Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/DoUpRuqnmi0t1TBwpO2s2j8ud5I.roa
File:                     DoUpRuqnmi0t1TBwpO2s2j8ud5I.roa (raw, json)
Hash identifier:          8v/POHk3hTzQ5Of+gQB+jlCqe04OBHVRjRit8/F6Qqs=
Subject key identifier:   0E:85:29:46:EA:A7:9A:2D:2D:D5:30:70:A4:ED:AC:DA:3F:2E:77:92
Certificate issuer:       /CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Certificate serial:       016C4742
Authority key identifier: 2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/DoUpRuqnmi0t1TBwpO2s2j8ud5I.roa
Signing time:             Wed 30 Mar 2022 12:57:31 +0000
ROA not before:           Wed 30 Mar 2022 12:57:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212756
IP address blocks:        109.107.155.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23873346 (0x16c4742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
        Validity
            Not Before: Mar 30 12:57:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e852946eaa79a2d2dd53070a4edacda3f2e7792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:1c:ae:5a:33:96:04:25:10:56:83:11:91:
                    03:2f:60:92:64:94:c2:a3:59:8f:cf:4b:c3:43:a5:
                    9c:d3:bc:88:03:c0:cc:68:eb:2f:4e:69:a5:ba:bb:
                    45:38:c9:cb:cf:4b:e1:0e:ac:5b:bc:92:be:ef:17:
                    6f:1f:dc:6b:de:76:0b:3d:f5:77:be:65:2a:e9:e9:
                    64:89:fe:2f:11:c6:c6:ba:18:3f:e6:01:8a:25:9f:
                    20:da:c2:55:32:eb:0b:aa:a7:e3:2f:1a:fe:19:36:
                    d2:c6:d8:7e:e3:a4:3f:bf:f5:39:b7:ad:a4:96:2d:
                    49:34:e3:43:0e:b2:50:6d:4c:e3:3d:c4:f8:db:97:
                    29:9d:0f:fe:a0:78:b0:3b:bd:05:7c:21:61:b6:e2:
                    e5:b6:e8:49:99:d5:89:49:ca:29:00:3d:d3:e3:a5:
                    14:d4:33:40:d1:98:3e:3f:de:84:bd:30:43:46:29:
                    81:a3:c2:5a:3d:55:50:73:17:ce:d6:b4:45:a9:8a:
                    e2:e2:53:2c:ea:6b:ac:17:bb:c5:4b:9a:ad:96:d8:
                    f5:4f:b4:cf:70:2a:08:97:f9:a6:de:bb:08:47:e7:
                    aa:8b:c8:07:92:ce:91:f3:02:0f:3d:83:ad:be:3d:
                    a0:94:99:53:8b:d5:cd:44:15:81:e7:e1:0d:b2:ab:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:85:29:46:EA:A7:9A:2D:2D:D5:30:70:A4:ED:AC:DA:3F:2E:77:92
            X509v3 Authority Key Identifier:
                keyid:2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/DoUpRuqnmi0t1TBwpO2s2j8ud5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:3a:52:96:99:69:01:a0:a8:ff:c3:1a:73:03:30:52:b7:
         6d:22:53:67:00:bc:70:35:63:76:71:85:d1:7e:93:6c:be:7c:
         36:08:89:6e:e1:6c:6c:a0:da:ec:4f:b3:d3:14:81:a4:ac:c0:
         07:54:a9:3c:e7:e9:30:b7:83:b3:fc:d7:20:f5:b1:59:67:52:
         9f:aa:76:3f:ff:bc:c4:b7:10:cd:a4:f2:b0:6d:bb:4e:a0:dc:
         bb:27:66:a5:fc:7e:4f:7f:11:9d:c5:fc:53:ff:8c:66:8c:b5:
         23:cc:82:2f:21:6d:3e:c1:cd:97:1c:30:a3:a7:58:d4:b5:25:
         dc:f9:96:d3:36:a0:ae:74:dd:c8:9c:5c:7f:2c:b2:81:da:1c:
         27:de:7e:e5:f2:fb:5a:37:00:8a:c7:d0:ff:bb:c4:b5:61:36:
         c0:6b:ef:20:8a:46:f8:d1:7f:45:41:4b:03:e7:c6:cd:4f:78:
         8a:2e:d4:c3:00:a3:76:42:fd:d9:05:90:dc:11:f9:ba:47:d5:
         06:37:1b:3b:4f:c7:39:0f:15:d4:e6:18:10:f0:c3:1c:67:83:
         28:7a:3f:dc:02:e8:e8:39:b6:ee:cd:aa:e7:10:64:e6:67:4d:
         b2:e9:50:f5:22:40:3b:ca:39:6c:9f:77:74:39:d5:fc:6a:d5:
         f1:db:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:37 2024 by rpki-client on console-ams.rpki-client.org