Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/EBL_GzRzZLG3s-SXV8kVcs01CI0.roa
File:                     EBL_GzRzZLG3s-SXV8kVcs01CI0.roa (raw, json)
Hash identifier:          xyAjy43oePh6HJtF+pTUSGKfWCcMg88QM6HNoJ9Ricg=
Subject key identifier:   10:12:FF:1B:34:73:64:B1:B7:B3:E4:97:57:C9:15:72:CD:35:08:8D
Certificate issuer:       /CN=cfeb50a59fe6789b0d289457ac94ab0ce4951094
Certificate serial:       0182546861ED9D71427A862CE7ECF0FC0562
Authority key identifier: CF:EB:50:A5:9F:E6:78:9B:0D:28:94:57:AC:94:AB:0C:E4:95:10:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/EBL_GzRzZLG3s-SXV8kVcs01CI0.roa
Signing time:             Sun 31 Jul 2022 13:18:23 +0000
ROA not before:           Sun 31 Jul 2022 13:18:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44016
IP address blocks:        185.82.75.0/24 maxlen: 24
                          185.82.74.0/24 maxlen: 24
                          185.82.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:54:68:61:ed:9d:71:42:7a:86:2c:e7:ec:f0:fc:05:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeb50a59fe6789b0d289457ac94ab0ce4951094
        Validity
            Not Before: Jul 31 13:18:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1012ff1b347364b1b7b3e49757c91572cd35088d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:03:6f:7c:92:04:32:2a:d9:b3:06:22:97:
                    41:d5:b5:f0:74:9b:a4:b7:ef:ff:52:fd:5d:3f:ec:
                    6a:64:3b:3d:1a:92:6b:9b:a1:90:bf:85:87:7f:ae:
                    99:b8:96:11:c3:3f:e9:09:4a:9b:ad:6e:00:b2:32:
                    5f:40:1e:a0:29:ce:2b:c5:35:3d:6d:7c:bf:88:7f:
                    ff:1c:ed:f3:e1:e8:f9:14:64:a4:04:82:89:de:53:
                    6c:45:37:fb:be:84:72:19:09:50:97:e0:10:2d:38:
                    11:34:5a:7c:15:d1:e7:58:5f:91:89:d3:29:75:51:
                    42:35:14:92:5d:89:1f:55:0c:4e:1b:3c:e4:b1:72:
                    5a:5b:16:6f:e1:7e:80:06:c5:99:ce:45:46:56:a6:
                    88:05:00:80:ad:fd:3e:70:65:45:a2:cf:c8:c7:36:
                    87:36:87:da:e5:6c:cd:aa:29:5e:4d:90:0a:62:ed:
                    f3:c3:52:df:a8:c4:21:9e:7d:f5:73:66:20:da:3f:
                    60:f9:20:0a:4a:a7:24:46:43:ee:ca:b3:27:aa:a7:
                    9e:b5:96:73:f0:9e:46:f9:e5:ea:d8:f8:50:d4:1e:
                    52:d0:5d:d0:db:59:64:1b:30:1d:76:6b:63:c7:f1:
                    8d:1a:4a:fc:51:f7:c1:8c:d3:b9:94:71:30:38:7e:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:FF:1B:34:73:64:B1:B7:B3:E4:97:57:C9:15:72:CD:35:08:8D
            X509v3 Authority Key Identifier:
                keyid:CF:EB:50:A5:9F:E6:78:9B:0D:28:94:57:AC:94:AB:0C:E4:95:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/EBL_GzRzZLG3s-SXV8kVcs01CI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.73.0-185.82.75.255

    Signature Algorithm: sha256WithRSAEncryption
         50:69:c9:e8:47:4e:72:63:13:54:e9:d1:03:42:7c:64:b3:91:
         01:c6:48:87:23:b9:b8:2d:ff:f4:f5:ca:cd:1a:c0:0e:57:62:
         1f:67:fa:86:3f:63:b4:12:a2:a3:9d:36:cb:56:19:5e:93:c8:
         ba:2f:9a:de:e7:a2:b5:7f:f1:66:fc:86:b7:48:b2:eb:15:dd:
         be:e0:50:c1:36:21:4a:82:94:8b:d6:74:88:4c:53:56:e8:4f:
         72:72:99:cf:a1:a8:0f:fe:ca:4c:49:39:85:d9:40:a1:94:a9:
         7a:28:54:f9:f5:c7:ab:09:77:9a:b8:9b:46:8d:e0:3e:1b:bf:
         a7:53:28:11:35:f7:bd:c3:23:f2:25:89:5a:dc:60:59:1e:84:
         22:5f:88:e9:ff:1c:7c:e6:bf:13:01:00:11:16:3b:e8:c2:fc:
         bf:62:cb:aa:49:57:f8:56:66:ab:01:15:36:80:6a:ae:35:e0:
         ec:db:55:d7:41:70:6a:81:de:77:de:e9:b3:d3:3f:5c:cd:91:
         9b:15:cd:3d:b8:ba:5b:bc:51:20:0c:2e:28:87:08:a0:4c:84:
         f5:99:95:50:4c:fe:71:46:79:1f:2a:0b:c6:0a:04:1f:f2:04:
         f6:76:e0:0e:8e:57:33:a4:68:d8:23:1a:ee:0c:01:bc:76:36:
         1c:e3:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:58 2024 by rpki-client on console-ams.rpki-client.org