Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/l0m_-HBFbyP2BVq9CehlhK1dWT0.roa
File:                     l0m_-HBFbyP2BVq9CehlhK1dWT0.roa (raw, json)
Hash identifier:          m/IYG2AIwDjsZi54y22vAo3oCiWx5gmhVu8UrhZPzh8=
Subject key identifier:   97:49:BF:F8:70:45:6F:23:F6:05:5A:BD:09:E8:65:84:AD:5D:59:3D
Certificate issuer:       /CN=655db0434a917bb2980986a7c84e3512c2a895ad
Certificate serial:       0182B4F11A5FE65AAE7FF43A992A8585F6F3
Authority key identifier: 65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/l0m_-HBFbyP2BVq9CehlhK1dWT0.roa
Signing time:             Fri 19 Aug 2022 07:11:15 +0000
ROA not before:           Fri 19 Aug 2022 07:11:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52000
IP address blocks:        194.70.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b4:f1:1a:5f:e6:5a:ae:7f:f4:3a:99:2a:85:85:f6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655db0434a917bb2980986a7c84e3512c2a895ad
        Validity
            Not Before: Aug 19 07:11:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9749bff870456f23f6055abd09e86584ad5d593d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:72:65:7a:ed:45:63:8f:7c:7b:60:ef:da:
                    23:d5:65:b0:6c:ba:e0:d1:8e:a7:25:27:da:28:c5:
                    7e:94:e3:4b:b0:cd:48:c9:b3:14:c3:6f:2e:92:37:
                    10:e7:1a:c6:77:6f:02:11:eb:0c:93:16:4e:85:92:
                    46:af:25:56:92:44:0f:c6:41:2a:3b:b7:8e:a5:1a:
                    28:7c:0b:ce:16:93:8a:d2:cf:03:b1:f9:9b:f0:66:
                    c4:24:ed:0b:26:73:30:b4:fb:5a:4a:4a:5e:33:f8:
                    3e:87:cc:f5:b5:d0:9c:0c:ee:64:87:85:25:a3:b5:
                    0b:5f:2b:44:99:ba:93:39:0c:fb:0b:4e:24:e7:8f:
                    8b:9d:88:32:bc:a8:18:c1:53:d2:9a:4c:03:bc:d0:
                    4d:0b:8c:53:d2:70:ba:30:37:05:70:4c:c8:03:27:
                    b2:4d:62:36:67:17:b7:5f:74:b3:7d:40:ff:01:29:
                    75:54:b3:29:5c:8b:31:99:44:cc:f2:76:77:de:81:
                    36:3f:9a:43:15:5f:ac:09:60:85:e2:0b:fe:6f:16:
                    dd:af:21:73:f4:e4:5b:0f:bb:df:44:52:32:d7:c7:
                    e0:4b:d0:02:92:3d:1e:b2:1d:3f:ee:d1:77:5d:dc:
                    c5:8f:c8:b2:71:85:ae:00:0f:76:9f:49:a4:de:df:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:49:BF:F8:70:45:6F:23:F6:05:5A:BD:09:E8:65:84:AD:5D:59:3D
            X509v3 Authority Key Identifier:
                keyid:65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/l0m_-HBFbyP2BVq9CehlhK1dWT0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/ZV2wQ0qRe7KYCYanyE41EsKola0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.70.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:fa:a4:ac:86:b7:9a:ae:95:15:00:02:af:e4:00:52:f1:
         78:7a:2b:3a:ef:1a:76:55:6b:32:26:00:fe:9b:43:b6:ab:d5:
         c6:72:15:b1:12:a6:66:8e:e8:9a:71:08:65:d5:fd:86:50:50:
         64:df:8c:36:36:42:c1:e5:c7:d6:b2:2e:af:f6:26:c9:b1:ff:
         9a:37:bc:fa:9f:e6:74:f0:cb:e3:ae:e6:8e:67:1d:be:a9:03:
         9f:67:48:3b:93:e2:5c:df:38:00:99:1d:68:52:a0:aa:d8:6b:
         fb:4a:d5:08:41:bc:31:bf:66:ca:c3:e3:ac:fd:0d:91:be:3a:
         c2:17:2e:d6:c0:aa:56:56:9e:ee:e9:38:9f:9f:e6:6f:6a:38:
         cf:ef:45:bf:b3:41:5b:d4:10:87:4f:22:a6:9e:b8:95:6a:aa:
         47:1b:1d:6b:90:03:24:33:92:eb:5b:01:d8:c8:c1:6f:6d:d4:
         4d:e6:e0:58:2e:23:4d:28:4d:2a:91:9d:ce:79:f4:99:05:52:
         23:de:8a:c6:50:70:a5:d5:e9:de:df:9a:57:e0:5f:73:3a:23:
         47:12:1b:62:f0:0d:4b:ca:4f:2a:d7:4c:d4:2f:25:d5:9b:98:
         a9:f5:40:33:24:a6:6d:9c:ab:f1:38:bd:72:3b:36:b4:78:7d:
         2d:c3:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:30 2024 by rpki-client on console-ams.rpki-client.org