Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/_ukyWGNXKXzhXFEQhxUUzFZVdK4.roa
File:                     _ukyWGNXKXzhXFEQhxUUzFZVdK4.roa (raw, json)
Hash identifier:          7II9FARKs9wADVYq9iG6Xb8CCSdLtQpS9qDwDInrmNo=
Subject key identifier:   FE:E9:32:58:63:57:29:7C:E1:5C:51:10:87:15:14:CC:56:55:74:AE
Certificate issuer:       /CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
Certificate serial:       E846AA
Authority key identifier: 94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/_ukyWGNXKXzhXFEQhxUUzFZVdK4.roa
Signing time:             Sat 01 Jan 2022 05:56:41 +0000
ROA not before:           Sat 01 Jan 2022 05:56:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48715
IP address blocks:        80.71.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15222442 (0xe846aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
        Validity
            Not Before: Jan  1 05:56:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fee932586357297ce15c5110871514cc565574ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:2d:24:12:e9:15:1e:2a:31:34:87:5e:be:
                    31:00:e0:b4:b3:7a:56:6a:83:17:c7:af:0a:54:a3:
                    ba:a5:9e:f0:b1:7f:fd:01:56:f9:05:1b:46:cf:82:
                    c5:2a:cc:2e:01:64:a8:ab:85:5b:d3:f8:32:55:1d:
                    06:ca:09:b9:42:50:93:98:6e:ef:15:78:a9:e7:d0:
                    bb:e4:f0:50:85:c6:1e:3d:73:7c:88:32:82:8c:7b:
                    c2:bb:24:9a:0b:84:34:26:d4:3e:d2:6f:fe:b1:17:
                    46:31:a9:5b:ca:f3:32:b3:08:ef:46:ee:fb:01:cc:
                    64:1c:9b:8b:bd:81:8a:ad:b4:24:eb:96:66:6e:5a:
                    81:05:86:7f:e4:f6:c9:31:5f:a7:92:b8:a0:db:d9:
                    14:78:73:a9:f0:e6:f1:d6:ea:09:f1:e2:7f:07:8a:
                    a2:f4:6d:7c:80:ee:5b:54:33:dc:8e:b6:81:d7:f4:
                    35:2f:cc:80:6c:f8:67:c4:ae:4f:49:d2:0f:61:95:
                    01:4a:0c:a5:ab:87:c2:2d:26:ef:89:01:54:70:0a:
                    e5:52:6a:f3:f2:a6:33:e1:76:89:ce:57:25:a2:b6:
                    08:a1:d1:70:ad:cd:65:ea:31:58:78:f9:28:d3:90:
                    13:25:62:fc:13:4f:2d:24:36:44:6e:14:bf:fa:70:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:32:58:63:57:29:7C:E1:5C:51:10:87:15:14:CC:56:55:74:AE
            X509v3 Authority Key Identifier:
                keyid:94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/_ukyWGNXKXzhXFEQhxUUzFZVdK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:5a:b6:6b:ff:e5:70:53:b3:34:db:c1:fc:4b:2e:08:fd:
         42:0e:c6:fa:71:22:f5:1a:57:2c:c4:52:45:c2:4c:b4:e7:a8:
         c1:45:9a:37:b2:86:02:60:6b:c9:12:87:d1:e4:53:49:09:58:
         6d:0c:b7:89:b6:db:26:4f:ff:cd:f3:3b:2d:37:c0:ff:72:a0:
         b1:31:7d:63:f1:c3:42:19:c0:e7:f6:fa:f7:5e:09:4f:11:52:
         fe:33:55:09:ab:9f:41:ec:ce:16:e5:27:ee:82:be:94:1d:97:
         f0:e6:b9:8d:fa:08:e3:31:86:97:96:31:b2:2c:2c:3b:10:23:
         0f:9b:06:66:92:af:bc:87:08:a1:18:0c:63:8f:e5:dc:fa:8e:
         c1:fd:61:06:6d:cf:b4:cf:b5:cc:45:22:2d:cc:43:97:5b:b3:
         9b:52:67:9d:aa:2e:f2:3f:97:3c:4c:81:61:da:cd:92:b0:cb:
         4d:ec:4e:40:5a:53:2b:38:aa:53:ef:f3:0c:2b:18:77:83:b7:
         1c:ec:3a:04:00:56:4e:ed:b7:89:05:f0:94:8b:8f:e8:3d:33:
         b9:7e:43:fc:74:cb:3b:48:0d:3f:f8:23:1c:be:87:bd:82:66:
         ef:0a:86:5b:89:fb:cb:11:41:00:45:86:83:69:16:48:52:89:
         0a:9d:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-fra.rpki-client.org