92:8a:2e:30:ec:
         99:c5:b5:16:a0:23:91:45:ae:6d:c2:a1:de:6b:0c:18:5c:cb:
         8b:62:3b:cb:c0:41:c1:6f:32:3f:d1:37:09:1e:e7:c0:55:b6:
         78:51:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org