Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/80KSnyRSq0PkciyBHtkSE07GQoM.roa
File:                     80KSnyRSq0PkciyBHtkSE07GQoM.roa (raw, json)
Hash identifier:          Gvo83voFU5iS+cssFSq+CVhiwUvVfh9MemBesPzTuJM=
Subject key identifier:   F3:42:92:9F:24:52:AB:43:E4:72:2C:81:1E:D9:12:13:4E:C6:42:83
Certificate issuer:       /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial:       018D84300535DFACB255DDD53E913BC4151C
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/80KSnyRSq0PkciyBHtkSE07GQoM.roa
Signing time:             Wed 07 Feb 2024 15:29:15 +0000
ROA not before:           Wed 07 Feb 2024 15:29:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202656
IP address blocks:        176.126.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:84:30:05:35:df:ac:b2:55:dd:d5:3e:91:3b:c4:15:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
        Validity
            Not Before: Feb  7 15:29:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f342929f2452ab43e4722c811ed912134ec64283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:36:fb:c0:2f:e1:d2:4f:89:dd:7c:59:ff:
                    fb:72:b8:6e:d7:9b:99:bb:e8:fe:18:e8:69:a1:74:
                    55:df:79:23:1a:d0:8d:e7:31:99:0f:c4:47:56:f3:
                    e5:1c:7f:81:1b:7d:e3:f3:74:c0:c9:d5:1d:f2:05:
                    d0:48:2e:f3:36:97:08:5d:c7:73:c1:d6:23:60:f6:
                    47:d9:f6:41:96:98:2d:4f:3e:88:ae:f0:70:0b:31:
                    90:ab:58:2b:6e:db:9a:60:83:d2:82:ea:17:39:bf:
                    1e:3b:28:5e:91:7a:3a:cf:e0:bc:45:5f:58:45:fe:
                    e3:03:4f:62:ce:b4:3e:8b:12:d6:14:62:bd:f4:1c:
                    12:97:62:6d:7b:0b:10:95:57:1b:93:94:0e:49:68:
                    e8:84:a3:d8:b6:0c:f3:b8:03:e2:e4:cb:24:68:1f:
                    c4:84:24:33:cd:98:25:84:46:b8:5f:73:f2:53:74:
                    a3:f2:8f:a2:d5:0c:fe:7d:7b:19:2f:27:a1:87:e5:
                    b9:f6:f4:de:db:f3:e5:f6:e5:b8:64:cb:5c:93:48:
                    6c:ee:7d:9a:4d:cc:1f:6b:9a:22:37:59:dd:33:f6:
                    f2:aa:c9:53:05:d8:3d:0f:66:84:c5:11:a2:69:ab:
                    c2:ba:99:08:fa:ae:46:ee:6a:47:ce:68:e4:d5:44:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:42:92:9F:24:52:AB:43:E4:72:2C:81:1E:D9:12:13:4E:C6:42:83
            X509v3 Authority Key Identifier:
                keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/80KSnyRSq0PkciyBHtkSE07GQoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:17:7d:39:2f:73:63:da:07:ee:88:28:ae:6e:ea:23:fb:8a:
         63:93:92:b8:7d:8c:a1:fd:58:f0:35:28:21:5a:32:5d:0c:15:
         7e:45:5e:e3:c2:92:f1:ee:01:6b:77:99:76:cb:6c:53:50:d5:
         b7:98:1a:4b:6f:92:96:dc:c4:57:91:ed:51:fb:a3:f0:da:66:
         1e:29:78:7f:bf:68:05:7c:19:74:67:57:8c:81:0e:d7:29:79:
         d0:0c:f7:69:dd:50:4b:b1:29:12:78:9f:60:7c:63:bb:63:d1:
         3d:17:17:e2:07:e9:95:35:bb:17:c6:73:dc:78:80:e4:52:d3:
         c1:f6:8e:7f:b9:eb:59:49:c8:b1:b8:27:17:2a:e8:20:fe:03:
         b6:b2:5a:b8:9f:79:c6:6c:35:ef:9f:fd:ec:30:13:08:00:32:
         51:47:91:ce:e3:5e:bf:f5:e2:54:e2:e9:31:61:8f:e1:7a:05:
         e8:64:aa:1a:bf:dc:4e:4b:ad:a5:b2:c5:17:24:d1:58:3f:a4:
         4a:46:ff:8f:1e:c0:09:34:95:f2:55:d2:be:cf:a8:4b:e2:5f:
         2f:b3:6c:74:14:6b:92:c2:9f:a3:c5:e0:6e:f5:97:bd:74:05:
         b0:c1:18:47:94:d6:f8:a7:3e:42:44:67:9f:87:57:f0:4a:7e:
         f5:a2:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org