Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d75e1e-0b86-4c90-9619-ba7499175ff7/1/hAE-lYrreVi-mi2ytFI2o-LVDWs.roa
File:                     hAE-lYrreVi-mi2ytFI2o-LVDWs.roa (raw, json)
Hash identifier:          LqCebGxojEzTwB9iqyXqv1dDLAWMT6oTLwpFZ5Ag2r0=
Subject key identifier:   84:01:3E:95:8A:EB:79:58:BE:9A:2D:B2:B4:52:36:A3:E2:D5:0D:6B
Certificate issuer:       /CN=4ede83be0c2d327a9bc2854b8c9c71ac601b5c15
Certificate serial:       023845F2
Authority key identifier: 4E:DE:83:BE:0C:2D:32:7A:9B:C2:85:4B:8C:9C:71:AC:60:1B:5C:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tt6DvgwtMnqbwoVLjJxxrGAbXBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/d75e1e-0b86-4c90-9619-ba7499175ff7/1/hAE-lYrreVi-mi2ytFI2o-LVDWs.roa
Signing time:             Sat 01 Jan 2022 05:57:47 +0000
ROA not before:           Sat 01 Jan 2022 05:57:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        37.221.76.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37242354 (0x23845f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ede83be0c2d327a9bc2854b8c9c71ac601b5c15
        Validity
            Not Before: Jan  1 05:57:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84013e958aeb7958be9a2db2b45236a3e2d50d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:f5:56:31:69:dd:59:86:0a:46:6a:70:ce:
                    33:1a:6e:da:2e:18:34:05:11:dc:77:7e:26:62:9f:
                    99:16:13:be:2e:26:21:da:fd:9c:33:82:b4:5a:9b:
                    ae:2a:a8:d5:c1:af:5d:57:75:78:d4:1f:52:33:b0:
                    40:af:53:95:3c:33:35:10:48:3a:c3:da:19:54:11:
                    88:07:c0:a2:09:f2:9d:d8:5c:d6:b3:6e:a2:28:9d:
                    d1:ea:00:00:a3:bc:a7:b4:04:c8:bb:29:ae:43:33:
                    d2:4f:9a:05:94:0d:ae:86:8d:af:e5:45:1d:fb:e4:
                    6b:3a:14:91:e8:55:26:13:40:27:4c:e6:b8:fd:ba:
                    2c:32:ba:69:c1:ec:84:4d:62:ff:ad:26:c5:dd:dc:
                    28:5e:4a:b7:41:9e:15:65:b7:20:a6:b6:01:72:94:
                    e8:2f:81:b3:7f:2a:a3:d9:d0:a1:e1:c7:40:88:5b:
                    a5:7e:c6:fc:5a:81:45:f2:c5:7e:d0:f7:93:7b:30:
                    fd:d5:ac:8e:72:0f:cd:33:af:e3:8a:98:4c:f3:0e:
                    34:30:13:82:57:ee:07:28:33:cf:5b:1b:7e:9a:53:
                    1b:6a:80:b6:b5:2b:0b:9f:66:e1:9c:17:05:7c:9e:
                    45:98:83:74:04:35:c5:27:75:19:b6:a1:f0:ed:0b:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:01:3E:95:8A:EB:79:58:BE:9A:2D:B2:B4:52:36:A3:E2:D5:0D:6B
            X509v3 Authority Key Identifier:
                keyid:4E:DE:83:BE:0C:2D:32:7A:9B:C2:85:4B:8C:9C:71:AC:60:1B:5C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt6DvgwtMnqbwoVLjJxxrGAbXBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d75e1e-0b86-4c90-9619-ba7499175ff7/1/hAE-lYrreVi-mi2ytFI2o-LVDWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d75e1e-0b86-4c90-9619-ba7499175ff7/1/Tt6DvgwtMnqbwoVLjJxxrGAbXBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:4f:d4:7e:ca:aa:f4:c6:fb:02:8d:61:1b:2b:28:7e:9a:
         88:9c:b0:58:ca:40:5c:47:18:69:0f:55:b4:66:d3:63:03:e6:
         7e:5c:24:32:40:85:e4:41:ae:09:19:35:d5:72:70:ab:bb:e8:
         a1:dd:3a:72:94:67:63:7c:07:57:d2:e1:9b:4e:f8:6e:ee:f5:
         94:45:37:d5:fe:f6:51:a8:63:1c:a5:b4:c3:df:ee:11:98:68:
         a7:c8:97:73:7c:0e:20:82:9a:a2:58:c2:87:51:5d:f1:32:6f:
         37:f3:de:ee:60:24:80:50:e0:5c:9c:55:3a:69:41:49:d5:91:
         10:e7:03:f4:8d:fe:13:b8:11:4c:f2:b2:ad:5f:52:ef:3e:58:
         3b:32:93:fb:b4:90:3e:c1:b6:85:cc:3f:95:4b:05:5e:36:28:
         fb:67:03:b5:64:32:d5:ff:7d:c1:bb:3a:8e:b5:67:ee:d7:de:
         5b:65:82:4c:e5:b4:18:e5:45:68:7c:78:fa:e1:86:75:4b:5a:
         ee:89:6e:b6:08:1d:aa:37:5a:23:1a:13:51:0f:77:36:8f:f7:
         29:05:86:19:03:98:1f:21:8c:6e:8f:66:a8:cb:9d:f8:7c:f6:
         d0:1d:07:07:1d:f9:6d:d9:90:72:42:ec:a0:27:ea:ac:fc:61:
         99:4d:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:32 2024 by rpki-client on console-fra.rpki-client.org