Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/d5gHscwcnPQeftGlne-6QhuhAhI.roa
File:                     d5gHscwcnPQeftGlne-6QhuhAhI.roa (raw, json)
Hash identifier:          0bwkBnvHzlYe2bpV6dTTx19cahshLQeockfFf9xRTOc=
Subject key identifier:   77:98:07:B1:CC:1C:9C:F4:1E:7E:D1:A5:9D:EF:BA:42:1B:A1:02:12
Certificate issuer:       /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial:       07B67103
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/d5gHscwcnPQeftGlne-6QhuhAhI.roa
Signing time:             Fri 25 Mar 2022 08:07:27 +0000
ROA not before:           Fri 25 Mar 2022 08:07:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12679
IP address blocks:        194.147.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129396995 (0x7b67103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
        Validity
            Not Before: Mar 25 08:07:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=779807b1cc1c9cf41e7ed1a59defba421ba10212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:47:92:38:07:06:8c:dc:fa:c3:38:90:59:
                    c4:d5:b0:be:3f:14:98:17:74:76:26:f4:f5:7e:d4:
                    ff:5a:6c:30:ec:0a:d1:56:73:0b:0a:de:41:30:7a:
                    b2:c7:10:a5:42:05:17:e1:56:08:bd:25:ce:a3:e2:
                    1e:eb:6b:c6:55:b4:97:9f:24:f9:ab:eb:00:55:57:
                    74:b2:69:29:96:de:4c:10:3d:fc:e4:aa:c1:5d:57:
                    e4:43:f5:90:d4:21:be:6a:c2:ca:fb:e2:f4:96:39:
                    e7:47:92:75:08:67:a9:2b:60:6f:16:17:d8:4b:0c:
                    9e:7b:76:28:f5:b6:a8:c3:c7:f2:8f:04:43:87:c5:
                    54:0f:56:d1:fa:6b:9d:da:26:2c:be:03:c8:a0:11:
                    7d:81:21:cb:58:79:39:85:3f:7e:32:14:36:fc:5a:
                    36:87:ef:eb:27:5d:8d:1b:bc:1a:36:af:f7:23:8f:
                    3c:a4:ba:27:b0:62:fe:7a:60:5a:ad:79:3c:fd:01:
                    c6:35:a9:19:93:ce:95:d2:53:70:8f:ad:f8:84:2e:
                    c7:1c:d6:f5:3c:6f:c5:45:d4:12:1b:80:57:50:b1:
                    8f:e5:63:2a:0e:86:49:c2:53:30:32:17:f5:10:10:
                    75:2d:91:c4:06:2a:5a:7c:b7:40:08:60:33:26:bf:
                    4e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:98:07:B1:CC:1C:9C:F4:1E:7E:D1:A5:9D:EF:BA:42:1B:A1:02:12
            X509v3 Authority Key Identifier:
                keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/d5gHscwcnPQeftGlne-6QhuhAhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:38:0e:0d:62:df:5f:7f:29:48:34:c4:b5:23:8a:8d:11:d5:
         70:a3:fa:ea:a3:25:68:3d:f0:08:e7:6a:b9:53:b8:79:07:52:
         78:27:48:5a:ca:9e:00:69:0d:dc:b6:98:e8:b5:60:5f:d7:b3:
         24:19:3b:66:47:9b:55:12:f4:17:11:e3:b3:bc:6a:8e:24:02:
         f4:11:7e:04:9a:c1:07:17:f5:5c:77:40:12:6f:66:e2:63:2b:
         55:c7:e1:4a:6d:9a:18:3f:f6:8d:be:81:2a:2f:83:3c:a9:27:
         ba:89:e7:cb:39:dc:25:27:54:78:58:3d:79:25:f9:70:93:55:
         52:47:1c:7a:5f:47:fd:52:b5:9a:97:11:00:fc:2f:2c:68:ab:
         6a:5b:e9:8b:0f:ed:82:f9:53:85:c3:bd:a1:d0:9f:02:4b:73:
         b0:44:74:d5:b2:1e:65:77:58:7f:8f:7c:24:9a:3c:c1:c0:e4:
         39:05:76:ee:c7:5e:11:bf:2e:d5:31:0e:57:a3:06:d0:48:d4:
         d2:60:d2:d0:20:87:25:ff:69:43:9c:a7:75:b0:49:bc:46:b9:
         86:e7:ce:a5:78:6f:65:3c:e6:28:e1:d7:70:ff:c9:da:a3:16:
         b2:b4:18:26:c8:22:1c:a4:8d:b1:7b:7d:be:5f:6a:28:17:b9:
         c7:e3:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org