Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/9JEH9nYMcOr0vpORh3kedBVyQ4I.roa
File:                     9JEH9nYMcOr0vpORh3kedBVyQ4I.roa (raw, json)
Hash identifier:          Wc2QF5ld7fkOCgJwz/yJzS3apXlvZ+Rge/exONYrvYY=
Subject key identifier:   F4:91:07:F6:76:0C:70:EA:F4:BE:93:91:87:79:1E:74:15:72:43:82
Certificate issuer:       /CN=079fbf3bd9bd6c9cf86b6bc956427672e795a948
Certificate serial:       08C8FADA
Authority key identifier: 07:9F:BF:3B:D9:BD:6C:9C:F8:6B:6B:C9:56:42:76:72:E7:95:A9:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5-_O9m9bJz4a2vJVkJ2cueVqUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/9JEH9nYMcOr0vpORh3kedBVyQ4I.roa
Signing time:             Sat 01 Jan 2022 10:56:35 +0000
ROA not before:           Sat 01 Jan 2022 10:56:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49419
IP address blocks:        185.224.56.0/22 maxlen: 22
                          84.19.128.0/20 maxlen: 20
                          84.19.144.0/21 maxlen: 21
                          2a0b:fd80::/48 maxlen: 48
                          2a0b:fd87:ffff::/48 maxlen: 48
                          2a0b:fd81::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147389146 (0x8c8fada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079fbf3bd9bd6c9cf86b6bc956427672e795a948
        Validity
            Not Before: Jan  1 10:56:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f49107f6760c70eaf4be939187791e7415724382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:ce:fc:a7:ce:f1:95:48:46:79:1d:49:e5:
                    84:57:7e:8c:ae:36:52:7a:32:f1:fd:e9:2b:ce:67:
                    d6:7d:18:84:80:6d:1c:22:d2:03:f1:62:78:b3:88:
                    fe:60:75:62:e6:6d:3d:75:13:30:a8:7d:b3:fd:2c:
                    f5:8e:0b:3f:c4:da:5e:08:db:da:28:e5:09:56:27:
                    36:65:ea:a9:6d:dc:8a:3d:4d:0a:88:a4:42:f3:b8:
                    81:36:bb:51:c0:45:a4:85:52:b1:dc:7b:ea:1f:00:
                    29:4e:b1:9f:0a:8b:ba:40:25:f6:d4:b5:dd:65:e7:
                    25:56:3c:da:4b:48:19:c6:a9:f0:dd:7f:fd:7d:11:
                    de:b5:a0:b2:d7:1d:39:34:8d:7a:51:53:01:b4:a4:
                    ab:60:61:7c:4a:d3:37:e7:71:df:b5:47:97:93:19:
                    fe:91:de:85:76:9f:06:8a:3f:51:57:b1:04:48:2a:
                    53:94:ac:75:e0:be:a2:03:03:06:72:e8:03:da:ce:
                    75:cb:d6:c8:c1:b0:69:4f:fc:fa:1b:43:a4:4b:a2:
                    0d:8f:97:e9:30:bb:dc:05:47:2b:c9:af:16:01:16:
                    84:2d:81:2f:6d:cc:61:bd:01:bc:4e:59:db:81:6c:
                    c0:0f:89:ff:4f:b7:5c:c8:37:38:e5:5b:68:72:8b:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:07:F6:76:0C:70:EA:F4:BE:93:91:87:79:1E:74:15:72:43:82
            X509v3 Authority Key Identifier:
                keyid:07:9F:BF:3B:D9:BD:6C:9C:F8:6B:6B:C9:56:42:76:72:E7:95:A9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5-_O9m9bJz4a2vJVkJ2cueVqUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/9JEH9nYMcOr0vpORh3kedBVyQ4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/B5-_O9m9bJz4a2vJVkJ2cueVqUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.19.128.0-84.19.151.255
                  185.224.56.0/22
                IPv6:
                  2a0b:fd80::/48
                  2a0b:fd81::/48
                  2a0b:fd87:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:1a:18:38:c7:7c:7b:63:2a:ca:a8:e2:11:3a:aa:0d:ad:
         0a:30:94:79:db:72:df:4c:c9:a1:3c:79:f7:3d:8c:9a:00:d5:
         5f:b5:2f:7b:7e:70:0f:5f:f9:55:52:02:51:b3:5a:50:38:57:
         41:40:d6:2d:b6:ba:4e:03:79:cf:bc:52:3b:d0:ea:7b:e5:07:
         af:4c:99:9c:c8:13:03:f6:52:9d:43:3f:c6:c7:f7:02:d6:a9:
         55:10:da:9d:de:3f:a2:3b:f9:bb:b6:5a:1b:52:15:e7:a4:15:
         ca:0a:a5:89:43:8b:e2:f9:e5:ce:57:96:97:1e:87:ed:39:0f:
         08:d8:00:9d:dd:ea:28:f3:2f:c9:9f:2b:8c:87:3c:cd:a7:0a:
         d9:cb:67:87:62:3a:32:cb:60:83:7f:26:97:0b:ac:e7:d7:c2:
         6c:bd:f5:b1:c9:2c:6b:29:37:03:28:7d:95:2e:7e:15:69:d1:
         f7:54:10:5f:af:dd:05:39:6d:68:93:2b:f6:f7:66:41:5d:d0:
         e5:ba:1d:29:aa:64:26:33:dd:eb:b2:3f:29:46:2b:67:66:ff:
         8f:17:c9:bc:d1:99:b9:6b:b8:21:4a:ab:65:54:32:1a:21:3f:
         9c:56:4e:d8:60:28:3a:7d:fa:7f:a5:42:39:1b:f7:bb:13:e2:
         80:fe:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org