Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/2tlhEEpKAFk-ibH2XaADQ9kEkuk.roa
File:                     2tlhEEpKAFk-ibH2XaADQ9kEkuk.roa (raw, json)
Hash identifier:          kuM9YypaVemANbgHa26W+vCij8s2bnEk2vLHcBMl9hc=
Subject key identifier:   DA:D9:61:10:4A:4A:00:59:3E:89:B1:F6:5D:A0:03:43:D9:04:92:E9
Certificate issuer:       /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial:       016C1990
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/2tlhEEpKAFk-ibH2XaADQ9kEkuk.roa
Signing time:             Mon 13 Jun 2022 02:41:04 +0000
ROA not before:           Mon 13 Jun 2022 02:41:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205960
IP address blocks:        194.126.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23861648 (0x16c1990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
        Validity
            Not Before: Jun 13 02:41:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dad961104a4a00593e89b1f65da00343d90492e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:86:46:0f:99:fa:cd:31:20:de:dc:0b:1a:
                    12:e6:fd:7c:77:0b:2d:db:dd:86:70:3b:88:2a:d8:
                    6b:2e:76:66:af:ad:38:b1:93:e8:28:c6:19:68:0e:
                    fb:3f:97:8d:d3:17:a0:e4:80:ab:60:da:26:92:0a:
                    76:1f:9c:80:25:6c:e3:36:b0:6d:ef:ee:35:3e:de:
                    3c:4a:78:0a:99:70:33:73:00:e7:80:1e:95:c6:c0:
                    71:8e:2d:ce:ec:bd:d1:ec:8f:c9:95:3a:36:a4:e7:
                    74:cc:97:c0:79:80:99:54:09:53:4e:32:ef:6e:76:
                    de:99:4d:2f:20:39:bb:68:aa:5a:4b:0f:06:43:51:
                    c7:a6:86:4a:a3:ff:3e:2a:28:dc:d0:fb:f3:58:17:
                    ba:51:e5:09:68:7f:a5:c8:95:53:2c:36:dd:37:47:
                    5f:e6:16:6a:fd:8f:37:6c:e4:59:50:b0:55:34:5e:
                    14:97:68:81:bb:b9:4b:7f:3a:5c:e8:d0:11:a9:ae:
                    22:8f:20:56:29:a0:45:b7:3f:26:ef:68:20:77:14:
                    22:61:2d:ef:d3:97:cd:e1:9c:66:af:ca:7e:33:56:
                    57:f0:c8:57:d0:8f:82:66:05:7f:6a:cc:ea:f5:1a:
                    77:92:9b:c8:5a:b4:e8:78:42:d1:6e:0b:2d:1f:e8:
                    e1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D9:61:10:4A:4A:00:59:3E:89:B1:F6:5D:A0:03:43:D9:04:92:E9
            X509v3 Authority Key Identifier:
                keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/2tlhEEpKAFk-ibH2XaADQ9kEkuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:39:7c:68:e2:33:c5:1a:f4:95:03:d6:72:7b:b5:dd:92:5f:
         ff:6e:fe:fc:a5:29:0c:c3:42:cd:8a:d4:a1:15:96:61:24:79:
         45:39:7c:ef:cc:a7:bd:b8:ff:04:5c:b4:7c:35:fb:6a:65:3e:
         dc:f1:08:85:04:d3:19:4d:26:95:77:30:48:e0:24:85:87:88:
         4d:ee:87:84:db:7e:2a:45:2e:4f:e2:ef:1e:ca:65:14:29:43:
         82:49:66:0d:76:26:24:3b:5b:9b:1c:11:c4:f6:cc:ed:5f:f7:
         13:a9:97:b4:4b:77:3e:f5:3a:d9:18:c1:83:ca:ef:e3:63:9b:
         27:ad:58:b2:53:29:f6:14:91:3c:db:d4:03:10:97:5a:b8:9d:
         48:26:ce:7c:a0:7d:8b:e3:55:c2:b0:70:85:98:67:01:33:33:
         9c:f1:27:b4:dd:63:90:fe:3e:ad:ab:9a:22:75:1a:17:cc:7b:
         66:a3:5d:8e:25:1c:38:33:28:f6:65:7c:8b:a4:b6:af:9a:e6:
         b2:61:ee:84:bc:1f:66:c5:09:56:b5:d5:e9:51:c4:cf:2a:01:
         b5:15:6f:32:a1:26:27:68:68:78:09:6f:b5:95:d6:f5:b5:24:
         ff:b7:af:50:7d:55:6c:e4:75:e7:0d:0d:c2:2d:64:80:1b:fb:
         2a:44:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-fra.rpki-client.org