Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/1-CP50QDgoBFU3J3nIt-z5m-h9qA.roa
File:                     1-CP50QDgoBFU3J3nIt-z5m-h9qA.roa (raw, json)
Hash identifier:          KgCbQjw/tzvTymmOczBt1FCsNR0fI4WW7rHJBAxOOMw=
Subject key identifier:   F8:23:F9:D1:00:E0:A0:11:54:DC:9D:E7:22:DF:B3:E6:6F:A1:F6:A0
Certificate issuer:       /CN=f454851d2627dc81c894c54f46e233a24fad1600
Certificate serial:       0181ECEE5002C248C9CC9AFD6DDAB1EB4704
Authority key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/1-CP50QDgoBFU3J3nIt-z5m-h9qA.roa
Signing time:             Mon 11 Jul 2022 11:04:09 +0000
ROA not before:           Mon 11 Jul 2022 11:04:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50267
IP address blocks:        212.46.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ec:ee:50:02:c2:48:c9:cc:9a:fd:6d:da:b1:eb:47:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f454851d2627dc81c894c54f46e233a24fad1600
        Validity
            Not Before: Jul 11 11:04:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f823f9d100e0a01154dc9de722dfb3e66fa1f6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:d2:fd:67:e0:d0:cd:8f:08:e7:4c:54:61:
                    76:4a:40:a1:db:17:e3:2a:c0:0e:b2:2f:b7:59:06:
                    04:09:e4:db:e1:07:80:a7:4d:d1:f5:80:e4:cc:2d:
                    01:d1:ae:d4:9a:02:22:e6:1b:29:8d:55:49:9b:d7:
                    e8:ed:65:86:13:1d:aa:7b:23:b0:dc:81:e8:46:eb:
                    3c:50:f5:60:81:bc:33:48:d5:90:14:ac:d4:80:c0:
                    65:ec:8b:e1:4e:5a:16:45:12:10:6a:ae:0e:99:dc:
                    e3:0a:c2:1b:22:0b:76:7f:71:fb:c8:d8:02:0f:b8:
                    0e:05:8f:ac:7f:de:ea:3b:31:4a:a8:c6:f6:dc:3f:
                    25:6c:3b:87:f6:72:e9:8a:59:71:a4:c1:20:c8:67:
                    15:cb:22:d5:b5:60:35:b7:24:b7:28:d3:8d:25:88:
                    4d:b1:2c:76:01:af:48:7f:69:91:f0:11:c3:d4:e8:
                    71:74:9f:55:73:72:92:2c:32:fe:e1:f5:c1:2e:23:
                    a6:a5:bf:29:3c:ba:cc:57:51:3c:f1:72:e2:78:87:
                    91:3b:b2:1d:54:d6:23:4a:b2:03:85:19:07:17:3b:
                    4f:41:d6:73:46:d2:97:cc:75:f3:eb:56:d7:70:26:
                    0e:2d:7e:7c:5e:3b:7a:32:3a:9a:83:aa:72:a3:c6:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:F9:D1:00:E0:A0:11:54:DC:9D:E7:22:DF:B3:E6:6F:A1:F6:A0
            X509v3 Authority Key Identifier:
                keyid:F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/1-CP50QDgoBFU3J3nIt-z5m-h9qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:26:7a:2f:fc:0e:b2:00:d2:67:a9:9c:98:32:88:39:84:b8:
         75:8e:3c:c0:57:37:5c:0a:fe:94:09:08:a0:1b:1f:ce:26:fe:
         0a:02:54:8f:4b:3c:b3:8a:66:08:e4:2c:38:62:08:aa:0a:a1:
         85:85:99:10:0e:e6:16:e1:d7:92:9d:3f:18:1e:5d:d7:da:86:
         1f:45:b9:9c:ed:91:7e:7d:f3:f4:80:fb:7a:01:6f:53:ac:78:
         f8:41:37:a0:6a:83:ef:28:fb:3e:ab:ea:e6:5a:94:41:0e:68:
         c8:1b:78:4f:e0:01:d4:04:a6:b4:12:95:0a:0f:5e:ef:f9:2b:
         d8:e6:ac:a9:b8:79:03:32:49:11:07:a4:95:0f:e5:aa:4f:6f:
         2b:87:e6:3a:06:47:7b:c4:5a:6f:1b:d7:a8:85:25:b6:42:77:
         60:c5:8b:3a:22:63:fb:d2:ce:45:28:ce:3e:22:cf:53:77:da:
         02:1e:26:3b:b0:42:cb:b7:8b:73:59:09:86:ca:b9:08:34:4f:
         bd:b1:f8:47:60:c1:d3:45:dd:70:cd:e9:2f:e4:fe:67:9b:ad:
         f1:ab:46:e3:ac:e0:37:ef:12:88:5e:1f:e6:1e:ac:62:b5:ca:
         92:f3:bf:ae:91:a3:4d:d0:96:27:3e:ec:fe:9a:15:34:e8:93:
         fe:2d:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:45 2024 by rpki-client on console-fra.rpki-client.org