Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa
File:                     GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa (raw, json)
Hash identifier:          Lh2dDcrBQ7qxeWZp6U33ADdscPq+Rc9mn2aMgz2pSeA=
Subject key identifier:   1A:63:6B:BE:73:D1:67:23:85:1A:F6:75:D5:C6:B5:F0:19:2D:D3:29
Certificate issuer:       /CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
Certificate serial:       018964C256DC439A5DEE79B53C418E4ED103
Authority key identifier: 36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa
Signing time:             Mon 17 Jul 2023 16:50:04 +0000
ROA not before:           Mon 17 Jul 2023 16:50:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        185.211.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c2:56:dc:43:9a:5d:ee:79:b5:3c:41:8e:4e:d1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
        Validity
            Not Before: Jul 17 16:50:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a636bbe73d16723851af675d5c6b5f0192dd329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:02:19:cd:25:f9:8a:58:3b:ae:2b:3f:c9:
                    d0:8b:c8:2a:63:9e:bf:e2:71:87:c2:e2:03:70:2e:
                    56:b3:ad:88:fd:e1:6a:fc:ad:11:a5:70:7d:dc:a7:
                    ae:3b:2a:36:85:a8:34:ae:fb:e8:97:7b:d1:2d:25:
                    77:65:d4:4b:e9:d1:d2:74:ee:ca:df:4e:01:8d:b2:
                    3f:5e:98:1f:fe:5e:25:c8:cc:5f:3d:55:b9:44:4c:
                    b5:64:34:0d:df:91:99:7a:70:dc:ec:87:b8:03:09:
                    9d:98:90:2e:45:de:85:60:a1:d4:1e:c3:f7:a3:b8:
                    de:be:ad:b4:2e:80:0b:7f:0b:95:1f:fa:ba:ec:da:
                    28:24:ae:0b:9f:29:8c:ff:05:cc:e4:d5:e6:bd:4f:
                    ca:f9:fb:35:1b:3d:10:bb:a5:4a:9e:94:a0:55:10:
                    c6:20:08:3f:67:4d:4e:8d:3c:6d:85:33:e8:9e:09:
                    29:3f:61:c9:41:28:be:a2:ed:58:50:f9:8f:9e:43:
                    b0:22:5d:9b:f3:b0:9f:fc:6c:32:6f:8c:2d:f0:57:
                    98:2b:0e:70:f7:8b:06:d2:59:06:b1:71:d8:98:f1:
                    9d:87:78:dc:2b:f4:5d:d7:52:c1:c1:13:74:6a:be:
                    9b:04:42:2c:b1:e1:dc:27:8a:40:15:2e:d7:92:a7:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:6B:BE:73:D1:67:23:85:1A:F6:75:D5:C6:B5:F0:19:2D:D3:29
            X509v3 Authority Key Identifier:
                keyid:36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:5a:9c:ff:4d:0a:22:b7:a9:da:3e:2b:c3:59:c9:f7:c4:
         01:9f:8f:13:97:ba:8b:ec:4f:07:f8:08:7a:b0:c0:f5:ca:7f:
         16:4b:bd:f2:bc:f6:16:39:2e:48:82:52:db:c4:43:2e:d1:07:
         ed:7c:71:cf:64:0e:79:cb:39:0a:68:55:e8:0b:88:65:84:39:
         a9:e7:cc:80:3b:91:bc:ac:06:7d:ab:1e:f7:9d:40:0d:51:c0:
         10:a2:7f:0c:b6:f5:c6:77:f4:1f:99:e9:d1:58:f9:16:83:cb:
         62:55:98:f0:93:4a:98:13:2c:e9:04:2f:8b:28:4b:f3:db:2d:
         7c:5b:86:ca:23:8d:64:46:a1:87:6b:a0:9d:ec:2d:24:77:da:
         9f:eb:cb:28:79:31:80:3c:c4:0e:5b:1e:24:96:d1:1d:c6:62:
         57:c3:7c:ce:09:04:4f:19:41:ee:70:ae:3a:0e:92:88:b1:43:
         34:53:fa:8a:e4:c6:85:f7:74:7f:e0:be:f2:1e:cf:fb:a6:01:
         5f:6f:ae:21:8c:4e:56:36:fd:75:d1:71:98:8b:d5:d3:22:c4:
         6f:bf:1d:4a:48:6a:e1:26:24:bb:4b:ad:23:c1:c3:b3:ba:b5:
         8f:d6:3c:60:d7:79:7e:14:bf:9a:9d:4b:26:0d:2c:db:3c:80:
         4c:28:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org