Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa
File:                     0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa (raw, json)
Hash identifier:          c+7KF9cClxiMxts50givjKrUTfVtkv3/Banv5EM/Tts=
Subject key identifier:   D0:40:49:9C:22:8E:24:E7:91:C7:A1:89:6F:15:93:71:16:AC:5C:34
Certificate issuer:       /CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Certificate serial:       0C4D39C4
Authority key identifier: 9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa
Signing time:             Sat 01 Jan 2022 15:56:34 +0000
ROA not before:           Sat 01 Jan 2022 15:56:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39886
IP address blocks:        109.94.32.0/19 maxlen: 19
                          213.111.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206387652 (0xc4d39c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
        Validity
            Not Before: Jan  1 15:56:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d040499c228e24e791c7a1896f15937116ac5c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:26:78:6c:c9:92:9b:03:2c:c0:7a:07:60:
                    0a:c8:bb:81:ed:d2:b3:75:d3:12:9d:f1:7f:63:72:
                    3d:04:dd:f4:20:35:3e:43:8f:78:f8:c6:f3:75:bd:
                    7f:d7:b2:a0:81:78:d2:51:95:6c:42:bf:bb:c1:ad:
                    f2:cd:22:5a:58:ad:ff:a6:af:19:81:9b:e1:aa:79:
                    91:7c:ab:88:f6:17:6e:9d:ea:40:16:14:43:27:5a:
                    2d:97:04:ff:fb:9b:df:e6:37:c5:21:49:9f:e2:1c:
                    ec:45:83:8b:45:49:17:75:ea:4d:25:57:8c:96:02:
                    55:04:c5:2b:28:ea:89:b8:80:d1:87:bd:5e:46:c7:
                    7e:25:30:53:1f:3a:91:12:59:b6:23:dd:d2:34:0c:
                    f6:42:25:1a:6c:9d:1c:e4:d9:50:38:9e:c5:eb:27:
                    03:88:dc:bd:e3:88:e8:cd:46:8b:0a:18:6d:b9:8d:
                    07:0d:cb:11:2a:fd:3a:3e:bc:d0:ea:2b:64:a7:15:
                    27:4e:4e:e2:b6:91:3a:43:52:ed:83:d5:db:92:eb:
                    3c:eb:20:da:b2:17:f7:90:e8:e7:0c:e5:f8:4f:e7:
                    41:59:d9:92:7a:28:b2:5c:8d:b3:59:03:ba:74:b6:
                    e1:b4:0c:b8:19:30:fb:4a:ac:9e:e9:1b:7b:6f:f3:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:49:9C:22:8E:24:E7:91:C7:A1:89:6F:15:93:71:16:AC:5C:34
            X509v3 Authority Key Identifier:
                keyid:9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.94.32.0/19
                  213.111.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:b0:21:b1:7f:ec:92:d0:39:80:11:8d:c3:9e:b0:11:bb:
         32:99:c8:1b:08:0e:0a:cf:f8:44:cb:5d:bb:16:0f:5e:63:0a:
         01:f7:c4:bf:f2:91:32:71:d1:2c:de:af:e4:6a:a7:58:8e:9d:
         e3:a7:45:e6:e5:80:7c:62:10:b9:bf:cb:14:06:f4:87:65:b7:
         b3:62:b9:dc:78:ef:9a:f3:1d:e9:00:65:26:c8:6b:ba:c1:f6:
         21:be:65:cd:2a:a1:db:bf:e3:0c:da:d4:c9:f4:a1:1b:ea:a2:
         52:10:85:f0:d7:28:68:59:27:ed:6f:30:7b:6f:f4:aa:e1:cc:
         c8:ff:9d:83:11:24:4f:d0:97:9b:21:ac:27:3d:73:68:a6:cf:
         88:f8:33:e4:9d:40:47:a7:ac:0a:4f:08:b8:59:f3:9e:09:c7:
         a1:33:39:71:f2:c1:f1:49:62:c0:7a:84:c8:2e:89:e4:96:4b:
         cd:1f:6d:3b:47:a5:d8:e4:af:20:8c:f0:03:25:b7:ac:60:e3:
         73:2e:2c:18:b6:08:fb:d0:2c:f1:a7:57:f9:8a:db:7a:4b:9f:
         ce:5b:6f:80:fc:3a:a7:97:1d:f2:e1:5c:0d:19:ba:31:8c:08:
         26:2a:92:f1:64:5c:cf:cd:24:85:05:ad:4f:cd:ef:80:f1:84:
         ab:02:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org