Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/_3EzreeyBnZhHCuTqShVETzNNZY.roa
File:                     _3EzreeyBnZhHCuTqShVETzNNZY.roa (raw, json)
Hash identifier:          sWeTtYLNjd1Zie6VTEn0UaubxWcf35b8qzraNOuIKR4=
Subject key identifier:   FF:71:33:AD:E7:B2:06:76:61:1C:2B:93:A9:28:55:11:3C:CD:35:96
Certificate issuer:       /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial:       048672DC
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/_3EzreeyBnZhHCuTqShVETzNNZY.roa
Signing time:             Tue 28 Jun 2022 09:25:02 +0000
ROA not before:           Tue 28 Jun 2022 09:25:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        178.212.205.0/24 maxlen: 24
                          178.212.204.0/24 maxlen: 24
                          178.212.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75920092 (0x48672dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
        Validity
            Not Before: Jun 28 09:25:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff7133ade7b20676611c2b93a92855113ccd3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:5f:7a:57:9e:45:4f:05:d7:10:6d:93:fc:
                    2f:83:4d:17:e0:5c:49:1f:0e:d9:33:6e:3f:56:ba:
                    22:e6:f3:4a:d8:54:a7:27:3f:a2:f7:5b:b2:40:10:
                    85:85:a6:2b:c5:2d:85:74:ef:44:5f:ad:9c:a5:69:
                    45:a6:75:89:9b:49:82:b0:df:d3:1a:ed:ca:f0:d6:
                    2d:bb:78:54:7d:12:27:4f:59:7b:86:c4:d3:17:51:
                    3d:aa:34:1f:55:89:71:df:bb:39:e0:2c:1e:98:98:
                    b2:20:52:2e:bc:a0:10:ce:32:2e:19:94:70:84:38:
                    8c:7b:69:3a:ba:cf:39:63:03:27:90:5a:c1:33:2c:
                    70:bd:46:e2:36:d1:07:3c:f7:ac:f0:e4:fa:04:da:
                    92:6f:f2:3d:c8:fd:cb:b2:da:bc:38:65:9e:0e:7b:
                    3c:d3:ba:ba:fe:9f:73:0f:26:02:02:bc:33:f8:d7:
                    c0:4e:05:d9:a9:64:b9:ac:0e:6a:24:b9:f5:65:e0:
                    c7:41:57:71:63:c3:41:3c:fd:36:7f:6c:55:e6:86:
                    58:a1:33:92:b3:37:c5:95:df:7d:bd:44:8a:f7:06:
                    8a:be:80:28:05:76:7a:47:5f:c3:ff:b3:61:4e:66:
                    6b:aa:43:28:aa:1c:50:e7:70:ba:72:9a:f1:38:56:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:33:AD:E7:B2:06:76:61:1C:2B:93:A9:28:55:11:3C:CD:35:96
            X509v3 Authority Key Identifier:
                keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/_3EzreeyBnZhHCuTqShVETzNNZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.203.0-178.212.205.255

    Signature Algorithm: sha256WithRSAEncryption
         42:af:92:f9:ad:bd:15:01:1c:f8:d7:e6:37:69:cb:6f:89:a6:
         a9:7e:f5:49:05:dd:0d:a4:a8:a8:2f:31:a5:f8:3c:e1:a4:5d:
         f0:b6:47:5f:32:72:1a:89:f4:8c:e0:4b:50:99:1a:e4:43:e6:
         d1:d4:46:3b:83:75:ae:be:49:6c:f6:d2:48:38:ab:5a:ba:d2:
         ac:a9:d1:88:1f:a3:a9:a0:2b:5a:4f:07:6f:75:ed:3d:f9:b2:
         bb:2f:de:b6:95:d1:84:ba:6a:4e:21:72:88:c6:3a:62:d1:42:
         97:ec:fa:5a:0c:79:5b:47:30:54:08:9d:4b:9d:4e:04:c3:0e:
         83:37:ac:d4:f1:32:d4:6b:13:1c:40:a6:c6:fb:99:0e:ae:c7:
         24:2e:30:ef:23:89:30:6e:dd:9d:39:48:51:19:2c:11:41:de:
         e5:c3:e6:54:ed:6c:d5:da:b1:80:49:8c:44:61:f1:9c:a2:96:
         98:60:7d:9d:e2:b4:41:f4:e4:ee:91:ef:a3:85:44:d1:ae:29:
         5c:06:4c:8b:32:29:10:ac:70:08:ff:27:ce:68:b4:50:83:d4:
         f5:a7:dc:96:63:7c:36:06:ea:cd:b6:a4:5c:1c:1a:b5:2d:81:
         66:c2:df:58:33:5c:b8:1e:fc:a5:95:6c:51:73:40:54:02:08:
         33:82:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org