Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/hBnJb2jAavdTN0LBfJW8EiVQRj4.roa
File:                     hBnJb2jAavdTN0LBfJW8EiVQRj4.roa (raw, json)
Hash identifier:          el9MCiySaKThOMOSb0xmvaQ1pMI1KHDLry0iGpljKsQ=
Subject key identifier:   84:19:C9:6F:68:C0:6A:F7:53:37:42:C1:7C:95:BC:12:25:50:46:3E
Certificate issuer:       /CN=797f2a398ca1c80d6ef824f84766de0b9853e769
Certificate serial:       01821CFE52486F29DB5CFD6D6E2A5C63E7A4
Authority key identifier: 79:7F:2A:39:8C:A1:C8:0D:6E:F8:24:F8:47:66:DE:0B:98:53:E7:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eX8qOYyhyA1u-CT4R2beC5hT52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/hBnJb2jAavdTN0LBfJW8EiVQRj4.roa
Signing time:             Wed 20 Jul 2022 19:03:25 +0000
ROA not before:           Wed 20 Jul 2022 19:03:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     996
IP address blocks:        80.71.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1c:fe:52:48:6f:29:db:5c:fd:6d:6e:2a:5c:63:e7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797f2a398ca1c80d6ef824f84766de0b9853e769
        Validity
            Not Before: Jul 20 19:03:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8419c96f68c06af7533742c17c95bc122550463e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:1e:21:d9:78:1d:19:b2:4b:8a:b9:1b:e5:
                    62:3a:a5:85:35:48:20:cc:4b:c3:83:04:70:c4:b6:
                    23:9b:2f:6f:30:4e:d8:30:2c:25:88:67:41:10:b8:
                    2d:2c:5e:b5:38:79:9c:6f:a8:39:45:0b:f9:1b:a4:
                    bd:32:e6:06:44:4b:86:31:06:4c:00:18:31:b9:08:
                    d8:2e:0c:bf:f2:82:0a:03:c3:cd:05:37:09:6f:94:
                    56:5b:40:35:ac:af:19:af:60:45:2c:03:3f:ef:5f:
                    fd:79:7b:80:97:6e:a8:c2:09:66:bc:4e:c0:6c:78:
                    3e:8c:18:d0:94:c9:7c:90:ef:85:49:63:58:ea:0b:
                    66:e9:1b:7d:16:ad:5f:94:9b:5e:46:a3:77:ba:91:
                    83:13:23:7c:f0:e9:78:d6:91:4c:8b:c3:4e:19:b9:
                    a1:5a:e7:dc:d1:96:51:30:5e:04:dd:14:db:f9:58:
                    ed:df:c2:83:fa:c3:c4:79:42:fe:4e:18:2d:17:29:
                    e3:d0:7b:3c:51:46:68:79:be:61:f3:b9:e8:a6:a5:
                    f4:47:a9:dd:87:34:c7:fb:e5:47:38:46:a9:85:17:
                    d6:c0:60:2f:96:03:ad:eb:e4:f4:88:b5:bd:04:17:
                    fa:20:49:04:70:28:82:43:ac:d2:92:67:84:51:a9:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:C9:6F:68:C0:6A:F7:53:37:42:C1:7C:95:BC:12:25:50:46:3E
            X509v3 Authority Key Identifier:
                keyid:79:7F:2A:39:8C:A1:C8:0D:6E:F8:24:F8:47:66:DE:0B:98:53:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX8qOYyhyA1u-CT4R2beC5hT52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/hBnJb2jAavdTN0LBfJW8EiVQRj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/eX8qOYyhyA1u-CT4R2beC5hT52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:5f:7e:fa:1f:24:e5:67:11:cb:eb:c9:b1:a9:30:e2:0c:
         e5:b6:59:b6:89:82:75:1a:26:61:41:91:9f:c7:a8:80:b9:77:
         ef:4e:ce:28:13:cd:48:c8:19:80:56:8c:22:4c:78:ca:25:87:
         dd:df:ff:65:db:1b:49:6b:c6:7d:98:b5:27:83:8c:c2:7f:c3:
         b8:af:a2:59:dd:d4:88:3c:56:d5:17:1d:97:3f:62:db:60:ca:
         72:69:89:39:a5:b1:c4:7d:22:87:7e:c8:2a:40:a4:a9:84:7d:
         2e:ad:7d:f3:60:36:6b:aa:aa:29:f9:4c:d5:cc:ad:80:2d:e0:
         38:80:14:a6:66:58:94:30:0e:7d:4f:b0:d2:3e:8a:5c:74:25:
         7e:2c:b3:f0:61:2b:34:ee:04:14:d9:b7:0b:c3:0e:b7:5b:14:
         fe:8e:cd:91:e7:e5:7c:bd:e5:56:65:c2:40:f3:67:00:a0:1c:
         c3:7e:04:f0:6f:6c:ca:ae:05:87:d9:2a:71:8d:85:92:d0:91:
         e2:a2:b5:63:dd:4c:b7:89:a6:6a:d7:1d:e3:78:0f:b3:e7:99:
         c6:6d:c6:6f:09:42:c6:9a:78:68:fa:8c:86:e0:c3:99:f8:b2:
         3b:46:93:c6:1e:de:79:b3:9c:75:73:cc:b7:97:28:69:d6:14:
         eb:3e:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:29 2024 by rpki-client on console-fra.rpki-client.org