Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/BIzHttvR8wyvNzjssEffIblBeLE.roa
File:                     BIzHttvR8wyvNzjssEffIblBeLE.roa (raw, json)
Hash identifier:          2RM3JWw28Bev6Lo8flJ+W7xpfayoaJkesw8OPCHvvJA=
Subject key identifier:   04:8C:C7:B6:DB:D1:F3:0C:AF:37:38:EC:B0:47:DF:21:B9:41:78:B1
Certificate issuer:       /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial:       013A4C0E
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/BIzHttvR8wyvNzjssEffIblBeLE.roa
Signing time:             Sun 29 May 2022 10:49:15 +0000
ROA not before:           Sun 29 May 2022 10:49:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212921
IP address blocks:        2.59.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20597774 (0x13a4c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
        Validity
            Not Before: May 29 10:49:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=048cc7b6dbd1f30caf3738ecb047df21b94178b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:77:0c:3f:cc:74:4b:77:01:0c:aa:86:59:
                    a3:b7:b0:26:65:ba:24:bb:f6:67:cb:31:8c:c7:f9:
                    6e:5b:76:cd:16:62:ff:a7:b3:a4:84:cb:2a:45:ad:
                    86:52:aa:6f:64:0a:fd:df:da:d9:42:f4:a5:5e:47:
                    b6:03:8a:6a:ef:73:f2:8f:be:e3:0c:0d:0b:02:e3:
                    6c:9f:65:6d:a2:94:22:04:05:6d:af:15:1f:a7:a5:
                    8f:a0:35:1f:e9:df:d9:65:ed:58:2f:0d:f5:52:31:
                    b7:1e:ef:fd:48:df:8b:dc:8e:6a:58:ce:9f:01:01:
                    e6:61:df:89:b2:a6:20:e7:ac:91:f2:91:d6:fc:c6:
                    0b:26:34:5b:36:56:c8:5b:71:7d:c2:97:aa:85:da:
                    78:b3:cc:e5:22:0b:9d:ec:1a:4b:ad:14:43:23:f8:
                    84:5e:8b:30:1d:d4:1b:d8:e3:5d:68:c5:fd:81:c3:
                    2e:30:59:48:21:fc:65:50:8d:9e:ca:0b:82:d1:61:
                    cf:0f:b9:e3:9c:0c:43:b5:71:fa:d5:e3:b1:b3:88:
                    c4:7a:cc:29:aa:8f:a3:ad:c2:db:65:80:41:1d:b3:
                    a8:d7:ef:c3:3e:34:28:b1:85:c8:76:28:a4:e4:bc:
                    e2:30:13:e0:9f:f4:35:da:8d:13:c0:39:84:98:ce:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8C:C7:B6:DB:D1:F3:0C:AF:37:38:EC:B0:47:DF:21:B9:41:78:B1
            X509v3 Authority Key Identifier:
                keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/BIzHttvR8wyvNzjssEffIblBeLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:05:32:f1:36:eb:14:c8:98:d9:5f:76:7e:ba:b0:16:bc:
         c1:b5:a9:87:15:f7:fd:4b:53:6e:49:e3:1c:12:56:08:82:bf:
         90:d2:bc:a0:97:00:80:de:8c:cd:16:12:f4:f4:bc:d8:0a:f1:
         8b:a4:e9:da:bf:80:4c:e2:40:95:bf:56:c6:eb:83:4f:a8:d6:
         df:2e:fa:f0:dc:c1:6b:f7:18:fd:36:bd:f8:a0:ef:c1:3c:53:
         84:63:3f:b3:19:4e:e6:a4:95:a7:b2:cf:28:ce:32:c6:59:ab:
         e9:9c:78:a2:6b:18:d1:44:eb:83:14:46:53:3c:10:57:4d:86:
         ca:5a:56:f5:ca:28:d2:89:21:6b:93:41:d1:9b:48:e3:11:40:
         14:aa:26:e5:97:de:9f:23:11:d6:6c:7a:53:f0:48:cf:fc:65:
         7b:66:45:87:25:71:46:1e:cf:fa:46:a5:4d:de:50:7e:30:74:
         c6:ab:48:37:36:75:ca:bb:14:50:e6:e3:76:12:06:0f:0b:b2:
         89:b3:31:58:28:f2:65:fc:52:1e:75:da:31:ff:63:d6:dc:45:
         e6:e0:a6:c2:c5:1b:33:3b:c4:12:06:be:72:c3:38:b9:15:cb:
         61:ab:eb:3d:61:88:97:b8:61:bc:26:4c:73:52:a0:d7:72:9e:
         69:76:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org