Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/0HvU1MRn9DJPwKpTluQceEpJ590.roa
File:                     0HvU1MRn9DJPwKpTluQceEpJ590.roa (raw, json)
Hash identifier:          9kMobupKkZBgrIKdVtqrOoNB4f/ex+QM5Aa2KrIXV4k=
Subject key identifier:   D0:7B:D4:D4:C4:67:F4:32:4F:C0:AA:53:96:E4:1C:78:4A:49:E7:DD
Certificate issuer:       /CN=a7a93a238503edc7bdd3241608bf8512101f4bbc
Certificate serial:       01EEDDCE
Authority key identifier: A7:A9:3A:23:85:03:ED:C7:BD:D3:24:16:08:BF:85:12:10:1F:4B:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6k6I4UD7ce90yQWCL-FEhAfS7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/0HvU1MRn9DJPwKpTluQceEpJ590.roa
Signing time:             Sat 01 Jan 2022 02:59:53 +0000
ROA not before:           Sat 01 Jan 2022 02:59:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43872
IP address blocks:        176.101.169.0/24 maxlen: 24
                          2a10:c8c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32431566 (0x1eeddce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a93a238503edc7bdd3241608bf8512101f4bbc
        Validity
            Not Before: Jan  1 02:59:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d07bd4d4c467f4324fc0aa5396e41c784a49e7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:87:b5:07:7d:51:b1:91:d8:3e:74:2a:5b:
                    81:15:ad:7b:72:63:5c:60:0e:a6:7a:3d:6d:0f:9a:
                    87:dc:a8:ac:92:43:df:f9:67:4f:bb:76:7a:a9:88:
                    2e:ff:d8:b5:1c:eb:86:be:41:16:75:03:4f:40:da:
                    1a:5f:18:39:18:5c:69:56:07:89:31:2e:11:b0:45:
                    75:6d:80:47:f2:49:29:88:1b:7e:1a:a1:66:45:71:
                    fc:cf:54:95:0d:e4:38:07:61:c1:2d:36:a8:fe:24:
                    8e:00:28:f6:aa:30:a0:cf:49:b8:3f:20:27:da:8a:
                    c1:28:c2:87:52:33:70:27:fe:eb:4b:a6:48:7f:e4:
                    1c:d6:41:a5:dd:47:02:fc:67:d8:7d:14:0b:53:c6:
                    c7:03:bd:69:32:bf:47:17:99:57:ec:69:2e:4f:7e:
                    ff:3d:34:55:58:38:ab:b6:9d:0b:f5:0f:28:0f:e8:
                    1d:5d:f7:d8:b7:ad:cf:0e:10:35:7c:b2:e6:b1:4a:
                    57:82:c2:f0:eb:f9:5e:1c:f3:74:00:d1:d3:10:81:
                    6f:e7:d7:bd:ec:36:65:ca:98:1a:4c:8f:51:60:60:
                    57:a1:23:90:67:bc:72:fe:60:62:2a:c2:17:87:27:
                    38:92:f3:bd:02:29:a1:47:98:fa:f4:18:88:ae:44:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:D4:D4:C4:67:F4:32:4F:C0:AA:53:96:E4:1C:78:4A:49:E7:DD
            X509v3 Authority Key Identifier:
                keyid:A7:A9:3A:23:85:03:ED:C7:BD:D3:24:16:08:BF:85:12:10:1F:4B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6k6I4UD7ce90yQWCL-FEhAfS7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/0HvU1MRn9DJPwKpTluQceEpJ590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/p6k6I4UD7ce90yQWCL-FEhAfS7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.101.169.0/24
                IPv6:
                  2a10:c8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         bc:61:e5:75:c0:32:1b:36:94:28:44:25:6d:08:c6:04:0d:e6:
         db:c4:4e:d3:02:db:9b:38:76:31:e7:c6:2b:87:a4:a3:10:2c:
         65:b0:9d:41:68:6d:c2:9b:28:b0:91:e1:aa:3f:18:8b:e2:cb:
         6c:d4:85:0a:b8:22:68:f2:ec:74:70:03:d4:a2:51:29:18:d5:
         8f:f7:94:3d:7a:b1:68:21:aa:fe:dc:9e:b9:da:e4:c6:32:11:
         24:0a:4e:b5:1a:bb:70:81:21:ca:50:46:1b:c9:ff:48:3a:1c:
         e4:48:f8:3a:2b:24:5b:6b:db:2f:48:26:76:4b:2d:39:bf:ef:
         ca:de:16:75:59:f9:06:4c:77:80:61:a1:81:f5:94:e3:97:19:
         41:42:7c:c5:d1:c1:51:90:16:2d:b5:29:2f:c9:b0:9d:53:bf:
         78:3f:00:f8:95:16:4a:fa:36:34:e4:11:cd:b6:69:76:81:d3:
         17:9d:b3:92:af:97:ee:53:d3:1a:64:ef:65:40:da:47:99:15:
         4e:17:59:b8:17:f4:eb:2d:ad:31:3a:6d:3d:99:7d:f7:62:e1:
         99:fe:eb:70:21:cd:95:32:6e:31:b6:ac:30:4d:b3:51:7c:f9:
         89:04:14:48:16:67:8c:a7:08:86:a7:0e:04:fd:38:2a:41:20:
         9d:9f:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-fra.rpki-client.org