Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/oO09y9Bk0ydhH2AAcZVUZmsINIo.roa
File:                     oO09y9Bk0ydhH2AAcZVUZmsINIo.roa (raw, json)
Hash identifier:          0Y8nSbmIwQ8biisF5vtJcaiqZx8QMy4NeWi9qFotfcg=
Subject key identifier:   A0:ED:3D:CB:D0:64:D3:27:61:1F:60:00:71:95:54:66:6B:08:34:8A
Certificate issuer:       /CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
Certificate serial:       E80EF0
Authority key identifier: 94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/oO09y9Bk0ydhH2AAcZVUZmsINIo.roa
Signing time:             Sat 01 Jan 2022 05:56:41 +0000
ROA not before:           Sat 01 Jan 2022 05:56:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44285
IP address blocks:        80.71.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15208176 (0xe80ef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
        Validity
            Not Before: Jan  1 05:56:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0ed3dcbd064d327611f6000719554666b08348a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:49:07:34:62:a1:cd:80:90:29:9b:f1:e3:
                    31:95:8f:f8:b0:14:ad:d0:df:00:f8:82:89:f4:6d:
                    6f:ff:eb:48:28:81:aa:3c:5b:80:8b:a3:ab:49:a9:
                    5d:23:e1:cb:b3:7b:fb:a8:01:e1:5b:a4:29:96:d2:
                    86:f0:1e:10:8d:38:35:65:26:22:19:f7:c4:b0:af:
                    e4:55:cb:33:c6:e1:e4:bb:94:14:27:a0:4d:6f:7f:
                    8c:82:9f:5a:e1:09:a3:6a:fb:07:cc:00:37:32:d3:
                    12:10:b3:1d:46:a0:3b:57:ab:27:1b:45:3c:4f:16:
                    c0:d8:2b:e9:03:41:ec:70:bc:4f:ce:7d:b4:34:b3:
                    62:b7:d2:38:6a:0b:c3:e5:66:fc:33:f2:46:60:ea:
                    c9:b3:4a:6b:47:8d:45:a9:e2:bc:88:9c:92:88:9e:
                    71:39:f6:08:b6:a8:20:9c:ea:f3:b9:70:16:da:be:
                    66:c5:f4:8a:97:ba:98:43:a2:f0:c1:fb:cc:51:b1:
                    57:39:6b:8f:ff:f3:5a:cc:b2:0c:33:81:de:9f:ba:
                    e5:44:20:8f:ba:6a:52:e4:ba:0a:3e:ed:8a:b1:92:
                    b0:6e:e2:38:3a:1c:1e:39:15:f9:ac:f0:00:ce:c3:
                    07:2a:1f:42:00:5b:79:28:c3:fb:77:cb:43:9e:bd:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:ED:3D:CB:D0:64:D3:27:61:1F:60:00:71:95:54:66:6B:08:34:8A
            X509v3 Authority Key Identifier:
                keyid:94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/oO09y9Bk0ydhH2AAcZVUZmsINIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:36:f1:ec:b8:0c:52:79:34:49:b1:59:1c:1b:c4:4e:fa:2a:
         55:97:33:18:a9:23:3d:b4:19:81:44:df:20:06:e1:b5:c5:bd:
         b8:00:df:16:9b:70:af:25:d1:63:02:b4:69:3a:28:1b:10:62:
         aa:70:e5:59:f9:34:8a:b4:d7:d4:9e:ad:48:38:fd:ea:ba:d9:
         5f:a4:82:27:a1:90:44:d8:76:d6:75:4a:04:a2:7a:f1:40:8c:
         b5:ab:54:12:f6:cd:be:3a:ca:89:0f:97:28:81:5a:0e:8e:78:
         db:d4:e4:d8:55:3d:2b:09:df:e6:e9:d7:71:c0:18:da:8d:f6:
         2c:2b:bb:6e:1f:5f:1a:f7:96:17:5c:d7:ad:45:bb:e6:bc:6a:
         1f:5a:69:0f:39:e1:89:c2:7c:27:38:6b:72:99:f2:02:bb:e0:
         3a:fa:6b:fa:6d:61:62:d7:32:04:30:21:1d:7f:ff:ba:c4:ac:
         a9:80:2f:76:5f:e2:3e:33:8f:2a:9a:4c:ad:6d:95:68:fa:57:
         5f:24:a1:05:7d:95:bf:d8:ba:3b:f8:65:9a:ed:6b:0e:73:5e:
         e9:41:8d:92:69:3f:ba:95:cd:89:0f:91:34:da:f7:2b:c6:b0:
         be:e7:1b:30:e5:73:bc:49:95:60:da:7f:6c:a4:b9:00:d1:ac:
         a9:33:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-fra.rpki-client.org