Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/Ngp0Ksxy1fYUo1AZlw_2J5sI34M.roa
File:                     Ngp0Ksxy1fYUo1AZlw_2J5sI34M.roa (raw, json)
Hash identifier:          L89jAzOD2EfGFRGsjhAkNlBiC6e9Kt5fdB1E6Z+p/vg=
Subject key identifier:   36:0A:74:2A:CC:72:D5:F6:14:A3:50:19:97:0F:F6:27:9B:08:DF:83
Certificate issuer:       /CN=a518fe89f78527304023f8c5f05ab2e3a3d6d9f2
Certificate serial:       9D30D9
Authority key identifier: A5:18:FE:89:F7:85:27:30:40:23:F8:C5:F0:5A:B2:E3:A3:D6:D9:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pRj-ifeFJzBAI_jF8Fqy46PW2fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/Ngp0Ksxy1fYUo1AZlw_2J5sI34M.roa
Signing time:             Sat 01 Jan 2022 03:54:05 +0000
ROA not before:           Sat 01 Jan 2022 03:54:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        176.126.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10301657 (0x9d30d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a518fe89f78527304023f8c5f05ab2e3a3d6d9f2
        Validity
            Not Before: Jan  1 03:54:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=360a742acc72d5f614a35019970ff6279b08df83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:ca:1b:fe:eb:01:b0:41:c5:63:90:e7:d5:
                    6a:5b:b7:18:55:4f:2c:03:be:86:af:df:8a:10:da:
                    fc:c1:75:f1:c7:0c:e9:4d:87:23:69:f1:7f:70:06:
                    bb:4e:fa:2a:33:60:6e:bd:b6:10:9a:61:59:98:ed:
                    87:e2:8b:40:6b:1e:45:91:21:4e:e5:f0:21:60:1f:
                    58:07:2c:09:21:1e:9b:c4:c7:b7:74:48:32:ba:e9:
                    f5:cb:64:9f:c4:64:74:4f:73:fe:f1:7f:bf:f1:11:
                    02:bb:2c:aa:fb:2e:b7:6e:5a:50:bc:e0:2b:e9:8f:
                    6d:8c:f9:9e:f7:a2:65:c3:a6:03:5c:85:88:c4:ca:
                    64:5e:fb:e6:d9:09:04:02:30:d8:a7:c4:88:4d:34:
                    75:fb:8b:2b:40:39:15:a7:34:d0:f0:09:a4:5c:51:
                    41:dc:b8:a2:30:44:35:5e:9c:58:d3:d6:47:6a:c5:
                    6d:6d:c1:9c:05:b4:a6:68:1b:b1:3e:f3:00:2a:ce:
                    52:1c:9d:8e:45:7e:af:18:0f:24:6b:28:70:c0:75:
                    f4:f1:6f:91:dc:7f:21:b7:7f:f9:77:cc:b5:28:f2:
                    04:86:92:7a:c4:84:19:1f:7b:ab:06:72:7d:0b:d1:
                    c8:36:32:c9:6e:75:53:2e:a2:2c:91:76:de:e3:ff:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:74:2A:CC:72:D5:F6:14:A3:50:19:97:0F:F6:27:9B:08:DF:83
            X509v3 Authority Key Identifier:
                keyid:A5:18:FE:89:F7:85:27:30:40:23:F8:C5:F0:5A:B2:E3:A3:D6:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRj-ifeFJzBAI_jF8Fqy46PW2fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/Ngp0Ksxy1fYUo1AZlw_2J5sI34M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/pRj-ifeFJzBAI_jF8Fqy46PW2fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:11:f2:1c:f5:9a:1e:78:b5:22:94:c4:21:96:60:20:80:6a:
         bf:cd:5f:1f:fe:f2:8a:f8:2f:bf:7a:83:b1:c0:6d:a0:7c:94:
         11:b8:4c:66:6b:33:d5:96:b5:ff:95:a0:91:c0:67:58:6e:6b:
         ca:23:3d:fa:f2:08:27:de:5c:5d:e6:ff:96:f3:0e:0a:bf:1d:
         24:f8:1b:77:5a:02:ba:70:c3:e4:42:28:d0:e0:3f:5f:4c:90:
         68:98:d2:23:de:0f:74:46:33:4e:60:38:0a:4c:38:a8:c8:cf:
         76:40:5c:b8:86:4d:27:62:03:93:da:f8:aa:88:4d:5e:81:5d:
         8a:d4:70:5b:66:38:48:95:59:15:39:48:f8:0c:b9:36:7f:a5:
         af:94:2b:97:ef:be:be:17:b0:0a:e6:c6:8e:6f:ed:38:97:57:
         be:e5:c6:bd:44:1f:a2:db:a7:c6:68:e1:d2:09:32:ec:2a:07:
         4a:70:0b:39:6c:02:99:06:af:8a:a7:a3:bd:1a:77:a0:4a:17:
         df:bc:5f:8a:7c:6b:e8:2b:f9:2f:71:5d:48:9f:a7:5e:fd:ab:
         fd:33:61:e6:f3:72:ae:3a:2c:f5:57:09:ed:69:2c:1c:5d:c0:
         b5:d7:54:33:0d:1a:f6:db:79:e1:9c:c0:44:2e:e9:37:24:cb:
         10:f1:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:34 2024 by rpki-client on console-ams.rpki-client.org