Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/AAK1nLAFAzbNsaxlxC8YvEKyw0I.roa
File:                     AAK1nLAFAzbNsaxlxC8YvEKyw0I.roa (raw, json)
Hash identifier:          Dv6uQwt3E++523liem8rIfDEYmVkoho3N+T1F1VFv0o=
Subject key identifier:   00:02:B5:9C:B0:05:03:36:CD:B1:AC:65:C4:2F:18:BC:42:B2:C3:42
Certificate issuer:       /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial:       038B3C0E
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/AAK1nLAFAzbNsaxlxC8YvEKyw0I.roa
Signing time:             Thu 17 Mar 2022 16:44:52 +0000
ROA not before:           Thu 17 Mar 2022 16:44:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        176.113.99.0/24 maxlen: 24
                          178.212.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59456526 (0x38b3c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
        Validity
            Not Before: Mar 17 16:44:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0002b59cb0050336cdb1ac65c42f18bc42b2c342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:97:6b:13:0e:4b:97:76:05:17:6d:42:da:
                    cd:7d:8c:ca:3f:14:d4:63:ef:8f:c6:9c:89:0b:92:
                    44:c0:08:d2:87:67:a1:a4:b3:58:b8:04:11:50:59:
                    fc:6e:01:c5:6d:ac:96:c8:25:d5:b5:ce:38:d7:a8:
                    19:72:24:70:71:5f:0f:c4:17:05:9a:67:62:ff:d2:
                    95:5c:6a:c5:00:a0:d3:80:74:d5:11:ae:7c:65:a6:
                    eb:f4:30:74:0f:48:3f:60:60:37:1d:bf:f3:40:da:
                    bb:bc:32:6b:70:a7:2f:8c:c4:8e:b3:75:2a:08:db:
                    57:1c:83:27:29:42:9d:9a:4f:d0:bc:8b:b5:3b:3d:
                    43:bd:9a:f4:2b:e9:a0:7f:dd:87:fd:b6:43:b9:fc:
                    88:e8:2c:32:18:c6:73:fb:8f:85:9c:6e:df:ff:dd:
                    5c:d8:34:57:05:3e:60:bd:81:0f:2c:12:ee:c9:89:
                    1c:09:19:a2:3d:ac:54:0e:f6:fa:55:81:f8:d8:e0:
                    17:2b:20:b7:79:bc:cf:95:72:86:a5:9f:41:1d:b8:
                    10:a7:d5:50:27:88:a7:31:1d:6c:6c:47:49:a4:15:
                    d4:7b:5c:96:7c:e7:67:0d:1e:5a:e9:dc:ab:6b:49:
                    13:3a:c5:1f:4e:bc:f0:4c:64:f0:e8:e7:41:23:c3:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:02:B5:9C:B0:05:03:36:CD:B1:AC:65:C4:2F:18:BC:42:B2:C3:42
            X509v3 Authority Key Identifier:
                keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/AAK1nLAFAzbNsaxlxC8YvEKyw0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.113.99.0/24
                  178.212.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:31:d1:ef:fb:87:f9:38:8b:dd:02:fd:cd:18:48:cc:a2:29:
         a9:b6:02:d1:be:a1:1e:11:ce:7c:9c:8b:75:12:f7:23:bf:0d:
         76:0e:a4:6b:1a:d6:8f:45:ab:7f:d5:07:a0:87:84:bf:37:e8:
         b5:d7:53:cc:a6:a5:0e:09:b3:c9:6b:9a:2b:da:28:00:03:df:
         d7:16:0d:f2:a4:5b:54:bc:dc:04:90:40:81:cf:37:a1:b8:e8:
         c3:ef:70:db:5e:85:ea:29:24:8b:7c:0e:ff:d7:31:17:77:27:
         9b:2f:f1:b9:12:0f:bf:19:de:ba:3b:16:de:32:60:f9:36:f5:
         b9:4c:96:55:e1:7b:d9:3f:f6:e4:13:59:0c:42:99:2b:6d:40:
         cc:a6:a9:eb:12:ab:1e:81:cd:13:f5:3c:3d:39:4b:ed:8d:ae:
         0b:f3:8d:1e:c5:cf:ad:53:d7:1d:8b:a9:f8:a4:b8:05:fb:3f:
         3d:73:51:85:92:97:11:af:ac:a6:df:1f:c8:6d:79:00:d6:02:
         f4:fc:ec:f0:55:44:ca:63:46:d6:6f:f2:36:ca:1c:85:6d:f5:
         71:48:37:ff:8e:3b:27:89:96:92:5e:16:f4:b8:4b:ac:34:a3:
         84:55:ad:03:f4:a2:59:2b:85:d2:8e:1a:14:b7:23:4f:81:88:
         1a:05:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org