Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Y9xeqOh6Fv8Fnd0mdAbO0WSJrJY.roa
File:                     Y9xeqOh6Fv8Fnd0mdAbO0WSJrJY.roa (raw, json)
Hash identifier:          CLrEX13Is5qGUoReh8Z6pXU5oEVW7NqWDvMz4Y/NZVE=
Subject key identifier:   63:DC:5E:A8:E8:7A:16:FF:05:9D:DD:26:74:06:CE:D1:64:89:AC:96
Certificate issuer:       /CN=2e4dd492aba37802f99020379b0daa49f101b7da
Certificate serial:       050E9A
Authority key identifier: 2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Y9xeqOh6Fv8Fnd0mdAbO0WSJrJY.roa
Signing time:             Thu 21 Apr 2022 11:41:32 +0000
ROA not before:           Thu 21 Apr 2022 11:41:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        194.15.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331418 (0x50e9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4dd492aba37802f99020379b0daa49f101b7da
        Validity
            Not Before: Apr 21 11:41:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63dc5ea8e87a16ff059ddd267406ced16489ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:f7:0c:4b:31:ca:0e:31:a9:e3:1d:03:43:
                    98:8c:f3:c6:73:7a:6a:6a:e2:56:20:c0:0a:65:da:
                    55:a4:f5:09:f4:e8:e6:24:70:70:e6:f8:b9:54:9c:
                    73:e5:c2:7d:27:10:45:2c:25:de:a2:ae:bd:73:3f:
                    57:a8:f8:af:e1:65:d4:bc:c5:4e:06:76:bb:3e:4d:
                    20:da:80:b3:fb:26:85:0c:8b:e1:39:1e:dd:b8:72:
                    28:f2:e6:e0:49:db:7e:60:a3:1e:d1:5d:71:47:da:
                    d5:c4:e7:cc:2f:7b:6e:20:1f:95:c3:65:ca:95:e8:
                    80:74:eb:fa:32:52:8e:de:c9:de:97:8c:f7:ee:54:
                    d3:9d:45:3b:ea:25:3c:2f:80:c8:c3:cd:14:33:2a:
                    9c:c8:22:5c:c4:65:c1:47:54:68:17:68:fe:fa:82:
                    c0:0b:31:07:97:6b:9d:5e:7a:80:51:9b:e0:62:e8:
                    90:78:fb:9f:fe:54:eb:df:0a:5e:ae:31:db:34:ae:
                    06:c1:1e:a8:ec:88:4a:b8:2d:a0:08:05:c4:3f:0a:
                    56:4d:ad:26:d4:28:2b:59:ff:0a:61:83:80:e5:9f:
                    08:98:70:90:1c:61:3d:35:d2:24:df:1a:db:41:6d:
                    18:8c:c0:8f:b5:51:fe:d8:67:1a:db:a5:67:b7:f0:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:5E:A8:E8:7A:16:FF:05:9D:DD:26:74:06:CE:D1:64:89:AC:96
            X509v3 Authority Key Identifier:
                keyid:2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Y9xeqOh6Fv8Fnd0mdAbO0WSJrJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Lk3UkqujeAL5kCA3mw2qSfEBt9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:c7:88:75:86:4e:a6:d2:44:e6:9e:11:3c:0d:0d:a3:8d:
         97:b0:71:bd:25:f6:02:37:6b:8a:e0:39:7e:4a:87:4c:ef:3b:
         cd:d5:a4:03:3d:4b:af:62:9c:65:d5:06:01:a5:30:f4:69:e6:
         4b:6a:15:07:3b:2a:66:12:c2:90:dc:a8:50:dc:a4:bf:fd:7b:
         c4:46:7e:ed:f5:f0:33:f8:25:b0:8e:0e:ac:1f:23:02:f9:c1:
         a5:c2:81:26:b7:a7:02:77:40:cc:86:ca:26:e1:37:4a:3a:3a:
         79:43:1a:a9:ff:3e:71:90:af:20:bd:d6:ef:72:76:be:03:5f:
         c3:f1:6f:28:4f:f9:e2:07:f1:d0:6e:0d:72:3d:ae:32:19:60:
         b2:04:87:5b:f6:55:3b:11:76:54:9f:2d:95:70:cf:18:71:63:
         53:83:f1:99:62:e9:8f:45:f4:e5:6d:21:57:40:94:9b:e1:e5:
         8c:6c:39:1f:a5:72:15:47:ef:de:d7:70:6e:95:69:15:ea:ce:
         a3:e2:2b:7c:77:e8:9c:ad:35:89:03:2e:f9:9b:1b:51:97:9b:
         64:3f:53:5a:a8:22:5e:a2:1c:2c:a1:1d:ca:00:b9:c2:b8:3a:
         aa:7a:03:c1:26:81:17:e8:42:54:16:ab:e9:d3:4d:cb:ae:9e:
         27:cb:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org