Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/7Ei9a6_WMh-vrC3d_d-7ePaUod4.roa
File:                     7Ei9a6_WMh-vrC3d_d-7ePaUod4.roa (raw, json)
Hash identifier:          mMpMfoEEUpQx7aYKgmvw34q6+UsU8JAyjtCBZc0BrLs=
Subject key identifier:   EC:48:BD:6B:AF:D6:32:1F:AF:AC:2D:DD:FD:DF:BB:78:F6:94:A1:DE
Certificate issuer:       /CN=f03528a5045200f614da2bf3a5bcd2624c8f73ac
Certificate serial:       2E59
Authority key identifier: F0:35:28:A5:04:52:00:F6:14:DA:2B:F3:A5:BC:D2:62:4C:8F:73:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DUopQRSAPYU2ivzpbzSYkyPc6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/7Ei9a6_WMh-vrC3d_d-7ePaUod4.roa
Signing time:             Thu 28 Apr 2022 20:01:54 +0000
ROA not before:           Thu 28 Apr 2022 20:01:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56851
IP address blocks:        217.28.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11865 (0x2e59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03528a5045200f614da2bf3a5bcd2624c8f73ac
        Validity
            Not Before: Apr 28 20:01:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec48bd6bafd6321fafac2dddfddfbb78f694a1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:6a:c9:02:e4:ab:4c:34:93:c2:4e:7e:7d:
                    49:85:d6:bd:78:e6:87:0e:45:21:a4:77:cb:02:29:
                    c9:bd:24:b0:ec:01:72:2d:1a:3d:e5:29:a6:72:48:
                    32:a8:44:12:2f:42:68:f6:01:27:11:4d:10:04:0b:
                    58:27:24:2e:35:83:b0:f6:1e:48:64:9d:23:4a:79:
                    19:c9:cf:4a:c3:26:38:64:f8:f3:5e:9c:3c:b3:fc:
                    66:43:e7:2a:c3:34:c1:23:0c:e0:73:c4:37:70:1a:
                    65:3a:ae:bf:ad:25:d7:57:c0:a5:c3:c7:dd:92:4e:
                    04:af:b2:2e:b6:ef:ad:ff:a2:be:f0:25:ec:a7:09:
                    15:23:a3:ce:a5:68:ef:e7:06:e0:bb:b8:c7:00:e2:
                    2f:f7:e5:0a:9e:47:bd:69:81:76:7f:7a:1a:ab:e2:
                    b5:75:11:08:b6:80:69:52:bf:a5:b7:db:c2:ff:93:
                    20:dc:16:87:50:e4:7a:0d:16:fb:04:d3:28:4a:37:
                    23:95:93:b2:2b:e1:0e:9b:2d:b5:39:90:38:39:27:
                    ea:b0:42:37:78:f9:f1:66:5b:17:d8:e8:4e:d3:31:
                    ea:c3:41:59:93:a4:17:b8:87:83:09:71:c9:fd:89:
                    2f:9d:36:d1:35:a8:da:fa:41:85:5c:70:b9:6f:fc:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:BD:6B:AF:D6:32:1F:AF:AC:2D:DD:FD:DF:BB:78:F6:94:A1:DE
            X509v3 Authority Key Identifier:
                keyid:F0:35:28:A5:04:52:00:F6:14:DA:2B:F3:A5:BC:D2:62:4C:8F:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DUopQRSAPYU2ivzpbzSYkyPc6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/7Ei9a6_WMh-vrC3d_d-7ePaUod4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/8DUopQRSAPYU2ivzpbzSYkyPc6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.28.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:11:99:92:df:f1:f3:f5:27:06:ee:62:bf:ab:3e:a4:b8:ab:
         ac:d5:54:52:1f:5d:85:09:4b:59:20:1f:6b:94:7a:75:55:ab:
         eb:67:30:57:ed:1f:ce:a7:5c:64:85:07:fd:ed:59:0d:75:c8:
         9e:7b:16:6c:6a:47:77:e5:07:ee:ca:ce:82:38:ba:8d:e4:b3:
         82:c2:b6:0c:6e:4d:ef:a3:80:0e:56:a9:a9:9a:9d:ab:01:0f:
         03:7e:11:62:d3:29:d1:27:b4:f9:38:cc:43:24:1f:bf:74:4b:
         9c:8a:21:b6:1b:f1:1a:d6:03:92:b5:e6:25:23:ce:4c:62:10:
         73:64:e5:1f:0f:25:35:9c:e6:76:f7:6b:cf:41:02:40:13:96:
         66:ed:73:1b:a0:65:b7:3f:ac:43:54:8b:29:ba:23:31:63:a3:
         bf:39:ba:e0:09:31:20:f8:d0:3c:34:75:43:25:54:bb:f7:db:
         02:03:28:2f:82:ab:fd:72:f5:0c:c2:5d:70:f9:a2:32:3b:cb:
         f2:d9:22:c8:d1:c5:7c:77:1c:a7:f1:60:91:8f:d3:84:5a:f4:
         24:aa:70:6f:40:f5:d9:02:2b:93:64:3c:54:b0:38:23:4d:18:
         bc:05:4e:c3:20:7b:c8:51:0d:de:d9:9e:50:ca:97:77:80:65:
         81:df:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-fra.rpki-client.org