Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/kmQuSMUyroC-X18p3ZLoMQdLhyM.roa
File:                     kmQuSMUyroC-X18p3ZLoMQdLhyM.roa (raw, json)
Hash identifier:          wjxjeI/TUtxOLwyNdYhrpQnorX1S8SmKteVa4niJMMU=
Subject key identifier:   92:64:2E:48:C5:32:AE:80:BE:5F:5F:29:DD:92:E8:31:07:4B:87:23
Certificate issuer:       /CN=e97f0e77239b7bf86965075529b23dc97e332066
Certificate serial:       018570DE40449AFEB7A3EC7BF97BB57846CE
Authority key identifier: E9:7F:0E:77:23:9B:7B:F8:69:65:07:55:29:B2:3D:C9:7E:33:20:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X8OdyObe_hpZQdVKbI9yX4zIGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/kmQuSMUyroC-X18p3ZLoMQdLhyM.roa
Signing time:             Mon 02 Jan 2023 05:04:51 +0000
ROA not before:           Mon 02 Jan 2023 05:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        176.56.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:de:40:44:9a:fe:b7:a3:ec:7b:f9:7b:b5:78:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f0e77239b7bf86965075529b23dc97e332066
        Validity
            Not Before: Jan  2 05:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92642e48c532ae80be5f5f29dd92e831074b8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8f:f5:76:f8:b4:30:64:b3:ad:53:d4:4e:09:
                    f6:44:9b:09:1d:67:b4:87:b2:da:8b:c5:2d:77:a9:
                    3c:e0:a9:27:4e:69:1d:79:9a:4e:bc:07:52:68:41:
                    dc:00:ae:20:77:af:6f:60:be:98:2e:f6:a5:d6:4d:
                    78:ea:07:db:9e:a1:75:62:bd:d1:69:f3:21:47:fa:
                    56:54:3d:4a:57:c7:41:e8:2d:09:ce:3d:4b:96:15:
                    3b:ee:63:e9:7e:e7:dd:54:21:80:b6:1b:5c:5d:3c:
                    ae:61:2c:71:94:75:e2:20:90:26:a4:21:97:52:31:
                    ea:6a:72:61:ce:84:58:f3:ec:0a:b6:f6:0a:36:e3:
                    95:af:ab:4f:d4:8f:08:12:f6:30:ab:61:18:d5:93:
                    d3:bf:7f:3d:4b:5f:55:c7:f5:55:bc:c4:6c:7d:88:
                    4b:49:cb:94:7b:db:90:b2:c3:4a:2e:b8:00:8d:a8:
                    dd:44:65:bb:bd:0e:86:6b:a0:3e:90:b6:8a:03:60:
                    84:c1:f9:d4:cb:44:72:84:67:08:79:63:b0:1a:8c:
                    6d:93:38:06:86:2e:97:e9:43:f4:d7:61:a6:4f:2b:
                    75:56:c9:b4:12:07:fd:30:71:9e:c1:05:d0:02:f6:
                    ec:e8:58:62:3b:e8:1a:37:3c:ee:75:d4:90:ee:1c:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:2E:48:C5:32:AE:80:BE:5F:5F:29:DD:92:E8:31:07:4B:87:23
            X509v3 Authority Key Identifier:
                keyid:E9:7F:0E:77:23:9B:7B:F8:69:65:07:55:29:B2:3D:C9:7E:33:20:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X8OdyObe_hpZQdVKbI9yX4zIGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/kmQuSMUyroC-X18p3ZLoMQdLhyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/6X8OdyObe_hpZQdVKbI9yX4zIGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:5e:27:9c:5c:e3:56:1b:56:e7:fa:91:49:c8:99:35:07:
         a1:3f:96:82:cd:2e:50:72:da:17:90:eb:06:ba:d8:aa:db:e0:
         f3:82:5c:2f:e6:c0:12:64:18:1c:55:c2:12:9a:14:35:5d:69:
         f0:eb:11:89:a3:af:9c:44:3f:53:3a:0f:78:ee:95:2e:4d:2b:
         2f:41:ba:b7:dc:6b:d9:6b:4f:0d:b2:64:21:96:02:04:7c:ad:
         1d:18:97:7b:9f:60:86:f9:f8:54:36:84:28:24:0b:8f:b1:cc:
         01:b8:ac:86:b4:18:a6:6b:c9:85:e9:af:6c:bc:f6:05:58:36:
         65:1a:e6:7b:4d:07:b9:c0:7b:af:a8:8b:42:80:71:5c:e5:7f:
         4d:10:34:e4:b3:45:e8:82:90:27:e8:69:91:1f:af:6c:33:8a:
         6e:78:b2:64:5b:25:6d:5d:3d:b0:6d:eb:47:ef:62:f7:15:ff:
         51:31:03:09:c7:06:b0:9f:07:db:3a:da:56:90:dc:b1:70:9f:
         f1:ce:7e:6c:a6:c7:7a:37:08:29:fa:10:15:16:14:64:43:c4:
         b9:dd:af:86:bf:34:76:23:07:e5:28:7e:ca:27:cf:c0:9a:e8:
         ea:55:5f:73:6c:6c:af:d5:a4:f3:f0:82:36:a2:04:96:0e:3b:
         03:b4:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:47 2024 by rpki-client on console-fra.rpki-client.org