Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/ZMHgBF6_kXHsbtGxidOgPnulsOI.roa
File:                     ZMHgBF6_kXHsbtGxidOgPnulsOI.roa (raw, json)
Hash identifier:          2MvcWM7LYuDCn9kAec8ezprwF0U0kxpQp7kgRtfVW9k=
Subject key identifier:   64:C1:E0:04:5E:BF:91:71:EC:6E:D1:B1:89:D3:A0:3E:7B:A5:B0:E2
Certificate issuer:       /CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
Certificate serial:       E1F744
Authority key identifier: 96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/ZMHgBF6_kXHsbtGxidOgPnulsOI.roa
Signing time:             Sat 01 Jan 2022 11:53:49 +0000
ROA not before:           Sat 01 Jan 2022 11:53:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        80.71.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14808900 (0xe1f744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
        Validity
            Not Before: Jan  1 11:53:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64c1e0045ebf9171ec6ed1b189d3a03e7ba5b0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:d4:1a:0e:2a:bf:25:2c:33:0b:1d:0f:19:
                    4e:b5:a7:a2:e4:42:cb:86:06:66:b6:21:1d:0c:e3:
                    f4:35:ed:fe:49:e2:d8:1c:c0:62:92:ee:27:c3:24:
                    3a:32:ee:b3:21:d2:f5:2f:c1:11:fa:7a:88:38:73:
                    f8:a0:7c:a6:7a:ce:67:a6:62:89:4e:a3:48:bd:ed:
                    45:4a:da:90:a0:8c:aa:c7:27:a7:34:f4:d5:f2:a5:
                    15:26:1b:ce:94:b5:9b:5c:cf:02:8d:9a:87:fe:0f:
                    53:86:4d:01:ae:c1:45:f5:9b:4d:a0:f5:a1:6f:6d:
                    16:8d:79:e9:86:c8:a0:05:d8:2b:fc:b2:91:0b:43:
                    fa:35:ef:ea:d6:de:91:83:98:fa:e6:fd:c4:29:f3:
                    8e:37:96:a5:72:21:ec:8d:4c:65:84:e3:22:a3:2c:
                    a5:86:05:73:ab:d7:6a:65:1a:86:ea:24:db:a7:7d:
                    25:49:be:70:66:b5:f3:da:4a:a5:1f:a9:7a:13:db:
                    69:82:07:1b:66:82:c9:b9:b7:1c:75:92:73:16:3f:
                    b9:74:c7:0a:4d:fd:fc:26:82:cf:2d:dd:3d:33:a3:
                    2a:2a:db:ed:2b:e8:24:12:7e:5d:cf:74:9a:9d:49:
                    55:ab:3f:5f:2e:37:37:c6:13:6b:69:84:3b:ce:ae:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:E0:04:5E:BF:91:71:EC:6E:D1:B1:89:D3:A0:3E:7B:A5:B0:E2
            X509v3 Authority Key Identifier:
                keyid:96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/ZMHgBF6_kXHsbtGxidOgPnulsOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/lgv_0ND7W2jwhxc4Ug3PQihM-jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:10:2b:0d:25:e4:d1:5f:65:23:ff:0f:fb:39:d2:b0:80:
         22:5b:9a:c9:0a:ff:af:0e:b5:5a:f6:7e:5f:b7:07:67:33:e7:
         05:c7:b5:fe:fd:ae:c5:a1:1d:13:2d:9b:29:4d:70:c7:4c:42:
         94:86:86:03:7b:9e:06:83:a3:fd:18:8e:89:2e:b2:b3:fe:3e:
         05:f8:c7:7c:4f:69:00:66:63:04:5a:2c:17:0a:33:1e:2c:53:
         01:1b:32:9c:cb:c7:d7:f5:d1:a5:90:16:73:17:a7:21:f4:30:
         e9:ed:68:b0:63:3a:ae:89:8c:a9:8c:e2:05:00:7e:79:1b:f0:
         73:f2:ae:17:e9:46:df:87:e9:5b:f7:f2:67:44:fa:43:04:c7:
         bf:75:bc:cf:82:8f:b0:8e:ef:44:29:5d:98:6f:62:42:9f:51:
         00:e6:ee:e3:e0:85:87:1d:75:e8:fd:cf:ca:eb:70:ab:a1:a9:
         58:5c:92:dc:3e:5b:39:fe:cc:61:d5:e8:8a:30:11:ed:55:45:
         40:89:df:f2:e2:d7:bc:6b:f8:de:52:d5:d2:fb:5e:26:74:53:
         93:6a:d5:22:ab:a0:25:b3:17:7d:94:45:46:8a:52:96:77:d7:
         3f:93:63:6c:a5:94:c1:84:8a:4b:f1:93:91:c3:cf:7f:ff:e9:
         c9:04:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org