Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/NMdmiuaLMur7pYZfM5b5L-44DbU.roa
File:                     NMdmiuaLMur7pYZfM5b5L-44DbU.roa (raw, json)
Hash identifier:          92nl47GVdkxn+qIAYyMOXNDWCJnFwQ5w0UomhjjBsQg=
Subject key identifier:   34:C7:66:8A:E6:8B:32:EA:FB:A5:86:5F:33:96:F9:2F:EE:38:0D:B5
Certificate issuer:       /CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
Certificate serial:       041A17BF
Authority key identifier: C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/NMdmiuaLMur7pYZfM5b5L-44DbU.roa
Signing time:             Sat 01 Jan 2022 08:02:11 +0000
ROA not before:           Sat 01 Jan 2022 08:02:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206097
IP address blocks:        185.44.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68818879 (0x41a17bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
        Validity
            Not Before: Jan  1 08:02:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=34c7668ae68b32eafba5865f3396f92fee380db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:24:9b:dc:15:fa:60:f4:4a:12:0c:66:0f:
                    81:d2:09:b7:20:ec:55:c7:17:25:0a:3c:87:fe:d2:
                    82:90:51:7d:20:d3:84:56:cd:95:76:32:7b:42:74:
                    58:e5:1b:c2:6c:c2:ab:53:3b:dd:11:22:c6:1c:06:
                    dd:54:2e:be:15:17:00:31:01:c1:1d:31:82:91:0f:
                    89:f8:ff:74:c0:87:a6:e2:e6:6d:a2:e1:01:bc:4d:
                    12:33:8b:07:a4:66:a9:f5:f5:43:a9:4d:3a:c2:1e:
                    2c:71:86:ed:95:af:75:fa:62:1d:cc:43:aa:a4:4d:
                    ae:84:5b:90:b3:aa:0e:9e:de:43:ef:0c:ec:35:ff:
                    81:77:18:c3:91:52:c2:64:b9:0a:1c:55:0d:60:a5:
                    0b:f1:e3:d2:bd:67:c5:35:b1:bf:5b:73:b1:36:49:
                    06:89:73:49:52:e4:3b:30:58:bd:27:c2:5e:4a:18:
                    d9:71:ab:6c:f4:31:ed:60:42:08:16:43:14:73:44:
                    b4:f3:54:58:0a:a1:57:e0:2c:a9:1f:9e:f1:a8:6e:
                    92:43:92:a2:44:d1:bf:da:a1:df:ec:1d:af:bc:ea:
                    0c:f1:29:70:bb:47:75:4a:9b:14:b1:f1:45:eb:e2:
                    d6:c7:8f:e8:7c:99:a4:75:84:eb:8a:fa:4d:51:10:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:66:8A:E6:8B:32:EA:FB:A5:86:5F:33:96:F9:2F:EE:38:0D:B5
            X509v3 Authority Key Identifier:
                keyid:C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/NMdmiuaLMur7pYZfM5b5L-44DbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:12:ee:9e:c5:49:ef:26:b9:83:52:e8:c5:b0:39:c9:ef:
         4d:b9:c7:2c:a6:56:6a:82:27:c5:89:c3:a4:91:8c:b2:f0:22:
         37:77:53:e2:bd:06:71:d5:3c:f1:f3:a5:76:28:46:45:c8:a9:
         20:71:b3:bb:e6:ad:e4:8c:79:56:75:4f:13:0f:7f:c0:c3:64:
         c8:a6:14:3e:6c:2e:20:81:db:e3:03:0b:dc:25:d1:8e:e5:e6:
         d7:ec:fc:b2:6d:3b:0b:7e:3f:80:48:a4:a9:20:a0:91:3d:48:
         a7:43:fd:3a:24:89:7e:dd:d0:27:14:bd:f1:94:d4:42:1f:23:
         1f:86:37:69:39:88:8c:a1:35:b1:3d:90:04:e7:9f:c2:84:77:
         23:05:c6:99:05:fd:9b:dc:93:79:74:ae:1d:f5:91:4d:19:29:
         a9:a6:cb:bc:96:42:ff:46:f6:25:15:7a:ef:f5:40:d2:9d:da:
         44:78:6b:95:c1:33:b6:69:57:d8:51:ab:8b:db:21:31:73:c6:
         58:97:f9:35:8b:54:ac:1e:7f:57:ce:ed:e8:2b:76:4f:cc:69:
         19:ef:87:d2:8a:f5:d9:a3:33:09:c0:67:7a:ab:bf:bc:90:72:
         68:11:3c:de:65:65:ac:02:f8:c5:ae:e5:16:6e:76:6a:5b:c4:
         19:14:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org