Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/WKHHPc5mQ4VzFZAFB3uxbxFzvAE.roa
File:                     WKHHPc5mQ4VzFZAFB3uxbxFzvAE.roa (raw, json)
Hash identifier:          mLYZRfHfTftfuaVBhiksVF2Iba34+aN3lV3NVpMOBGY=
Subject key identifier:   58:A1:C7:3D:CE:66:43:85:73:15:90:05:07:7B:B1:6F:11:73:BC:01
Certificate issuer:       /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial:       011C7833
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/WKHHPc5mQ4VzFZAFB3uxbxFzvAE.roa
Signing time:             Sat 04 Jun 2022 20:35:20 +0000
ROA not before:           Sat 04 Jun 2022 20:35:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207967
IP address blocks:        217.119.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18642995 (0x11c7833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
        Validity
            Not Before: Jun  4 20:35:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58a1c73dce66438573159005077bb16f1173bc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:62:0c:3c:65:cd:4d:9d:b6:d0:cc:64:66:
                    60:49:7b:2a:ac:da:6e:ef:6c:2b:6c:41:00:2c:a3:
                    fa:3f:cb:52:85:c5:7d:70:af:b2:19:6d:1f:92:20:
                    4d:8f:b5:e4:ef:a3:d7:db:bd:0a:23:d6:a7:d0:cd:
                    2d:9c:64:1d:75:fb:f3:f0:fc:b9:73:84:d4:34:6b:
                    ec:30:8d:2e:ac:61:d9:ba:86:34:45:63:3f:76:c9:
                    35:95:1e:74:2a:b5:4b:df:27:36:eb:ac:d4:f2:7d:
                    46:d4:06:50:8f:63:f3:b0:c8:19:92:a4:44:12:90:
                    86:cd:cd:26:2e:a0:2a:7d:51:44:5d:a3:05:69:95:
                    0e:7f:69:85:38:f7:97:4d:52:61:e4:06:7a:19:e9:
                    ab:a0:e7:bc:ac:32:ea:8a:44:b4:f1:0d:82:7e:6e:
                    71:f2:ae:52:dd:6b:0f:b2:c4:fe:31:46:2a:5a:bf:
                    cd:86:3b:f4:5c:56:d2:75:74:52:c2:65:dd:a4:fe:
                    5b:96:2a:5e:03:1c:a2:f2:2c:aa:ad:ad:76:d9:09:
                    ac:c8:0b:56:66:05:02:ab:29:56:f2:4c:f5:c3:49:
                    14:47:64:b4:e7:da:a0:af:de:4c:45:5a:b7:02:4c:
                    90:ea:6d:e4:b6:80:7b:53:59:aa:84:64:42:f7:fd:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:C7:3D:CE:66:43:85:73:15:90:05:07:7B:B1:6F:11:73:BC:01
            X509v3 Authority Key Identifier:
                keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/WKHHPc5mQ4VzFZAFB3uxbxFzvAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.119.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:fb:5c:7b:ad:58:35:3d:d2:ec:9f:49:7f:9e:ef:99:b7:
         94:d6:9b:e0:5b:17:7d:7e:fc:d0:91:8f:7a:e6:f3:ff:b6:d1:
         26:fc:e7:95:84:f3:d7:54:70:c0:53:9c:1e:70:0e:5e:e2:39:
         60:cc:15:02:35:36:e5:95:90:7c:14:38:73:52:20:3d:0a:de:
         4f:8b:33:bc:1c:d0:3f:e3:c4:c3:4f:24:ef:cb:2a:4a:e0:08:
         6a:9f:0f:4e:53:8c:81:5f:79:d2:e2:65:c8:32:ff:be:70:ec:
         27:7a:26:bc:3b:f4:ee:62:58:a7:e0:f8:54:86:a8:76:c9:d1:
         7d:3a:af:a7:68:f1:3b:75:df:55:51:0f:4f:0f:86:0d:b9:df:
         d4:d2:9f:86:4d:a3:56:1e:7c:5e:67:99:70:ee:d2:7f:55:dd:
         46:4b:e4:da:21:d0:58:56:5d:d3:92:41:97:81:ab:8a:90:0f:
         47:25:98:dd:95:57:f6:55:38:cb:f9:4e:7e:ef:03:f8:fb:7e:
         f8:bf:6b:ad:65:62:8f:ab:7d:5c:99:dd:94:1d:1e:2f:ba:61:
         f9:fb:5f:73:36:28:bf:de:6f:85:8e:96:5b:a2:94:ce:91:01:
         53:fb:ca:4a:1c:8f:55:f8:78:8f:b9:fc:b8:2c:da:90:c4:5c:
         f8:b4:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:55 2024 by rpki-client on console-fra.rpki-client.org