Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/L4ZZc-4HphhF3LOPVKtUgkw5j50.roa
File:                     L4ZZc-4HphhF3LOPVKtUgkw5j50.roa (raw, json)
Hash identifier:          NUAO148f9N7uVC/SBfkhHBi9n6JFcPGawKHG3pyRFhA=
Subject key identifier:   2F:86:59:73:EE:07:A6:18:45:DC:B3:8F:54:AB:54:82:4C:39:8F:9D
Certificate issuer:       /CN=7550861a244c69122df95f24eba7b710e366198f
Certificate serial:       048964C9
Authority key identifier: 75:50:86:1A:24:4C:69:12:2D:F9:5F:24:EB:A7:B7:10:E3:66:19:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVCGGiRMaRIt-V8k66e3EONmGY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/L4ZZc-4HphhF3LOPVKtUgkw5j50.roa
Signing time:             Sat 01 Jan 2022 05:58:01 +0000
ROA not before:           Sat 01 Jan 2022 05:58:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212893
IP address blocks:        178.218.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76113097 (0x48964c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7550861a244c69122df95f24eba7b710e366198f
        Validity
            Not Before: Jan  1 05:58:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f865973ee07a61845dcb38f54ab54824c398f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:4f:65:65:77:2e:b9:b5:a4:f9:fd:4a:5f:
                    e8:2f:c0:16:f2:a5:f9:6e:f1:b5:2b:2f:44:55:0b:
                    11:74:3b:17:94:ab:ee:83:eb:17:e0:f3:fe:69:35:
                    a6:98:b5:ef:43:f1:7e:29:ad:72:94:07:c1:37:76:
                    36:35:dc:9b:6e:d9:4a:84:6b:c1:e8:0c:58:19:02:
                    c7:1c:ad:3b:72:0d:6f:80:03:6c:50:e2:b5:05:39:
                    1f:ed:9c:a9:44:78:b5:e1:c8:6f:88:17:dd:89:60:
                    61:55:cd:80:fc:ec:4b:23:ad:d3:38:3b:a5:b3:f5:
                    a6:68:43:34:86:aa:83:e6:c9:79:37:d7:43:03:55:
                    49:d7:87:8a:3f:c3:68:60:27:ca:1d:ce:d7:09:bf:
                    05:75:7d:6b:ee:26:58:06:c7:85:90:ab:0a:96:f8:
                    ab:94:57:30:8c:c3:6d:f1:d4:7d:8d:cb:e1:2e:ae:
                    52:b2:fd:03:e4:85:91:20:d4:6c:07:a3:de:f7:b3:
                    d7:76:12:c9:2e:c3:30:d9:e1:82:33:06:87:e5:af:
                    ab:91:49:3b:03:bd:17:1d:2a:f2:61:a4:dd:9e:d0:
                    d4:48:a7:ab:8d:5c:8a:20:7b:2e:df:b3:c9:71:59:
                    6f:db:4f:a3:a0:44:be:f0:68:aa:cc:29:a4:fa:7f:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:59:73:EE:07:A6:18:45:DC:B3:8F:54:AB:54:82:4C:39:8F:9D
            X509v3 Authority Key Identifier:
                keyid:75:50:86:1A:24:4C:69:12:2D:F9:5F:24:EB:A7:B7:10:E3:66:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVCGGiRMaRIt-V8k66e3EONmGY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/L4ZZc-4HphhF3LOPVKtUgkw5j50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/dVCGGiRMaRIt-V8k66e3EONmGY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:9e:61:48:c9:30:52:47:79:78:06:4a:52:62:05:43:55:
         cf:63:9d:77:c3:e1:b8:cc:94:fb:09:69:32:54:34:75:22:81:
         80:74:5c:df:72:5c:ea:72:c0:ce:40:d3:97:2f:ff:01:e4:92:
         41:c4:f1:11:c9:39:74:0c:b9:49:4b:6b:3b:63:0c:8d:46:0e:
         12:cb:41:15:82:20:85:f5:30:99:76:59:58:4a:84:58:60:93:
         67:6c:62:f5:6c:8c:48:08:37:e7:97:76:29:db:b2:d2:b4:35:
         85:a4:47:8f:c1:a1:93:ab:45:46:16:13:48:8f:92:b4:b2:71:
         b4:98:50:52:e1:03:c2:0c:0b:f1:a7:54:2c:a5:42:42:ba:09:
         55:54:a1:a7:aa:81:8f:00:7f:c4:ad:41:01:ba:8d:7d:b8:d1:
         22:2d:c6:ff:fb:e2:25:60:a1:14:60:8f:76:f0:44:ab:b8:7a:
         61:d5:ec:d4:93:50:55:08:95:b5:5d:e3:e8:3f:d7:14:29:f5:
         fc:d9:58:25:c1:14:1e:a8:33:cb:1b:59:6b:2e:82:93:4f:f1:
         1f:df:48:f0:18:4d:d3:6e:17:87:9e:29:1f:a3:73:b5:47:f8:
         71:1a:33:02:48:8c:00:af:4a:9d:9d:14:0d:11:a5:01:8c:bc:
         09:66:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:41 2024 by rpki-client on console-ams.rpki-client.org