Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/ccHAWuzp53RMCLYsEDPOT-JIIyg.roa
File:                     ccHAWuzp53RMCLYsEDPOT-JIIyg.roa (raw, json)
Hash identifier:          H+xysvTb6lFT/QS8sMDukCIvMt4n2+6b/P1+bYtu+YU=
Subject key identifier:   71:C1:C0:5A:EC:E9:E7:74:4C:08:B6:2C:10:33:CE:4F:E2:48:23:28
Certificate issuer:       /CN=b26514285449df35e0e39c38ffb2a58b9eed4eb9
Certificate serial:       0183D1484012BF2E70801342BAEA77A3F86B
Authority key identifier: B2:65:14:28:54:49:DF:35:E0:E3:9C:38:FF:B2:A5:8B:9E:ED:4E:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smUUKFRJ3zXg45w4_7Kli57tTrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/ccHAWuzp53RMCLYsEDPOT-JIIyg.roa
Signing time:             Thu 13 Oct 2022 12:18:36 +0000
ROA not before:           Thu 13 Oct 2022 12:18:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56769
IP address blocks:        185.248.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d1:48:40:12:bf:2e:70:80:13:42:ba:ea:77:a3:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26514285449df35e0e39c38ffb2a58b9eed4eb9
        Validity
            Not Before: Oct 13 12:18:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=71c1c05aece9e7744c08b62c1033ce4fe2482328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:0b:fc:c5:d6:ac:ca:85:75:dc:5f:8e:e8:
                    71:11:18:6e:ba:cd:0d:ad:a4:a4:be:04:45:11:70:
                    2c:cf:75:9d:44:ee:9e:9f:0a:6f:17:5a:81:87:19:
                    2b:62:09:8c:e8:34:41:1a:18:8e:05:43:46:0a:57:
                    4b:19:f1:e4:cc:7c:5b:fa:8b:ea:86:98:80:63:0e:
                    57:0f:bc:d5:1c:3b:8c:8c:b3:25:bd:34:98:bc:ce:
                    12:4b:2f:51:a8:e7:cd:b1:47:c6:76:48:ce:8d:8c:
                    84:be:dd:14:d7:28:24:bc:8f:da:ae:4c:84:73:ef:
                    ec:f5:7e:6c:9d:57:8c:a8:76:5e:d4:f7:79:1a:81:
                    38:94:e5:2f:29:0a:37:62:fa:a4:b0:f7:2f:ee:45:
                    c8:41:b6:b2:b2:04:36:e8:ed:e5:e2:2f:2f:b7:34:
                    47:45:be:39:bb:70:b2:16:0e:29:11:49:0a:90:06:
                    cf:37:96:36:9a:fa:da:51:e5:1c:13:d3:75:bb:1a:
                    7f:ba:45:37:c9:16:3f:4b:39:f6:47:15:bb:ff:c0:
                    49:dd:b2:1a:90:d4:95:07:e4:92:a1:1f:e3:8f:6a:
                    aa:fb:f7:d8:40:2e:d9:9a:63:80:b4:64:01:bd:24:
                    e8:84:54:49:7f:ba:9b:ea:6b:f4:b1:45:f8:df:47:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C1:C0:5A:EC:E9:E7:74:4C:08:B6:2C:10:33:CE:4F:E2:48:23:28
            X509v3 Authority Key Identifier:
                keyid:B2:65:14:28:54:49:DF:35:E0:E3:9C:38:FF:B2:A5:8B:9E:ED:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smUUKFRJ3zXg45w4_7Kli57tTrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/ccHAWuzp53RMCLYsEDPOT-JIIyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/smUUKFRJ3zXg45w4_7Kli57tTrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:01:fa:55:65:e3:8b:dc:fb:cf:c8:65:2d:d6:8e:d2:ae:
         24:d5:f9:6c:ba:03:03:6c:81:8c:ef:ce:97:63:9e:28:9f:64:
         14:03:9f:8b:05:42:58:0c:b6:dd:74:11:e2:c3:ea:96:4d:9a:
         f6:ab:2b:6b:9b:f6:c7:1e:c1:fd:bb:8a:05:2a:f4:47:e0:71:
         63:67:7d:68:df:dc:8e:7b:23:7f:64:ca:c0:5a:13:d3:b0:27:
         fb:b9:1a:44:cf:cd:72:5e:be:56:b7:4c:c5:3b:84:b5:cb:0f:
         cf:04:1d:48:3d:95:38:72:74:32:d1:eb:f7:fe:0d:a1:f3:58:
         fe:1a:22:ad:92:26:f9:af:31:dd:1e:cd:de:3d:83:fb:b7:76:
         1f:00:64:a4:b0:d1:1b:7a:ad:56:de:f4:25:06:83:87:1e:54:
         11:ba:e5:51:bb:85:b0:7e:2f:4c:75:ff:d9:ae:e1:d7:a8:e1:
         c1:12:51:0c:99:05:84:b5:52:28:ee:f9:8a:b4:8f:60:75:d3:
         e0:13:29:6d:cf:63:5c:24:d8:de:72:c1:50:5d:ae:6b:ad:53:
         84:4d:95:87:8f:b3:2b:e4:5c:73:a2:62:67:9c:2c:ac:ec:2e:
         47:e2:d4:b4:7e:d6:5a:05:c6:bd:d7:97:3b:07:81:31:c8:a1:
         05:25:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:41 2024 by rpki-client on console-ams.rpki-client.org