Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/t9-s4WWkB-738trQ_PQ7swaUxe0.roa
File:                     t9-s4WWkB-738trQ_PQ7swaUxe0.roa (raw, json)
Hash identifier:          5hZ+EFTatD/LA5i8ni81H2q368T0k7jlk4M8D0E1lqs=
Subject key identifier:   B7:DF:AC:E1:65:A4:07:EE:F7:F2:DA:D0:FC:F4:3B:B3:06:94:C5:ED
Certificate issuer:       /CN=71199c17d385154086e3b703dd449322dddeb483
Certificate serial:       FD8467
Authority key identifier: 71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/t9-s4WWkB-738trQ_PQ7swaUxe0.roa
Signing time:             Wed 11 May 2022 21:52:02 +0000
ROA not before:           Wed 11 May 2022 21:52:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        185.155.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16614503 (0xfd8467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71199c17d385154086e3b703dd449322dddeb483
        Validity
            Not Before: May 11 21:52:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7dface165a407eef7f2dad0fcf43bb30694c5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:68:dc:a5:46:eb:e7:53:6a:b0:c5:97:84:e5:
                    af:c5:3e:bb:8d:40:38:cf:68:b8:cb:e0:0e:ea:17:
                    75:f8:4e:fc:b6:69:94:f7:f4:82:67:ae:21:35:b9:
                    d0:8b:48:4b:e7:97:f6:23:2a:73:99:99:1b:a2:4f:
                    8f:67:0f:c3:30:76:bc:be:c8:37:7d:64:37:05:28:
                    11:2a:b2:16:80:f0:0a:f1:65:4e:e4:31:a4:e6:bc:
                    00:d5:97:43:2e:ba:55:ba:0e:65:f7:21:66:29:8e:
                    20:3b:a9:39:f4:60:bd:a9:66:a1:bf:ca:1a:a2:0f:
                    9a:d2:4c:39:9a:4f:e3:8c:7d:af:a5:fa:8b:9e:d9:
                    d6:03:89:0d:f4:66:40:03:9a:92:17:fd:58:10:da:
                    bf:df:da:a6:f8:00:da:83:72:6d:7c:33:e3:64:86:
                    38:81:f8:d2:a6:ea:97:61:57:42:4b:9a:de:8e:17:
                    53:57:93:80:df:01:ee:9d:ec:b1:6a:06:2c:5e:a5:
                    1a:65:93:77:44:37:69:27:e2:e2:7c:3e:d4:bd:74:
                    f2:6a:9a:db:97:96:5d:f0:3f:89:53:5e:48:0a:81:
                    b5:b0:96:67:d3:5b:7a:f4:28:30:9a:8f:c3:8b:12:
                    26:4c:d4:a2:04:3a:a3:f2:e1:5f:c7:fe:2d:37:a8:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:AC:E1:65:A4:07:EE:F7:F2:DA:D0:FC:F4:3B:B3:06:94:C5:ED
            X509v3 Authority Key Identifier:
                keyid:71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/t9-s4WWkB-738trQ_PQ7swaUxe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:c0:74:d4:17:e0:05:a4:98:ce:b8:43:6a:d8:e9:03:fc:
         cf:b0:12:27:a1:44:75:76:36:fd:1c:bf:69:b6:9e:82:5c:84:
         b1:e4:26:ae:b0:93:fd:a8:fb:c2:88:bc:24:4f:02:5e:8d:0d:
         f5:f9:da:24:d7:79:bd:aa:ac:b6:be:c1:a1:d8:eb:0e:09:71:
         c1:63:b6:e8:78:b1:76:a1:a2:bf:07:e3:65:e0:c0:58:bb:fb:
         29:1d:c3:7d:fe:90:31:0f:23:1b:21:6f:43:43:f7:33:f0:26:
         c3:5c:f5:13:1e:99:9c:e6:22:2d:6f:f9:74:4f:82:d4:4a:c3:
         9f:28:9a:ab:26:2e:86:8d:45:d9:cf:d9:89:e8:9f:67:70:b5:
         b5:6d:a5:fa:04:5e:c5:f0:1c:5f:d9:7d:ed:3b:fc:5e:c6:cc:
         72:4c:52:41:25:eb:55:e1:7a:21:92:08:b8:92:4c:53:3e:a6:
         1a:cc:50:13:fb:a4:64:97:36:86:58:6d:18:f4:7e:f9:f1:16:
         c1:bd:a1:56:d7:7c:3e:73:54:a5:c5:db:96:db:8f:48:0e:24:
         d6:e2:1d:ff:70:39:39:69:e1:4a:ba:32:04:ea:b5:9c:3c:5d:
         c8:51:46:6c:93:f9:25:5f:e1:d8:94:62:91:64:9f:6a:19:90:
         86:bb:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org