Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/XLVO3PRP-2evaop9qvFlZbeEV1Y.roa
File:                     XLVO3PRP-2evaop9qvFlZbeEV1Y.roa (raw, json)
Hash identifier:          tZ4Vofn1Dp/zI6kydBJv8rP6crOgA10IXozs2ojNH/k=
Subject key identifier:   5C:B5:4E:DC:F4:4F:FB:67:AF:6A:8A:7D:AA:F1:65:65:B7:84:57:56
Certificate issuer:       /CN=71199c17d385154086e3b703dd449322dddeb483
Certificate serial:       01621D
Authority key identifier: 71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/XLVO3PRP-2evaop9qvFlZbeEV1Y.roa
Signing time:             Tue 25 Jan 2022 18:23:02 +0000
ROA not before:           Tue 25 Jan 2022 18:23:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        185.155.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90653 (0x1621d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71199c17d385154086e3b703dd449322dddeb483
        Validity
            Not Before: Jan 25 18:23:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5cb54edcf44ffb67af6a8a7daaf16565b7845756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:ae:32:fb:d2:3e:ce:e4:bd:d0:46:4a:ff:
                    5e:0b:cf:e2:12:d2:0f:12:6e:b6:30:ad:00:c5:ab:
                    06:cb:b3:7c:c5:af:2e:20:b4:23:cc:cf:01:3b:a0:
                    27:4f:93:3f:6e:5c:34:18:bf:07:4d:71:1f:b4:6b:
                    9f:43:ca:a7:e6:93:35:ab:49:32:b1:01:cb:4c:fd:
                    60:d8:25:0f:a1:b7:09:73:ba:91:7e:7e:bc:af:7f:
                    79:05:d6:f3:28:69:c7:27:06:d9:81:2b:72:af:d6:
                    7b:fc:56:4a:6d:80:15:9c:45:00:04:84:51:de:51:
                    8b:4d:d6:41:76:d1:b2:5e:79:20:a0:5d:76:72:9b:
                    b2:bf:23:a1:ef:4b:ea:58:6b:fc:ea:4b:f9:c1:5b:
                    bc:9d:dd:3e:ba:84:b4:11:a7:88:d0:1e:97:03:bb:
                    cb:a7:70:19:ab:b3:1f:99:14:e9:cb:7e:e1:78:ab:
                    d1:98:14:2b:4e:9f:32:13:9b:2d:c0:30:4e:39:c3:
                    fb:6b:c6:11:0e:01:b3:07:ba:93:a3:4a:f1:97:8d:
                    1e:c0:4a:52:1f:1d:0a:f3:97:01:a5:13:b7:28:5c:
                    3c:04:29:d7:09:66:9d:d9:30:dd:0a:88:0c:12:67:
                    24:ad:80:8d:84:dc:9a:d4:d4:6c:ce:e2:8b:64:95:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B5:4E:DC:F4:4F:FB:67:AF:6A:8A:7D:AA:F1:65:65:B7:84:57:56
            X509v3 Authority Key Identifier:
                keyid:71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/XLVO3PRP-2evaop9qvFlZbeEV1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:17:99:5d:39:25:c1:d8:bb:70:90:d1:c5:24:ef:96:19:cc:
         d2:b7:65:24:a9:2f:7e:ea:d7:1f:16:62:49:e6:46:e0:36:28:
         30:85:10:0e:81:a8:ec:62:7f:66:36:53:f3:2f:d1:a6:66:74:
         dc:db:dd:88:55:a4:93:59:46:fe:61:0c:f4:78:e0:c9:df:bb:
         d4:0f:e6:3f:91:1b:68:6c:4b:90:79:79:6c:57:ff:31:18:b3:
         c9:f3:13:9e:13:0a:25:58:77:f1:48:03:72:13:34:5d:12:d9:
         23:07:21:33:fa:d4:57:42:ac:5d:cc:07:de:6b:f7:ab:b1:88:
         d2:8e:07:5e:ee:bc:ef:d9:7e:4f:98:52:15:53:04:ef:3c:80:
         76:3c:05:ec:bf:4a:dd:86:b6:4a:ef:61:01:d4:61:d0:2f:dc:
         5b:60:2d:6a:69:00:fd:e3:c0:a1:4e:90:a9:0b:19:65:d6:19:
         41:bc:00:f4:45:00:12:03:d8:f1:67:71:ae:6e:3e:a7:48:8b:
         b9:68:2e:f0:55:2d:82:8a:23:3e:75:0a:3c:4e:e5:fc:5b:f8:
         e6:70:0d:c4:f8:4e:08:36:db:ff:c4:de:70:18:fc:7d:81:c9:
         35:8a:68:e6:d8:02:e4:c7:99:d7:ba:fd:49:2b:39:b8:c5:ec:
         b5:87:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:52 2024 by rpki-client on console-ams.rpki-client.org