Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EWGc9TQ7fMyms1hQIblWHA6nFYA.roa
File:                     EWGc9TQ7fMyms1hQIblWHA6nFYA.roa (raw, json)
Hash identifier:          /U64MAaqe3bCDaflZLn8yNXsf0CPO9P8OhhDTgpmkA8=
Subject key identifier:   11:61:9C:F5:34:3B:7C:CC:A6:B3:58:50:21:B9:56:1C:0E:A7:15:80
Certificate issuer:       /CN=0d01db542317430414757aacb093fd72069192b1
Certificate serial:       0884F049
Authority key identifier: 0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EWGc9TQ7fMyms1hQIblWHA6nFYA.roa
Signing time:             Sat 01 Jan 2022 09:57:56 +0000
ROA not before:           Sat 01 Jan 2022 09:57:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24935
IP address blocks:        94.158.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142929993 (0x884f049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d01db542317430414757aacb093fd72069192b1
        Validity
            Not Before: Jan  1 09:57:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11619cf5343b7ccca6b3585021b9561c0ea71580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:e7:82:cf:5e:a9:a2:c6:2c:1c:56:1e:a5:
                    19:5b:65:75:8d:84:5a:ca:30:dc:4c:56:5b:64:00:
                    92:fd:f2:35:cd:6b:41:86:52:90:c8:10:81:05:07:
                    60:c9:2c:a0:53:3b:e1:c7:65:37:0a:3b:c7:73:b8:
                    10:8c:49:0a:9c:ea:d5:f9:47:92:49:09:94:5a:d9:
                    17:c0:a8:08:9d:f0:77:9e:1d:e9:8f:f1:dc:d2:97:
                    82:e2:84:cc:25:5e:1c:21:78:95:a1:83:44:55:dd:
                    21:26:69:a0:3d:5b:34:68:47:0e:02:8b:7a:2e:4a:
                    37:99:5b:7c:12:da:06:4d:dc:84:a0:99:36:36:93:
                    38:e5:1b:4e:c1:53:d0:0a:89:91:8a:21:ef:b0:45:
                    a4:1d:ef:e4:a8:0a:c5:66:3d:d2:87:3e:6c:77:9b:
                    9f:86:a8:14:d3:32:52:cc:18:7a:1e:a2:22:4c:35:
                    40:81:35:73:ad:db:b2:74:b9:ca:bf:6e:e9:cb:20:
                    85:37:37:c1:17:fe:bd:80:bb:bc:22:3b:40:7c:7c:
                    c4:00:cb:23:c3:5f:8b:f5:31:1a:f5:c3:70:1f:b8:
                    4e:a2:17:cf:f5:a8:ae:79:a0:9d:e9:28:f2:13:17:
                    3c:a2:af:4e:07:b1:b1:d6:c9:69:20:66:14:d9:64:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:61:9C:F5:34:3B:7C:CC:A6:B3:58:50:21:B9:56:1C:0E:A7:15:80
            X509v3 Authority Key Identifier:
                keyid:0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EWGc9TQ7fMyms1hQIblWHA6nFYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.158.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:80:79:22:e9:c3:33:e1:5e:3a:91:69:9a:66:d1:e5:a7:
         cc:5a:49:b8:1a:e9:d3:d1:c5:4a:18:69:32:b6:82:52:ca:59:
         eb:fc:c1:ad:cb:c4:44:9c:92:20:34:9e:13:d6:24:ce:7a:dd:
         14:8d:4a:fd:b3:99:95:2d:02:6f:97:f2:79:7e:df:55:96:fb:
         32:a5:73:9b:40:18:f8:d0:ac:19:1b:d1:09:dc:50:c0:3e:5b:
         4a:69:8a:b9:ef:75:7d:5a:89:59:45:12:a4:85:de:94:01:2b:
         a6:a3:f3:fa:30:78:b5:40:81:a9:ce:1c:11:fd:43:f0:56:c9:
         1c:71:85:95:69:04:85:df:fd:3b:9a:79:c4:b8:1e:43:1e:f9:
         91:ba:e4:34:0f:cd:a5:8e:28:a6:37:96:b8:71:52:92:0d:f7:
         56:52:a0:9b:e8:d8:7a:c0:a4:c5:90:ea:fe:cf:a0:60:94:05:
         3f:5d:a4:9d:83:b1:75:da:5d:38:65:f0:84:69:c0:34:32:94:
         3a:5c:1f:cb:d3:79:3c:1e:cd:65:28:aa:28:0c:82:0d:cb:fe:
         96:19:cd:38:ec:c7:80:38:98:34:2a:bc:fd:68:8a:50:72:41:
         6f:49:a8:71:52:5d:75:62:10:a1:db:3b:1f:88:18:6c:dd:b4:
         d8:60:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:50 2024 by rpki-client on console-ams.rpki-client.org