Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/ct93eoMRMsw7sbgp7SGBzc4F9dE.roa
File:                     ct93eoMRMsw7sbgp7SGBzc4F9dE.roa (raw, json)
Hash identifier:          cya/pSBimK9JUpyBktMKMpDgdfqKxMDfT59W1XbRKrQ=
Subject key identifier:   72:DF:77:7A:83:11:32:CC:3B:B1:B8:29:ED:21:81:CD:CE:05:F5:D1
Certificate issuer:       /CN=982ea4093f981b846f2e96ae7c9615af2e1ca4cb
Certificate serial:       018282DE47F74A986A8F7818738489DB5ABB
Authority key identifier: 98:2E:A4:09:3F:98:1B:84:6F:2E:96:AE:7C:96:15:AF:2E:1C:A4:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mC6kCT-YG4RvLpaufJYVry4cpMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/ct93eoMRMsw7sbgp7SGBzc4F9dE.roa
Signing time:             Tue 09 Aug 2022 13:49:41 +0000
ROA not before:           Tue 09 Aug 2022 13:49:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48011
IP address blocks:        185.211.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:82:de:47:f7:4a:98:6a:8f:78:18:73:84:89:db:5a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982ea4093f981b846f2e96ae7c9615af2e1ca4cb
        Validity
            Not Before: Aug  9 13:49:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72df777a831132cc3bb1b829ed2181cdce05f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:3f:ae:a6:3f:ef:31:e1:2f:28:18:16:c5:
                    13:0f:ff:04:eb:a7:cf:1e:8d:e0:9b:67:a9:7a:2d:
                    31:a9:d8:0f:8e:01:80:73:87:38:72:4b:a9:72:8b:
                    fe:e6:0c:58:cb:41:3e:cf:12:ec:58:c8:6b:7f:d0:
                    d4:12:6d:88:ff:fd:e2:d7:cd:46:e3:0c:ed:97:83:
                    9b:ad:ae:86:99:86:59:4a:d2:0d:44:46:11:25:f3:
                    ab:0d:4e:e7:7b:71:03:0e:dc:f7:fd:a5:58:43:87:
                    43:3e:35:ea:a9:4a:d1:5c:bd:ec:75:14:8d:97:f2:
                    cb:15:5a:e5:2b:31:95:6a:a6:86:00:0f:14:2d:1d:
                    1d:cd:9f:d4:db:d9:54:0e:60:63:be:95:49:88:3a:
                    99:e9:07:47:02:44:21:c6:36:98:fa:40:91:6d:b8:
                    9c:49:bc:ee:65:b1:be:5b:f5:10:b5:cc:98:62:a0:
                    7b:fa:5e:2b:85:e5:cd:3d:e1:24:c9:f6:f8:8a:dc:
                    04:f9:fe:31:35:a6:bd:8a:d3:5e:94:69:a9:c2:01:
                    d4:76:e9:a1:b2:39:10:25:10:70:b5:b8:47:41:90:
                    b8:81:e0:86:b0:af:5f:cf:14:62:89:4c:ed:47:70:
                    53:de:b6:5a:ea:1a:51:26:8c:74:f1:97:0b:8d:4b:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DF:77:7A:83:11:32:CC:3B:B1:B8:29:ED:21:81:CD:CE:05:F5:D1
            X509v3 Authority Key Identifier:
                keyid:98:2E:A4:09:3F:98:1B:84:6F:2E:96:AE:7C:96:15:AF:2E:1C:A4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mC6kCT-YG4RvLpaufJYVry4cpMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/ct93eoMRMsw7sbgp7SGBzc4F9dE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/mC6kCT-YG4RvLpaufJYVry4cpMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:88:a5:af:66:9e:73:62:ce:4b:2b:1a:32:ce:00:85:38:
         7a:12:b1:d8:6e:7b:9c:44:5d:99:cf:bf:7a:c2:e6:0b:00:af:
         7d:62:8b:86:bf:05:5a:b3:1c:1e:b9:e0:ba:b7:d1:a5:08:b8:
         70:3c:9b:d2:b3:6a:f6:55:69:16:37:46:0b:0d:78:13:8b:a5:
         ec:2d:85:fc:a0:40:ea:b6:ef:f3:23:dd:c9:7f:c7:20:c7:d7:
         d5:d3:e2:d0:d8:08:76:bd:31:fb:bc:3e:be:db:c8:32:1e:98:
         7e:17:ff:b7:5c:b3:57:a8:e7:f0:64:2f:5e:40:fa:e2:9e:37:
         c8:95:36:70:8e:81:49:40:d6:a1:eb:92:59:6d:a2:26:6e:c7:
         b1:41:7e:fc:ca:f2:fc:cb:f6:9a:be:72:87:7c:41:f4:0d:73:
         6e:4a:e4:e2:4f:43:0e:9f:ca:84:5a:6a:18:ce:3e:f1:41:aa:
         8b:6d:62:6f:03:e1:93:fa:7d:37:70:bf:e7:4b:01:01:06:87:
         c2:c8:56:14:be:98:41:f9:9d:e6:6a:43:59:22:95:0e:8e:9d:
         84:1e:4a:f8:92:b4:aa:38:94:da:77:59:fb:cd:08:ed:33:5a:
         79:82:a2:bf:b8:92:81:1e:63:d5:0f:67:ed:01:91:be:f9:46:
         42:15:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-fra.rpki-client.org