Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e14d80-b5ed-4e7d-9649-694d89142ff9/1/N3eP5_6I-AWEFcBbAo5RjyRaDDw.roa
File:                     N3eP5_6I-AWEFcBbAo5RjyRaDDw.roa (raw, json)
Hash identifier:          bpFFkNQJpf7eGdtx0z1J0WKvGMkPHR8Gltz2jGQ4sAY=
Subject key identifier:   37:77:8F:E7:FE:88:F8:05:84:15:C0:5B:02:8E:51:8F:24:5A:0C:3C
Certificate issuer:       /CN=5bb0e9679ccd367bb6d1680eb3a432a9106cbd97
Certificate serial:       05B00387
Authority key identifier: 5B:B0:E9:67:9C:CD:36:7B:B6:D1:68:0E:B3:A4:32:A9:10:6C:BD:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W7DpZ5zNNnu20WgOs6QyqRBsvZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e14d80-b5ed-4e7d-9649-694d89142ff9/1/N3eP5_6I-AWEFcBbAo5RjyRaDDw.roa
Signing time:             Sat 01 Jan 2022 15:02:42 +0000
ROA not before:           Sat 01 Jan 2022 15:02:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51554
IP address blocks:        185.112.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95421319 (0x5b00387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bb0e9679ccd367bb6d1680eb3a432a9106cbd97
        Validity
            Not Before: Jan  1 15:02:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37778fe7fe88f8058415c05b028e518f245a0c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:14:88:ad:18:c1:e1:49:77:25:69:9e:f9:
                    3f:64:c8:9c:85:c7:cf:b7:40:d1:36:68:29:7a:19:
                    ad:89:df:69:e1:67:4d:b1:85:92:27:b5:0d:06:8e:
                    51:06:a0:6a:01:99:b7:f6:70:e2:73:98:9f:02:63:
                    06:69:40:7d:87:0c:7c:c6:0e:f4:2b:6d:6f:da:67:
                    59:50:18:c2:e3:87:d8:b3:4a:b1:2c:99:25:f5:06:
                    19:ae:ea:b4:b3:c7:78:17:f0:f4:2f:d6:9c:71:97:
                    fc:ab:05:e7:2c:cb:f8:c5:76:28:30:ff:c2:67:3b:
                    23:19:19:87:38:57:b2:79:1a:57:84:c3:95:f9:ab:
                    dd:4e:01:64:0a:67:18:5e:c1:70:79:83:70:3a:15:
                    7d:c8:fc:b1:b4:b6:db:53:03:2c:59:eb:1d:c2:fe:
                    12:4c:9c:36:e8:42:3c:97:b9:49:39:e9:22:41:e8:
                    98:d3:2f:16:f7:2f:ab:b1:ed:af:31:2a:d3:20:3d:
                    9b:c9:f0:a4:c5:f9:93:cf:0f:21:df:b1:20:bd:fa:
                    f0:b9:55:96:5f:2f:53:8b:51:41:f0:dd:5c:fc:7f:
                    c2:72:a7:71:c8:1d:0a:75:77:19:2d:af:c4:f9:c1:
                    cc:d5:f6:47:e2:67:b3:a6:40:64:d6:7d:33:11:50:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:77:8F:E7:FE:88:F8:05:84:15:C0:5B:02:8E:51:8F:24:5A:0C:3C
            X509v3 Authority Key Identifier:
                keyid:5B:B0:E9:67:9C:CD:36:7B:B6:D1:68:0E:B3:A4:32:A9:10:6C:BD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7DpZ5zNNnu20WgOs6QyqRBsvZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e14d80-b5ed-4e7d-9649-694d89142ff9/1/N3eP5_6I-AWEFcBbAo5RjyRaDDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e14d80-b5ed-4e7d-9649-694d89142ff9/1/W7DpZ5zNNnu20WgOs6QyqRBsvZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:6d:08:28:57:a2:ad:8f:65:ce:34:28:d6:08:80:a4:47:0d:
         01:fb:10:8a:3a:bc:36:49:ce:a4:40:d1:e6:04:c9:4b:ed:0e:
         0f:d7:ce:02:a1:ea:11:b8:01:c9:f1:98:38:ad:2a:4a:07:9a:
         d9:dc:99:da:19:3a:80:af:fb:9b:ba:00:2a:da:50:3c:7e:ba:
         57:79:4c:fc:02:b8:fb:3b:f9:34:6c:73:47:14:ee:cd:2b:dc:
         28:8e:33:0a:0d:0f:d0:f4:0c:7a:7b:ca:2a:e2:29:45:6f:67:
         2c:f5:ca:95:96:ca:d4:bd:4d:9d:8b:3e:a6:91:48:1f:90:9d:
         6a:ee:2b:ab:cb:86:c0:b5:15:51:cb:3c:56:05:ed:9d:0e:4f:
         6e:07:dd:03:c9:86:9e:4f:38:2d:69:da:47:ff:39:99:da:d1:
         ba:bf:78:0e:2f:75:62:df:25:e1:71:fd:47:c7:d4:b2:9e:a1:
         c5:7c:08:a0:25:c3:46:6c:c0:ad:60:62:c8:8b:ec:35:ef:fe:
         be:ed:bb:b6:92:d8:79:79:0a:41:6c:62:e5:17:ad:a6:aa:85:
         9a:7e:16:53:4e:58:6d:17:82:44:1d:eb:06:95:73:cf:f3:0f:
         95:0d:49:9a:d6:72:d8:d6:63:a9:0b:4b:1a:87:fb:dc:21:cc:
         cc:2c:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org