Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/kH4570unXFa0x8BUJJNO0Rev4rY.roa
File:                     kH4570unXFa0x8BUJJNO0Rev4rY.roa (raw, json)
Hash identifier:          fYAw6q1hiiNn2OIWuyudO2uswPu1t44aTeBdL0jDI4U=
Subject key identifier:   90:7E:39:EF:4B:A7:5C:56:B4:C7:C0:54:24:93:4E:D1:17:AF:E2:B6
Certificate issuer:       /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial:       070D741B
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/kH4570unXFa0x8BUJJNO0Rev4rY.roa
Signing time:             Sat 01 Jan 2022 11:59:33 +0000
ROA not before:           Sat 01 Jan 2022 11:59:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42831
IP address blocks:        160.19.94.0/23 maxlen: 24
                          185.254.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118322203 (0x70d741b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
        Validity
            Not Before: Jan  1 11:59:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=907e39ef4ba75c56b4c7c05424934ed117afe2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:2c:bd:42:14:c2:de:10:d0:e8:64:14:45:
                    2c:94:76:12:57:9f:94:64:33:78:56:cb:a4:d5:b3:
                    f7:14:aa:64:cf:18:27:9a:69:d4:87:c5:6f:fd:be:
                    8a:40:39:68:06:be:c1:81:4d:88:0f:4b:45:4e:bb:
                    32:c6:e1:67:51:0a:90:64:4c:bd:e9:20:24:0f:02:
                    20:e7:81:32:c9:d7:c3:3b:41:27:e8:06:76:97:7f:
                    c6:5f:b1:23:37:d9:ae:f7:91:02:0e:9d:d2:46:f7:
                    dd:de:5d:07:2d:34:76:fc:8a:af:b7:5d:80:6e:81:
                    3f:42:c5:16:02:02:c9:03:80:dd:d1:a9:38:7b:e1:
                    d9:59:67:54:4a:45:49:2a:f2:5d:24:d7:44:43:61:
                    78:55:57:67:17:51:a9:3d:2b:28:81:2c:89:94:b4:
                    76:84:f5:1e:57:34:f6:b9:1e:ad:6c:99:24:b9:21:
                    b5:9c:82:76:56:6d:7d:10:a2:d9:92:44:6b:f6:16:
                    c1:e2:12:eb:37:12:61:38:bc:7e:7f:8a:23:fb:6c:
                    f7:93:d2:a5:05:50:b3:8b:9a:c3:8d:5b:49:36:7f:
                    35:df:68:89:9a:07:c9:dc:5b:3b:0d:99:d5:78:ba:
                    f5:94:7b:c5:5a:f4:2c:47:3a:31:b2:96:27:4b:c5:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:39:EF:4B:A7:5C:56:B4:C7:C0:54:24:93:4E:D1:17:AF:E2:B6
            X509v3 Authority Key Identifier:
                keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/kH4570unXFa0x8BUJJNO0Rev4rY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.94.0/23
                  185.254.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:08:f6:28:8c:6e:f0:89:94:e0:ed:69:38:b7:17:0d:77:1f:
         c5:9f:b9:fe:ad:66:90:60:97:e1:d2:7d:94:53:8e:c2:a9:60:
         44:09:bc:b6:99:60:27:37:44:72:1c:35:ac:0d:2b:40:b6:d0:
         5b:0b:06:27:8c:3a:c3:40:38:47:c4:d3:0b:1a:7c:bc:97:bd:
         28:b1:97:89:1c:38:87:b2:44:f0:18:e1:f1:51:a1:a0:d2:1d:
         dd:69:c8:fd:ce:8d:83:47:4d:5a:88:df:71:4b:b3:11:ca:33:
         ca:34:c7:9b:11:75:f6:eb:53:5d:30:d2:c7:25:c2:5c:da:f5:
         6c:01:4b:0b:54:b9:66:d7:56:59:0e:59:cc:99:a9:b6:51:e4:
         d3:cd:e0:02:c6:4c:ae:c8:42:20:59:ed:87:a9:e8:2b:4f:d0:
         29:e4:a2:f5:6a:f6:8a:f5:a3:d0:00:d6:8a:04:e3:bf:c7:b7:
         da:70:ae:2a:09:d8:4e:33:0f:0d:18:f6:5f:38:ca:53:1d:8b:
         b3:f8:ae:61:b4:71:e0:ae:bc:e5:4b:04:e2:7c:40:c9:2e:bb:
         ff:0d:37:af:1d:d0:45:87:c3:65:da:c2:4d:7a:82:ef:20:18:
         df:fb:d5:1f:87:18:58:f0:8a:8e:97:3e:04:07:e2:d5:96:5a:
         04:de:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:46 2024 by rpki-client on console-fra.rpki-client.org