Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/XOcA_3eOzmwytntNTAf3Xu0aNvE.roa
File:                     XOcA_3eOzmwytntNTAf3Xu0aNvE.roa (raw, json)
Hash identifier:          oOoy8h6/eaBrpw8P659cSBArPr4irC7c+gBrsEL4oKs=
Subject key identifier:   5C:E7:00:FF:77:8E:CE:6C:32:B6:7B:4D:4C:07:F7:5E:ED:1A:36:F1
Certificate issuer:       /CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Certificate serial:       01BAC07F
Authority key identifier: 71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/XOcA_3eOzmwytntNTAf3Xu0aNvE.roa
Signing time:             Sat 01 Jan 2022 12:55:31 +0000
ROA not before:           Sat 01 Jan 2022 12:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44285
IP address blocks:        185.173.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29016191 (0x1bac07f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
        Validity
            Not Before: Jan  1 12:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ce700ff778ece6c32b67b4d4c07f75eed1a36f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:c7:50:b5:fb:32:30:0d:39:73:79:a5:8c:
                    07:02:78:6c:e3:23:e6:19:4c:de:dd:2c:b0:64:5a:
                    d2:20:4c:73:aa:68:ea:1d:93:5e:99:32:f8:97:97:
                    2d:d1:c9:95:bc:1c:37:63:22:29:db:82:87:7e:69:
                    f5:7b:b2:eb:c5:c2:c8:47:f0:fb:24:50:29:69:d7:
                    fd:aa:4f:6e:5c:88:50:d9:4e:20:1e:16:e1:2c:75:
                    63:ac:d6:dd:e9:59:f3:a1:c5:ec:3d:f2:39:74:6f:
                    3f:5d:b3:b4:37:9a:56:0c:d6:e8:bc:5e:0e:4b:b3:
                    f3:60:2d:d1:f5:d4:8a:6d:40:26:ec:f1:ea:6e:e9:
                    d7:bf:36:eb:5d:8a:c9:9f:32:b6:2e:a9:f5:a6:b1:
                    b1:90:3f:94:9b:62:bb:50:c0:d6:03:af:24:24:1a:
                    65:23:30:76:ad:a7:0a:1a:65:2b:93:e5:e5:50:ba:
                    88:c9:5e:f8:8a:64:74:b1:88:5b:21:e6:2f:05:be:
                    cc:de:7b:87:07:17:de:3a:12:a1:52:86:d8:3f:83:
                    40:4b:e2:74:af:5c:c2:31:05:f1:05:7d:fb:6c:44:
                    9e:4b:d3:fb:80:4a:97:8b:18:79:6d:ed:91:18:6d:
                    13:08:13:fc:30:81:6d:71:16:c9:e8:37:de:0c:b8:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:00:FF:77:8E:CE:6C:32:B6:7B:4D:4C:07:F7:5E:ED:1A:36:F1
            X509v3 Authority Key Identifier:
                keyid:71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/XOcA_3eOzmwytntNTAf3Xu0aNvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7e:82:86:be:99:7c:08:ec:0c:af:67:f2:24:aa:01:45:eb:
         26:16:b7:28:ca:28:4f:ce:33:b5:7b:31:6b:76:47:8c:74:09:
         fd:d7:77:df:14:2b:85:33:60:62:12:4c:70:1a:bc:94:43:1d:
         5d:e6:d5:e4:ac:86:57:03:c5:b5:47:85:62:e8:84:e5:67:77:
         90:5d:36:81:b4:da:19:af:10:e5:8c:33:83:83:30:65:d3:c5:
         a5:9f:f3:97:0f:69:ec:4f:49:b2:d3:4d:8f:08:d5:10:16:8b:
         8c:1b:3e:a6:9c:a9:ee:90:e0:d7:5e:0b:f1:77:4d:ae:1b:4f:
         b0:e0:2d:31:29:84:e5:56:21:b0:07:f5:78:a3:5e:0d:5b:a9:
         82:04:76:79:72:4f:04:5e:4d:73:ae:b4:ed:60:55:28:ea:8c:
         41:70:af:52:55:37:ee:7f:e8:cc:d7:70:c1:d5:eb:12:6c:b9:
         64:b7:51:c5:58:74:d9:6b:a5:4c:a0:b5:e7:64:ad:e2:54:7d:
         66:de:c7:74:44:00:f5:ea:95:11:ca:a1:28:d2:29:9d:da:30:
         53:96:89:10:2a:ad:06:b8:38:7a:3c:30:6b:13:a4:ec:de:01:
         ae:fc:a2:dc:40:73:a2:57:7e:fe:38:51:73:f0:89:cc:4e:1a:
         39:8c:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org