Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/efa3jueyFVmiGSAB7HlVSnwGVs4.roa
File:                     efa3jueyFVmiGSAB7HlVSnwGVs4.roa (raw, json)
Hash identifier:          qLrRKUS8CPMjCTk6VcaCicVrrsvgIxnbYXHVgWnlLgQ=
Subject key identifier:   79:F6:B7:8E:E7:B2:15:59:A2:19:20:01:EC:79:55:4A:7C:06:56:CE
Certificate issuer:       /CN=17690727b448dd00953cd4da5d8835121a54ce48
Certificate serial:       01F3BBD5
Authority key identifier: 17:69:07:27:B4:48:DD:00:95:3C:D4:DA:5D:88:35:12:1A:54:CE:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/efa3jueyFVmiGSAB7HlVSnwGVs4.roa
Signing time:             Wed 30 Mar 2022 07:37:51 +0000
ROA not before:           Wed 30 Mar 2022 07:37:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203973
IP address blocks:        185.237.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32750549 (0x1f3bbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17690727b448dd00953cd4da5d8835121a54ce48
        Validity
            Not Before: Mar 30 07:37:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79f6b78ee7b21559a2192001ec79554a7c0656ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:44:12:9b:ab:b7:0c:06:33:e0:4a:c2:27:
                    cf:c3:5d:3f:81:c0:a7:57:1d:bf:a8:ad:58:f8:88:
                    9b:25:70:02:79:07:66:92:d3:3b:7c:cc:f3:30:61:
                    24:47:1d:af:17:81:23:b8:dc:89:c5:54:6b:8e:de:
                    14:12:a2:96:ab:c1:44:03:8c:31:cb:23:d0:1a:5a:
                    0d:80:cb:33:0b:ba:f2:16:e8:41:f4:db:b6:73:53:
                    40:64:f7:db:16:9b:a3:b9:e1:2d:df:8e:97:69:e1:
                    96:cb:a1:91:fe:03:d0:fb:f3:c0:26:5a:ec:df:11:
                    58:75:65:d1:8b:85:d3:26:33:89:6e:50:59:5c:c8:
                    bd:3e:23:1a:9f:2b:1d:80:37:f3:88:86:e4:6e:69:
                    3c:2d:aa:53:48:d7:22:8a:99:f0:dd:61:9b:43:17:
                    65:ba:fc:a9:59:9f:30:c5:58:b2:dd:b7:50:4b:95:
                    a0:05:bd:2a:c8:ad:34:c5:21:85:d2:b1:e6:26:18:
                    91:fd:16:0a:da:34:76:3a:3d:84:ce:68:0d:13:09:
                    a1:df:b2:1c:bc:f8:42:6e:86:cb:57:50:00:7c:e5:
                    43:6c:e7:b6:c1:95:9d:df:52:5f:35:0d:24:81:45:
                    23:d6:71:ee:bd:32:02:ac:2e:4a:c4:64:f6:45:dd:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F6:B7:8E:E7:B2:15:59:A2:19:20:01:EC:79:55:4A:7C:06:56:CE
            X509v3 Authority Key Identifier:
                keyid:17:69:07:27:B4:48:DD:00:95:3C:D4:DA:5D:88:35:12:1A:54:CE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/efa3jueyFVmiGSAB7HlVSnwGVs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:22:79:a8:5a:2f:bc:81:4d:7d:93:f9:ab:25:ae:bf:1e:
         3a:66:f1:cf:35:f1:36:e0:9c:22:41:ac:d5:8d:6c:21:1b:24:
         33:c0:3a:a6:94:3a:e7:cc:06:9d:7b:0c:b6:63:70:bf:69:67:
         24:4b:f5:f6:6e:15:39:c5:99:aa:48:38:1f:0f:a2:3f:03:2f:
         96:09:97:c3:eb:c0:87:fb:7f:c5:25:66:17:ae:f2:5a:cb:90:
         90:bc:d9:2b:74:27:53:f5:ba:41:ec:49:f4:ff:09:f2:39:05:
         c7:32:27:29:0a:3a:ce:e4:f7:a0:e9:f9:d0:b5:fe:a1:75:d5:
         8d:8b:3b:16:fb:88:6d:9e:dd:6c:4e:36:01:94:1e:b8:ab:4b:
         c2:5f:8f:28:bb:d0:b1:55:fc:c6:aa:23:56:0a:cd:53:f0:d9:
         35:35:46:bf:f6:0b:f7:36:e9:17:31:f7:7d:bd:31:04:fa:e0:
         74:b0:d8:75:e2:2a:fc:61:ba:bb:8e:03:cc:81:a0:37:43:73:
         c3:57:4e:5e:ac:36:16:48:b6:bc:a9:30:7a:23:19:2d:63:47:
         a1:33:25:f3:eb:64:6d:64:42:eb:de:9a:92:da:82:45:dd:8f:
         28:3b:37:14:de:4f:89:b1:05:04:87:bb:f9:43:5d:ff:fb:8d:
         3b:f4:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:27 2024 by rpki-client on console-ams.rpki-client.org