Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/6vgPLfRRwJ2PIsg7yB69Xa-ccAs.roa
File:                     6vgPLfRRwJ2PIsg7yB69Xa-ccAs.roa (raw, json)
Hash identifier:          rzuhgywC8VBB2LhU//NjtMc9UJdIEliP4jIT6eGKD0Q=
Subject key identifier:   EA:F8:0F:2D:F4:51:C0:9D:8F:22:C8:3B:C8:1E:BD:5D:AF:9C:70:0B
Certificate issuer:       /CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
Certificate serial:       080B5352
Authority key identifier: 2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/6vgPLfRRwJ2PIsg7yB69Xa-ccAs.roa
Signing time:             Thu 19 May 2022 10:18:27 +0000
ROA not before:           Thu 19 May 2022 10:18:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60458
IP address blocks:        185.37.231.0/24 maxlen: 24
                          185.37.229.0/24 maxlen: 24
                          185.37.230.0/24 maxlen: 24
                          185.37.228.0/24 maxlen: 24
                          185.37.228.0/23 maxlen: 23
                          185.226.152.0/22 maxlen: 24
                          185.100.72.0/22 maxlen: 22
                          185.226.154.0/24 maxlen: 24
                          185.162.168.0/23 maxlen: 23
                          185.162.171.0/24 maxlen: 24
                          185.162.170.0/24 maxlen: 24
                          45.131.80.0/22 maxlen: 22
                          195.8.49.0/24 maxlen: 24
                          195.8.48.0/24 maxlen: 24
                          45.146.188.0/22 maxlen: 22
                          185.156.216.0/24 maxlen: 24
                          185.156.219.0/24 maxlen: 24
                          185.156.217.0/24 maxlen: 24
                          185.156.218.0/24 maxlen: 24
                          185.167.24.0/24 maxlen: 24
                          185.167.27.0/24 maxlen: 24
                          185.167.25.0/24 maxlen: 24
                          185.167.26.0/24 maxlen: 24
                          195.8.119.0/24 maxlen: 24
                          45.151.192.0/22 maxlen: 22
                          185.125.78.0/24 maxlen: 24
                          185.125.76.0/22 maxlen: 22
                          185.125.76.0/24 maxlen: 24
                          185.125.77.0/24 maxlen: 24
                          91.199.102.0/24 maxlen: 24
                          91.199.108.0/24 maxlen: 24
                          185.125.79.0/24 maxlen: 24
                          91.199.123.0/24 maxlen: 24
                          45.143.148.0/22 maxlen: 22
                          185.202.145.0/24 maxlen: 24
                          185.202.144.0/24 maxlen: 24
                          185.202.147.0/24 maxlen: 24
                          185.202.146.0/24 maxlen: 24
                          91.199.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134959954 (0x80b5352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
        Validity
            Not Before: May 19 10:18:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eaf80f2df451c09d8f22c83bc81ebd5daf9c700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:20:71:d2:c9:ac:7a:6a:6d:55:1a:55:e8:
                    38:7b:d9:f7:ef:d5:db:19:ba:11:ff:a5:8d:89:a9:
                    04:9d:17:e1:ca:b1:c5:cd:66:be:e5:1c:11:03:41:
                    bd:5b:c2:6c:ae:b3:fc:3d:a4:b5:6c:cd:30:17:e7:
                    79:0e:df:49:7d:7e:d0:e9:c8:1a:1c:0f:81:34:bb:
                    78:d3:b2:fd:d8:b8:9f:8d:2b:71:6f:ee:42:a4:6a:
                    c7:ac:a7:97:ca:54:e2:d5:66:6a:18:00:9b:d1:b7:
                    d5:f0:fd:c7:c2:32:46:39:04:03:70:cf:70:0e:41:
                    fe:6a:77:59:d5:c2:c9:fe:6a:a1:4f:ae:7a:86:98:
                    67:51:6a:8e:a4:de:05:c3:ba:fe:28:46:5f:c9:ff:
                    a3:1f:d2:4e:7d:f7:74:61:2e:d1:bb:8d:44:f9:70:
                    80:9c:6f:41:df:fe:c2:f3:c9:17:22:86:d7:a8:e1:
                    ee:ec:cf:03:bd:6c:9b:fc:8e:e6:1b:42:a7:34:f8:
                    92:56:3a:ec:84:c8:f3:48:84:26:fd:67:f5:bd:f9:
                    58:4e:84:a4:21:f6:16:82:5a:89:53:a0:86:87:34:
                    ea:a9:d4:43:c4:a5:5a:d2:d7:04:1c:ef:3b:e6:50:
                    36:7e:16:e9:51:69:84:30:e0:f8:a0:46:d6:3a:33:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:0F:2D:F4:51:C0:9D:8F:22:C8:3B:C8:1E:BD:5D:AF:9C:70:0B
            X509v3 Authority Key Identifier:
                keyid:2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/6vgPLfRRwJ2PIsg7yB69Xa-ccAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/Kte28PZRjYLhK5vcN2YCsjthKZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.80.0/22
                  45.143.148.0/22
                  45.146.188.0/22
                  45.151.192.0/22
                  91.199.90.0/24
                  91.199.102.0/24
                  91.199.108.0/24
                  91.199.123.0/24
                  185.37.228.0/22
                  185.100.72.0/22
                  185.125.76.0/22
                  185.156.216.0/22
                  185.162.168.0/22
                  185.167.24.0/22
                  185.202.144.0/22
                  185.226.152.0/22
                  195.8.48.0/23
                  195.8.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:35:54:b2:42:3e:ad:10:8b:6d:cb:9d:06:3e:9f:42:ad:
         82:a1:8f:ad:40:79:3e:d6:92:30:2f:4f:3c:4f:1f:9e:47:62:
         2b:1d:a4:76:fb:7d:bd:7f:f7:ee:ec:f2:18:0c:8d:e8:9c:3a:
         37:ce:9b:6f:ef:9e:51:d3:f5:89:b7:89:ae:ba:53:fc:4c:88:
         06:38:b4:11:a0:d7:dc:f4:e8:dc:61:4a:29:71:03:32:47:15:
         47:52:b9:f1:5f:ac:bc:7a:74:5f:f7:2b:61:e8:ee:d9:a5:0e:
         c3:7c:4a:40:0a:ed:0a:39:a2:db:91:b5:ec:83:f4:0d:9c:85:
         ab:05:e5:85:bc:10:ff:63:ab:46:95:77:26:79:d6:2d:6d:df:
         17:5a:1a:c2:42:64:ad:a8:54:f5:7f:b1:dd:c7:a3:aa:a0:90:
         9e:20:ef:71:83:3f:91:10:56:54:92:3c:c4:da:60:b4:c5:1b:
         b1:12:52:62:e9:ad:74:55:97:11:0c:71:1f:49:34:21:9a:8a:
         56:32:d7:08:d6:bd:9f:62:6b:d2:c4:57:7f:8a:6a:54:d0:dc:
         45:74:aa:b6:66:04:e7:0b:ac:c2:0f:50:5c:c0:7b:3b:a4:07:
         e4:4e:5e:69:6a:50:7b:5d:d5:d3:b7:98:60:f2:75:27:98:11:
         38:5f:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:26 2024 by rpki-client on console-ams.rpki-client.org