Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa
File:                     vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa (raw, json)
Hash identifier:          yR+dsINA+Kgy4GwysZ9tPZAVK2Kn1S/k/1rARqu1mx4=
Subject key identifier:   BC:CB:12:0D:F5:76:75:0E:A9:A0:CC:8F:32:67:D7:5D:59:EB:26:A0
Certificate issuer:       /CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
Certificate serial:       06CB5D86
Authority key identifier: 2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa
Signing time:             Sat 01 Jan 2022 11:56:32 +0000
ROA not before:           Sat 01 Jan 2022 11:56:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60458
IP address blocks:        185.37.231.0/24 maxlen: 24
                          185.37.229.0/24 maxlen: 24
                          185.37.230.0/24 maxlen: 24
                          185.37.228.0/24 maxlen: 24
                          185.37.228.0/23 maxlen: 23
                          185.226.152.0/22 maxlen: 24
                          185.100.72.0/22 maxlen: 22
                          185.226.154.0/24 maxlen: 24
                          185.162.168.0/23 maxlen: 23
                          185.162.171.0/24 maxlen: 24
                          185.162.170.0/24 maxlen: 24
                          45.146.188.0/22 maxlen: 22
                          185.156.216.0/24 maxlen: 24
                          185.156.219.0/24 maxlen: 24
                          185.156.217.0/24 maxlen: 24
                          185.156.218.0/24 maxlen: 24
                          185.167.24.0/24 maxlen: 24
                          185.167.27.0/24 maxlen: 24
                          185.167.25.0/24 maxlen: 24
                          185.167.26.0/24 maxlen: 24
                          45.151.192.0/22 maxlen: 22
                          185.125.78.0/24 maxlen: 24
                          185.125.76.0/22 maxlen: 22
                          185.125.76.0/24 maxlen: 24
                          185.125.77.0/24 maxlen: 24
                          91.199.102.0/24 maxlen: 24
                          91.199.108.0/24 maxlen: 24
                          185.125.79.0/24 maxlen: 24
                          91.199.123.0/24 maxlen: 24
                          185.202.145.0/24 maxlen: 24
                          185.202.144.0/24 maxlen: 24
                          185.202.147.0/24 maxlen: 24
                          185.202.146.0/24 maxlen: 24
                          91.199.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113991046 (0x6cb5d86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
        Validity
            Not Before: Jan  1 11:56:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bccb120df576750ea9a0cc8f3267d75d59eb26a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:35:b7:9e:4e:ff:87:4c:32:5f:45:f6:a7:
                    85:a2:1f:95:65:06:49:81:5e:de:cd:a0:d7:ee:c2:
                    19:02:a2:88:76:07:87:8c:b2:4e:07:6c:7e:14:4c:
                    ca:de:5b:15:1a:bd:c6:23:2a:ec:2a:e0:30:b1:67:
                    62:7e:fe:6d:b5:53:bf:37:4c:1c:74:53:a6:60:74:
                    31:23:7b:f9:36:97:58:79:ce:72:fa:dd:e0:33:ae:
                    12:74:32:96:17:18:16:2d:0b:da:56:4e:38:cb:e0:
                    70:a4:fb:74:08:13:0c:c4:99:24:1a:a0:ff:4f:1e:
                    2f:53:74:f8:ce:99:d1:d3:47:85:5d:f2:f9:e6:4b:
                    1e:e1:7d:54:47:8e:e1:b8:a7:98:2a:fd:83:0c:99:
                    d6:0d:e2:2c:09:1a:d4:d1:5a:03:eb:2a:95:05:ed:
                    37:0a:0b:1b:31:6b:25:1c:2a:ee:52:af:f6:22:8a:
                    d0:7a:d9:a9:4e:57:de:54:cd:0e:4c:c6:45:1d:32:
                    bc:c7:f7:05:9d:ae:2f:b0:ae:8f:04:07:4d:ea:e1:
                    f7:0a:28:7d:8c:68:1b:2f:59:34:6e:f5:0c:fb:5c:
                    d9:b6:cc:5c:31:d7:95:12:84:ab:f6:43:2a:a8:fb:
                    7c:28:b0:a4:d3:e6:dd:3a:7b:07:6a:e7:37:63:c6:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CB:12:0D:F5:76:75:0E:A9:A0:CC:8F:32:67:D7:5D:59:EB:26:A0
            X509v3 Authority Key Identifier:
                keyid:2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/Kte28PZRjYLhK5vcN2YCsjthKZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.188.0/22
                  45.151.192.0/22
                  91.199.90.0/24
                  91.199.102.0/24
                  91.199.108.0/24
                  91.199.123.0/24
                  185.37.228.0/22
                  185.100.72.0/22
                  185.125.76.0/22
                  185.156.216.0/22
                  185.162.168.0/22
                  185.167.24.0/22
                  185.202.144.0/22
                  185.226.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:22:3b:cf:14:28:ea:47:60:cb:92:3f:61:b3:18:3c:ae:
         16:bb:6f:55:16:ce:7a:97:96:14:b3:11:57:d4:96:7d:0b:dc:
         98:cc:a1:ad:7b:88:f0:ac:74:af:c9:7a:f1:bf:3e:31:3c:3a:
         94:82:98:71:de:20:48:22:66:ca:65:ec:b4:c8:a9:ce:ed:aa:
         2e:ea:e3:58:42:78:e9:fe:f5:b7:5a:57:b7:9e:93:4e:16:26:
         55:97:36:dc:e7:e4:36:09:23:97:59:c6:8f:e6:21:cf:50:d7:
         18:90:6b:8f:ee:c0:e6:a4:08:b2:44:58:bb:ad:02:f3:cd:2d:
         3a:14:a7:58:9e:f4:56:55:c7:36:34:e0:9e:30:4e:5f:ea:eb:
         65:65:1a:2d:c6:44:72:6c:cd:8d:3a:0e:2f:b7:93:d8:ff:3d:
         73:5c:a6:14:b9:97:3a:4d:c4:8c:59:9a:51:8f:42:cb:7a:5e:
         21:a8:88:a2:cb:48:e2:27:81:2e:39:ca:7e:e6:98:05:5d:38:
         73:05:f1:db:9c:43:30:ae:6f:45:8f:e5:dc:3b:5d:dd:85:67:
         b1:26:8d:ef:f9:1e:c5:28:78:df:88:38:f5:a8:43:8b:cb:1e:
         c4:e4:2f:a0:f3:8c:58:85:84:ce:9b:34:52:da:4d:9a:5c:56:
         fa:e9:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org