Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/eBnKet-nNyuEWpnDyKu9CpMRDdw.roa
File:                     eBnKet-nNyuEWpnDyKu9CpMRDdw.roa (raw, json)
Hash identifier:          1Gno7ecR9drEH8z0HkNdXZpkgrJSEjhc5UfzQSbxXy4=
Subject key identifier:   78:19:CA:7A:DF:A7:37:2B:84:5A:99:C3:C8:AB:BD:0A:93:11:0D:DC
Certificate issuer:       /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial:       016644EE
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/eBnKet-nNyuEWpnDyKu9CpMRDdw.roa
Signing time:             Tue 22 Feb 2022 10:11:17 +0000
ROA not before:           Tue 22 Feb 2022 10:11:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        37.140.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23479534 (0x16644ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
        Validity
            Not Before: Feb 22 10:11:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7819ca7adfa7372b845a99c3c8abbd0a93110ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:fd:24:37:87:b2:a4:0a:21:b3:f1:34:9c:
                    e4:d2:04:57:af:05:d9:40:85:31:55:e1:33:f2:e8:
                    61:83:d7:ac:98:a1:0c:10:ea:a2:ec:f5:61:32:e8:
                    c4:b2:7d:6a:1b:75:ef:42:b7:95:8f:35:e2:2b:4c:
                    65:83:c4:3e:08:f4:21:05:e3:4f:eb:94:bf:03:ea:
                    b3:44:79:37:49:62:fe:e7:5b:bd:14:4e:8f:67:fc:
                    e0:c7:f7:f5:ac:cb:c0:50:59:a5:f9:d5:aa:dc:a8:
                    07:80:74:34:71:55:5f:20:2c:1d:36:45:50:e7:f7:
                    cc:62:fe:69:4e:9f:9c:bf:8e:c6:a2:47:12:3b:25:
                    fa:b0:e4:7b:51:eb:7e:a9:2e:dd:4f:b9:7d:15:68:
                    be:28:e6:14:8f:6a:9b:8f:66:41:8c:b0:88:90:66:
                    51:4c:a9:d1:5f:5a:99:82:8e:9f:8a:65:03:7b:c6:
                    00:1b:91:92:22:6f:ab:92:30:35:68:a1:f1:2d:e9:
                    aa:b9:61:92:1c:6b:37:80:5f:78:df:8a:81:c9:3f:
                    7b:a8:38:13:6a:ab:75:65:4a:ca:53:43:01:c4:23:
                    dd:26:55:a9:85:e7:d8:91:ea:0d:f9:d0:bd:08:f5:
                    4f:10:fa:8c:a1:12:5d:ae:b5:2a:dd:42:37:00:82:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:19:CA:7A:DF:A7:37:2B:84:5A:99:C3:C8:AB:BD:0A:93:11:0D:DC
            X509v3 Authority Key Identifier:
                keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/eBnKet-nNyuEWpnDyKu9CpMRDdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:f4:26:0e:d4:be:d8:1d:c0:18:4f:e5:04:f3:d6:d3:27:
         7c:ce:cb:77:01:6e:26:62:2c:01:b0:1f:b6:dc:9b:03:b7:09:
         8f:ba:2a:ae:ca:60:20:d9:64:c7:a1:e0:fa:97:15:02:a9:7a:
         63:cf:8f:eb:13:76:e4:bb:90:c4:ec:50:f4:06:1a:b5:f4:1e:
         ad:0e:88:41:e5:ef:47:4b:4d:1e:26:78:39:25:47:f4:08:5d:
         51:86:52:02:cc:2d:04:83:ae:89:ef:3d:09:d4:7e:4e:f2:37:
         4c:6a:9d:27:e4:09:09:be:89:7d:66:a1:00:c1:24:8f:db:1c:
         e2:0f:d5:7a:ca:36:20:b2:1c:12:8d:6a:76:23:9a:f3:08:8b:
         75:bc:de:b6:e3:ed:d7:78:7d:e0:df:42:8e:79:d5:b6:36:82:
         df:37:80:a4:ea:40:99:9f:cb:39:26:7e:8c:50:f1:f6:4a:4f:
         60:63:3f:d7:bf:f1:ea:48:18:e7:22:44:80:3a:6e:5e:80:17:
         28:50:6f:a4:e6:90:56:06:fa:02:d7:61:99:bd:00:aa:3d:9a:
         10:36:ae:25:a2:97:f0:ba:e8:46:6f:08:bc:56:4f:35:eb:41:
         3b:8f:e7:cb:03:4f:20:c6:0e:00:23:ec:ea:2d:a1:3d:fc:a4:
         f5:ea:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org