Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/eEtJrtQWwdxYGyL3Dx2e9FvAAy4.roa
File:                     eEtJrtQWwdxYGyL3Dx2e9FvAAy4.roa (raw, json)
Hash identifier:          WtxdFu41wp94cc/CYmC1fu5MjHdRkLch0NQgwVPErhM=
Subject key identifier:   78:4B:49:AE:D4:16:C1:DC:58:1B:22:F7:0F:1D:9E:F4:5B:C0:03:2E
Certificate issuer:       /CN=338781c482bef1cf60c5ada2a51b2fdc6a255ea6
Certificate serial:       01DE7AFA
Authority key identifier: 33:87:81:C4:82:BE:F1:CF:60:C5:AD:A2:A5:1B:2F:DC:6A:25:5E:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4eBxIK-8c9gxa2ipRsv3GolXqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/eEtJrtQWwdxYGyL3Dx2e9FvAAy4.roa
Signing time:             Sat 01 Jan 2022 14:01:05 +0000
ROA not before:           Sat 01 Jan 2022 14:01:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39305
IP address blocks:        194.247.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31357690 (0x1de7afa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338781c482bef1cf60c5ada2a51b2fdc6a255ea6
        Validity
            Not Before: Jan  1 14:01:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=784b49aed416c1dc581b22f70f1d9ef45bc0032e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:7f:0a:11:53:f9:7a:45:a3:5b:af:b9:a6:
                    e0:88:c8:b0:06:14:d6:ee:5b:8f:35:63:22:d4:0b:
                    ee:15:75:1e:d0:08:03:37:a1:2c:59:1c:ee:42:fd:
                    70:94:39:39:ea:85:73:de:13:5d:71:5c:73:68:89:
                    eb:14:09:fe:89:8e:32:0a:16:d5:b2:32:15:4b:c0:
                    68:0f:43:aa:9c:d5:83:ad:10:1e:47:c1:e7:0d:90:
                    f7:81:4d:b0:24:7c:3d:b4:a1:1b:5c:80:a9:9e:1f:
                    e3:00:81:c6:75:eb:f1:da:75:51:61:a8:64:c6:c4:
                    3e:2c:f7:b5:e6:db:df:06:9d:9c:a0:70:43:9b:16:
                    2b:bf:a3:94:1f:f0:33:1b:cb:90:b1:a0:8f:38:f4:
                    5a:91:98:9b:c2:b2:3e:bc:92:bd:98:ac:4a:8f:4e:
                    64:f5:57:fe:4b:55:e4:91:de:8f:c3:f8:74:dc:a7:
                    df:ae:df:3d:5f:3e:3a:8d:15:9b:da:cf:1b:41:d8:
                    08:50:b6:3c:2d:17:15:9b:9d:fd:ed:72:e2:dc:91:
                    00:ad:19:b5:1d:ac:51:73:34:fb:0f:79:b1:ad:b3:
                    88:ee:2d:3a:6d:fe:19:f3:36:af:37:02:05:e2:19:
                    9b:d3:22:49:5b:c4:d4:5f:75:38:18:12:e0:b6:da:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4B:49:AE:D4:16:C1:DC:58:1B:22:F7:0F:1D:9E:F4:5B:C0:03:2E
            X509v3 Authority Key Identifier:
                keyid:33:87:81:C4:82:BE:F1:CF:60:C5:AD:A2:A5:1B:2F:DC:6A:25:5E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4eBxIK-8c9gxa2ipRsv3GolXqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/eEtJrtQWwdxYGyL3Dx2e9FvAAy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/M4eBxIK-8c9gxa2ipRsv3GolXqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.247.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f4:27:d9:1a:47:b0:a6:01:6a:f3:0e:90:04:2a:39:2c:91:
         50:54:ac:cf:b4:32:3a:4a:65:28:d4:0f:2f:fa:cf:33:18:f0:
         12:ae:ec:d1:8f:b5:04:46:5d:1d:6c:19:5c:4c:b6:c0:6a:f5:
         8e:00:75:af:f3:78:ed:bc:93:50:10:20:84:83:ee:50:ac:72:
         50:79:60:a6:10:c5:70:f4:04:fe:df:60:46:cd:8d:5c:29:30:
         95:8a:cc:9c:51:2c:64:4d:05:cc:e7:19:dd:d7:2c:e9:9c:59:
         87:24:48:d5:a3:98:69:27:2e:de:59:01:18:bb:f0:13:a0:a7:
         07:c1:6f:72:73:01:40:64:20:5b:3a:af:fc:9e:51:9b:65:92:
         22:b5:c7:07:a4:98:2a:ab:74:7a:49:11:b0:fa:ff:91:15:99:
         2f:11:77:de:52:63:eb:d3:91:19:87:f1:d6:3f:57:12:f3:6b:
         40:4b:50:b8:9e:0a:98:10:da:9d:9f:0c:29:61:32:fa:5c:77:
         46:9a:bb:e8:19:b5:fc:e3:fd:2b:9f:31:5b:6c:d4:f6:4f:e7:
         33:8c:bf:25:55:d8:89:61:8c:5b:79:5c:97:65:99:56:d5:e4:
         a3:8d:5f:69:75:1b:61:f5:3e:6f:57:a3:81:a8:fa:23:b9:a6:
         02:eb:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org