Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/Y5nOFYoOXbT4uU8f4WHCNpg6Sj0.roa
File:                     Y5nOFYoOXbT4uU8f4WHCNpg6Sj0.roa (raw, json)
Hash identifier:          FFCXW8pBZqV2HjRlBuugOKusb8wJPrFEQx6BD2LvL/o=
Subject key identifier:   63:99:CE:15:8A:0E:5D:B4:F8:B9:4F:1F:E1:61:C2:36:98:3A:4A:3D
Certificate issuer:       /CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Certificate serial:       08112EA8
Authority key identifier: 7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/Y5nOFYoOXbT4uU8f4WHCNpg6Sj0.roa
Signing time:             Sat 01 Jan 2022 11:03:53 +0000
ROA not before:           Sat 01 Jan 2022 11:03:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50994
IP address blocks:        178.218.224.0/20 maxlen: 20
                          87.239.168.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135343784 (0x8112ea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
        Validity
            Not Before: Jan  1 11:03:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6399ce158a0e5db4f8b94f1fe161c236983a4a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:a4:6f:17:9e:58:c1:28:97:ad:0e:13:d3:
                    ba:dd:09:53:be:1f:38:cd:a0:ae:f5:7b:5a:ae:b5:
                    38:bf:4a:ed:a8:fc:b2:03:b3:25:c1:da:c7:8a:99:
                    82:54:15:8b:e6:a1:20:32:c2:26:67:79:f5:bf:43:
                    0e:a3:b1:b1:1c:99:58:28:16:9c:7b:9a:f8:41:e5:
                    cd:b0:0f:fa:8d:b3:50:a5:90:ad:e4:cf:eb:c2:42:
                    8b:49:31:1e:cc:aa:e6:04:d1:76:84:6b:0b:75:ed:
                    00:60:d7:98:2f:1f:2d:ae:1f:5e:ff:1e:74:83:42:
                    44:3e:47:6c:57:25:0a:88:de:97:07:16:f0:92:3d:
                    98:e4:f4:d6:2f:27:45:03:01:b6:7d:b1:77:50:39:
                    93:5d:2b:f1:32:f3:47:aa:dc:0a:3b:98:2c:eb:a5:
                    d1:09:f8:85:a0:f7:52:5c:f3:09:60:22:cd:c1:b1:
                    30:eb:9d:56:64:02:3b:0e:23:97:e4:d9:02:10:b3:
                    b2:71:98:e9:f2:75:93:16:56:5d:20:50:76:bd:10:
                    19:d8:e7:81:47:22:6a:93:c3:f3:d7:ed:4d:74:08:
                    75:e1:c2:5d:0c:53:41:a4:05:ad:15:34:64:9e:50:
                    c3:b3:31:c6:3e:8b:8d:b4:a7:cc:df:da:16:5b:0a:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:CE:15:8A:0E:5D:B4:F8:B9:4F:1F:E1:61:C2:36:98:3A:4A:3D
            X509v3 Authority Key Identifier:
                keyid:7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/Y5nOFYoOXbT4uU8f4WHCNpg6Sj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.239.168.0/21
                  178.218.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:b1:e6:60:f7:5c:ab:ba:25:94:03:d6:44:72:6f:20:64:
         ee:5b:21:86:f1:f3:c1:1e:04:64:46:9a:7f:3d:55:fa:b5:78:
         5a:47:29:03:f9:f2:68:3d:1e:ff:2a:db:2b:24:8d:e9:7d:8b:
         cd:52:1d:33:5a:1a:dc:07:58:4c:f4:58:06:0d:cd:78:f5:05:
         50:9d:19:3f:2c:1a:4d:c3:19:d6:1c:92:4e:24:a8:64:68:e3:
         d2:57:98:4f:f7:cb:40:f3:08:a0:2a:be:15:a5:2a:10:b7:44:
         c0:fa:4d:3e:19:c5:49:bc:67:85:30:94:68:fe:93:b5:fd:a4:
         bf:e7:0e:1f:91:d8:16:41:fb:e0:b7:dd:d5:8a:02:05:ca:a2:
         6c:9b:bc:38:02:f9:b8:12:96:ba:5c:03:65:03:b6:9b:5e:b4:
         0f:0e:d9:6f:95:51:b5:5e:93:2f:9e:48:fb:80:96:8c:92:ff:
         22:2d:c6:fe:b6:8c:06:23:53:4e:de:7d:89:79:9f:0c:1e:c6:
         44:8a:06:91:dc:81:bb:ef:e9:a9:cb:fb:82:43:e7:f0:e2:26:
         51:22:dc:27:07:31:ca:12:81:38:58:39:80:86:ea:80:dc:00:
         3e:7f:d2:fd:d9:1b:57:34:96:76:4b:b9:76:35:a5:df:86:d4:
         ea:94:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org