Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/S8uHWtIhWwSyhrIngeXWmr3Ktpg.roa
File:                     S8uHWtIhWwSyhrIngeXWmr3Ktpg.roa (raw, json)
Hash identifier:          eIIY/XPC6BJ3GEAasa3sGUzNxBq7UQyGLwzRn23PMnY=
Subject key identifier:   4B:CB:87:5A:D2:21:5B:04:B2:86:B2:27:81:E5:D6:9A:BD:CA:B6:98
Certificate issuer:       /CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Certificate serial:       02750C5F
Authority key identifier: 80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/S8uHWtIhWwSyhrIngeXWmr3Ktpg.roa
Signing time:             Fri 22 Apr 2022 14:45:52 +0000
ROA not before:           Fri 22 Apr 2022 14:45:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        194.39.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41225311 (0x2750c5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
        Validity
            Not Before: Apr 22 14:45:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4bcb875ad2215b04b286b22781e5d69abdcab698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:d0:dc:c1:ee:14:6b:a7:43:55:bb:36:af:
                    63:1e:e4:48:3d:5e:6d:d3:10:81:e5:ba:d8:53:f4:
                    aa:66:22:21:0c:36:2b:98:fe:56:7a:c5:cd:de:92:
                    9a:7b:10:0e:93:10:08:41:bf:3d:1b:60:29:1a:b8:
                    14:a6:50:57:71:1e:2b:22:4f:f4:1c:27:39:bd:6a:
                    89:53:ed:ce:38:59:ac:be:b3:f8:00:8b:cc:44:28:
                    41:72:75:44:5b:f6:24:a9:c9:45:0b:09:aa:eb:ff:
                    a3:65:3e:6a:d6:4b:a5:ac:cf:bd:71:e2:61:a2:83:
                    0e:3d:43:53:31:49:ed:a9:4c:22:79:76:38:65:6a:
                    30:20:2b:81:e4:15:69:39:5f:2d:39:89:4e:58:98:
                    ff:c5:52:4c:13:e5:32:9e:ee:f5:b1:dd:56:45:0e:
                    33:6c:64:dd:f0:3b:50:f8:57:c8:ab:7b:dc:2b:bb:
                    b5:10:94:f0:4b:b6:8d:64:e6:3b:8d:f6:0a:d8:f5:
                    13:73:43:19:31:52:c8:12:c6:a9:71:96:b2:2c:54:
                    68:60:30:51:20:f2:59:dd:1a:5e:03:a4:d3:34:46:
                    d6:02:5a:4e:ef:dc:a7:ea:c4:6a:4b:55:55:62:bc:
                    13:d3:e2:ad:b3:45:a1:e3:42:24:de:01:4a:be:f9:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CB:87:5A:D2:21:5B:04:B2:86:B2:27:81:E5:D6:9A:BD:CA:B6:98
            X509v3 Authority Key Identifier:
                keyid:80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/S8uHWtIhWwSyhrIngeXWmr3Ktpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:86:1d:20:d6:c9:0d:95:dd:47:22:d3:19:ff:9a:40:64:
         20:57:e6:dc:a5:50:ec:46:67:9a:e4:ac:e7:a9:b2:b9:30:52:
         8e:3d:5b:0f:96:2d:76:03:0f:60:b7:1f:95:a4:4c:ce:38:5d:
         74:2e:33:0b:b0:d2:44:98:c7:b1:4b:47:ee:00:1b:4e:4c:46:
         23:66:e5:f9:07:29:a2:18:91:b7:71:88:49:1b:77:7f:3a:80:
         68:78:94:9d:0d:e3:e8:a3:47:e3:65:8f:cb:ed:3d:fe:9a:fd:
         dc:eb:96:3f:85:30:0c:68:a6:1c:95:69:78:eb:6c:63:a7:4a:
         03:28:41:5a:af:60:7f:d7:1d:3b:1e:5f:b7:3c:48:09:aa:9f:
         ce:8d:58:86:eb:94:92:9a:70:e2:be:39:f5:21:c3:89:e5:9c:
         82:39:4e:7e:bc:1c:88:0e:ea:88:f7:53:f6:32:1a:30:29:e5:
         37:92:75:5d:35:a3:03:37:2c:bd:ee:41:95:3d:76:6c:0f:84:
         91:c8:36:1c:9e:2d:df:d2:db:7f:48:6f:3f:f9:70:a0:6d:d9:
         76:c7:29:1b:73:1f:91:65:01:3b:07:1e:fb:be:a3:64:2d:a1:
         49:7c:c1:76:94:64:1c:dd:29:28:da:bf:d9:44:ad:1f:b4:87:
         86:00:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-fra.rpki-client.org