Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/C77oAx7vHu7WOaBqKAP10mXt6zE.roa
File:                     C77oAx7vHu7WOaBqKAP10mXt6zE.roa (raw, json)
Hash identifier:          DTkYG28oanE7qZuRhgDuUxcmmAazroJf31uAS611VyU=
Subject key identifier:   0B:BE:E8:03:1E:EF:1E:EE:D6:39:A0:6A:28:03:F5:D2:65:ED:EB:31
Certificate issuer:       /CN=78beb07e8965aace510f44353242c9cc4d51a237
Certificate serial:       BBCF
Authority key identifier: 78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/C77oAx7vHu7WOaBqKAP10mXt6zE.roa
Signing time:             Tue 25 Jan 2022 18:23:46 +0000
ROA not before:           Tue 25 Jan 2022 18:23:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        185.198.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48079 (0xbbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78beb07e8965aace510f44353242c9cc4d51a237
        Validity
            Not Before: Jan 25 18:23:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bbee8031eef1eeed639a06a2803f5d265edeb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:f6:8c:13:2f:4b:fb:30:45:54:c7:fc:18:
                    b1:30:17:9c:87:88:49:fb:2c:24:d3:d2:c2:e1:27:
                    d0:11:2c:c8:82:34:86:a3:29:49:6c:02:57:00:e5:
                    1e:7d:36:f4:91:0e:0f:46:1e:be:ac:44:6f:d9:a6:
                    fb:84:c5:b5:3d:1d:09:af:71:9e:7e:e8:5f:6e:ea:
                    32:37:37:74:72:d5:2e:d0:b3:67:92:f2:f7:f9:69:
                    62:f9:f8:95:a8:45:15:65:6a:95:79:f2:34:77:9c:
                    93:64:d4:07:54:ef:52:10:33:8a:fe:c6:3d:c5:f4:
                    27:89:64:62:fb:a5:6f:d0:93:ac:e7:c8:57:3a:b3:
                    3c:ef:79:64:e8:77:e3:53:02:cc:62:53:85:26:47:
                    6c:62:83:98:8c:fe:ac:6d:b5:d5:17:f7:18:8d:f4:
                    6e:21:de:79:88:01:82:af:bc:8e:60:3b:ea:ce:cc:
                    88:fa:42:c5:d8:05:df:3f:f9:43:22:be:16:9d:4e:
                    cb:b3:36:c4:71:3b:3a:f2:59:94:1b:25:ec:ca:8a:
                    39:6e:7a:8b:2c:e6:fa:e8:01:ea:e6:67:c5:9f:28:
                    a3:53:a2:85:d1:85:48:8a:a4:24:33:c7:2a:bb:ac:
                    ad:b9:cb:fb:71:ae:8a:64:af:6e:d4:30:fa:6e:a4:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:E8:03:1E:EF:1E:EE:D6:39:A0:6A:28:03:F5:D2:65:ED:EB:31
            X509v3 Authority Key Identifier:
                keyid:78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/C77oAx7vHu7WOaBqKAP10mXt6zE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:bf:b4:d2:a3:bb:07:da:d6:ac:9e:41:6c:69:c3:ed:37:
         a4:0e:22:69:cb:41:50:89:57:f5:b8:bb:cc:1f:26:9b:cf:7d:
         b1:aa:4f:ec:4f:55:49:4b:b9:ac:05:f6:11:81:97:19:f4:0b:
         39:fe:bf:8d:f2:d8:34:0b:c8:d9:b1:40:d5:17:cc:33:e0:23:
         01:a0:88:6d:6c:c8:79:df:49:70:c8:c9:34:84:b8:89:fc:65:
         dd:14:a9:2c:c4:75:5c:22:af:f2:b2:40:4d:aa:3e:bf:77:d3:
         d2:d7:24:b5:1b:70:9b:77:bc:bc:58:29:ea:31:8c:87:c8:ea:
         0d:12:46:0b:2d:81:e5:6f:3d:ae:c8:7b:fe:02:54:42:8f:31:
         54:0c:45:40:81:7d:85:f3:d6:db:2e:6b:06:86:75:ba:e9:15:
         51:18:2f:52:67:c9:82:0e:a7:74:59:09:a6:9c:b5:da:56:78:
         fb:f4:c9:64:1e:3a:bd:a9:f0:0f:89:99:4d:48:c9:65:99:71:
         5d:71:84:4e:17:e4:6a:6a:70:fe:3e:2d:10:d3:81:22:62:b7:
         14:a1:5b:59:b1:fb:99:14:24:3c:e7:c8:63:9d:76:1c:4e:e3:
         c4:c4:94:65:48:dd:ab:67:d5:16:9d:74:0b:96:13:61:7d:0a:
         b5:21:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:34 2024 by rpki-client on console-fra.rpki-client.org