Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/0ANBoAXtHvnUwMW_V3kPfs04m7Q.roa
File:                     0ANBoAXtHvnUwMW_V3kPfs04m7Q.roa (raw, json)
Hash identifier:          NGP5yjAPLdLOLoICqV//WpoNhDV2o6EPy5rY8CjE5Xg=
Subject key identifier:   D0:03:41:A0:05:ED:1E:F9:D4:C0:C5:BF:57:79:0F:7E:CD:38:9B:B4
Certificate issuer:       /CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Certificate serial:       01B297
Authority key identifier: 69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/0ANBoAXtHvnUwMW_V3kPfs04m7Q.roa
Signing time:             Wed 02 Feb 2022 06:25:48 +0000
ROA not before:           Wed 02 Feb 2022 06:25:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43624
IP address blocks:        212.18.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111255 (0x1b297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690b16976a9577cfbad2d0531be3afd35a714ad3
        Validity
            Not Before: Feb  2 06:25:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d00341a005ed1ef9d4c0c5bf57790f7ecd389bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:77:97:5c:b2:94:5e:a8:d5:12:52:f5:ec:
                    98:b9:43:49:61:dc:12:01:5d:24:03:56:b9:1e:2e:
                    51:b6:9b:c9:f2:45:dc:88:87:66:2b:15:2f:96:4a:
                    db:71:86:53:c9:a9:3f:c4:2a:d3:e9:a5:d4:72:0e:
                    0c:e0:bc:a5:19:87:fa:44:5e:44:88:50:4f:75:ea:
                    ff:2b:61:ce:19:96:c9:10:dd:c0:7a:29:12:60:f3:
                    dc:28:0c:a5:6b:f0:f9:45:c7:ec:b6:95:98:45:24:
                    d4:9c:17:f1:d1:75:b0:d0:e3:8a:1a:a2:dc:a9:cd:
                    12:e9:4e:e3:3c:6c:74:e7:0f:6a:c7:a3:83:5e:01:
                    43:9b:7a:92:3a:d0:3d:50:2f:63:f5:ce:f9:06:7a:
                    0f:47:1d:f1:fb:ed:0c:c8:9a:04:86:1d:b4:36:59:
                    fd:d2:ed:73:c9:32:d5:29:6c:c8:cf:b3:16:5f:a0:
                    c3:10:42:5c:c3:f2:e2:8b:f4:94:e7:bc:62:ec:90:
                    78:d7:06:20:6d:31:11:dd:40:fa:d6:ab:b0:89:c7:
                    9e:05:3f:e4:62:68:1b:7c:43:17:bd:e9:2e:fc:59:
                    72:c9:cf:b9:3f:ea:1c:ea:e2:be:2a:dd:16:82:8e:
                    52:7c:38:ed:6a:53:ad:94:ed:84:c5:fe:0c:7e:1d:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:41:A0:05:ED:1E:F9:D4:C0:C5:BF:57:79:0F:7E:CD:38:9B:B4
            X509v3 Authority Key Identifier:
                keyid:69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/0ANBoAXtHvnUwMW_V3kPfs04m7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:80:0f:e0:a0:7e:f8:c1:e4:93:a1:49:b3:c5:08:c9:e6:
         7d:de:5a:75:d1:28:35:43:9a:17:7f:d7:4d:3d:de:09:90:1a:
         ab:fb:01:55:41:6d:24:f1:b7:b7:fc:da:9f:0f:95:e4:b6:3c:
         dd:d0:f5:9e:74:35:ef:f3:52:58:25:a1:18:2e:14:55:12:11:
         51:fd:a9:64:c7:ed:14:c8:55:ef:7c:50:a7:71:76:61:71:55:
         21:5e:ab:b1:5d:a6:5c:27:44:00:f7:1f:4e:29:0a:ff:e8:59:
         8a:35:2d:37:e0:8d:18:54:34:24:03:48:bd:2e:33:cf:2e:2d:
         ec:c7:f2:25:a1:9b:82:30:49:5c:22:bd:0e:15:72:a2:a1:17:
         25:57:ef:ef:70:d3:35:5f:c0:f8:41:a5:2a:dd:2c:b9:fe:4a:
         4a:0b:94:c7:b8:2a:8c:be:11:d4:69:f5:7a:03:e3:3d:12:1b:
         c9:2d:a8:4f:2d:2c:9d:59:82:22:72:7e:42:d3:5b:97:55:3b:
         a4:1e:f5:d7:48:87:cd:83:27:90:7f:93:f2:ae:4b:39:c4:86:
         10:39:e4:1a:28:2d:74:f2:57:a1:6c:7a:dd:3b:29:90:94:f0:
         57:4c:15:7c:55:d9:e9:7b:5c:0a:be:c7:0f:e1:cf:a9:13:82:
         33:9f:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:50 2024 by rpki-client on console-fra.rpki-client.org