Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/Vm76ouHd3ySdnDXoUAMDVnSwn10.roa
File:                     Vm76ouHd3ySdnDXoUAMDVnSwn10.roa (raw, json)
Hash identifier:          MsjzRvkM9PxqWGodOOZ4G3sWOiUhTdg8T1VaIGRTTCQ=
Subject key identifier:   56:6E:FA:A2:E1:DD:DF:24:9D:9C:35:E8:50:03:03:56:74:B0:9F:5D
Certificate issuer:       /CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
Certificate serial:       020845A7
Authority key identifier: 0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/Vm76ouHd3ySdnDXoUAMDVnSwn10.roa
Signing time:             Thu 31 Mar 2022 13:29:32 +0000
ROA not before:           Thu 31 Mar 2022 13:29:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        31.41.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34096551 (0x20845a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
        Validity
            Not Before: Mar 31 13:29:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=566efaa2e1dddf249d9c35e85003035674b09f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:9c:c0:06:53:17:fb:ef:c5:34:c8:69:f8:
                    fc:39:f8:f6:8f:f1:f7:8c:92:92:85:7a:26:46:97:
                    58:a0:34:13:81:81:a6:58:75:2f:9d:7e:25:b9:4f:
                    ae:9a:71:77:e0:0b:b2:59:91:43:3b:c2:90:91:ab:
                    60:d2:eb:29:01:8e:6e:33:93:18:95:78:fd:b8:f3:
                    44:44:18:36:23:78:3e:27:64:ff:b5:af:f5:ce:bc:
                    15:74:be:fb:1d:25:c8:ee:a4:89:8e:46:7f:de:08:
                    2b:85:0e:83:fd:49:41:39:2d:cf:33:66:15:cb:37:
                    b6:bb:aa:cf:d9:dd:9e:98:e6:ce:a1:72:b7:c5:7b:
                    1e:11:fc:93:3a:92:a1:e9:14:b6:6e:f1:f4:35:d7:
                    30:de:b2:e3:fc:0b:8c:b9:a1:10:16:74:5a:31:94:
                    57:83:49:31:25:d2:23:5d:6d:12:37:db:90:52:33:
                    b1:31:99:9b:8d:b3:70:a2:84:88:bd:23:48:87:98:
                    aa:5e:04:4c:35:0a:1e:53:93:1e:3f:5c:85:5a:51:
                    6b:1e:f9:4e:70:75:d9:8b:aa:fe:63:df:22:5d:4d:
                    9b:d6:56:ec:06:75:f6:a3:36:21:01:e4:03:8d:5e:
                    c9:eb:58:c5:16:2d:19:8f:06:0e:36:f4:f1:2c:62:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:FA:A2:E1:DD:DF:24:9D:9C:35:E8:50:03:03:56:74:B0:9F:5D
            X509v3 Authority Key Identifier:
                keyid:0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/Vm76ouHd3ySdnDXoUAMDVnSwn10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:0c:0a:c6:5d:f4:5a:12:29:c3:c8:1e:09:8b:0f:54:1e:
         2d:fc:80:4e:fb:c2:d7:36:61:0b:9c:2d:c7:59:72:c5:1f:8d:
         81:ff:e1:45:7d:0e:43:ad:66:d4:11:37:a4:6c:f6:12:6a:5d:
         57:a3:4c:0b:ba:9c:f3:8b:04:97:3a:8d:dc:95:b2:be:f8:f7:
         88:53:71:2d:67:dc:52:35:d1:d2:4d:0b:e5:1b:c0:34:61:79:
         e8:6b:4d:4b:c0:a7:43:49:2b:50:19:c6:b7:78:a3:63:63:9e:
         f7:be:ad:8b:15:75:56:49:d5:69:d9:ce:9a:26:e3:b4:f2:cf:
         0d:13:5d:fd:e2:2f:aa:1d:99:c3:4d:30:f6:0e:30:79:52:87:
         96:19:e4:ca:29:64:6c:61:9b:85:46:cd:7f:6c:96:70:b0:3d:
         64:b4:b6:39:fa:9d:6a:04:c6:5e:54:94:c7:d5:6d:b6:ea:98:
         b8:b8:4a:01:a7:67:d4:bd:0f:b9:ba:7d:9c:7b:79:d6:ac:fa:
         26:68:15:ab:5a:cd:ce:82:12:75:22:56:18:d9:d3:7a:44:ae:
         43:25:16:38:88:bb:75:9c:fc:dd:58:81:22:6c:87:a5:13:4b:
         a3:b3:24:f8:fd:52:4e:c0:27:b8:eb:8f:9b:f5:01:74:e7:bd:
         c3:11:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org