Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/OwqyhI2FYZn11zpXtPC988l4Wwc.roa
File:                     OwqyhI2FYZn11zpXtPC988l4Wwc.roa (raw, json)
Hash identifier:          lgICtiDlqGKD4ZqTcsgQTBTpI+L+BGbrR1iQeAzkrAU=
Subject key identifier:   3B:0A:B2:84:8D:85:61:99:F5:D7:3A:57:B4:F0:BD:F3:C9:78:5B:07
Certificate issuer:       /CN=c1bd4614506868ecbdd896e2cd4bb2ad5d3cb41f
Certificate serial:       5B39D0
Authority key identifier: C1:BD:46:14:50:68:68:EC:BD:D8:96:E2:CD:4B:B2:AD:5D:3C:B4:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb1GFFBoaOy92JbizUuyrV08tB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/OwqyhI2FYZn11zpXtPC988l4Wwc.roa
Signing time:             Sat 01 Jan 2022 00:51:44 +0000
ROA not before:           Sat 01 Jan 2022 00:51:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202448
IP address blocks:        194.26.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5978576 (0x5b39d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bd4614506868ecbdd896e2cd4bb2ad5d3cb41f
        Validity
            Not Before: Jan  1 00:51:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b0ab2848d856199f5d73a57b4f0bdf3c9785b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:68:b2:94:83:88:fc:a0:e0:ec:30:cd:fa:
                    0e:c7:4c:9f:bd:b4:f4:43:6a:0a:22:d1:c9:8d:4e:
                    a6:6f:6b:ff:96:1c:9c:08:9c:a6:ec:99:78:77:8c:
                    9e:90:42:dc:d7:b7:6f:20:31:9c:58:28:0d:21:c7:
                    24:f1:10:1a:2f:19:98:a3:31:da:8c:1b:54:73:81:
                    65:99:82:4d:c2:ca:b1:a1:a5:21:59:10:87:6b:21:
                    9b:35:e0:eb:55:d9:f7:3f:f9:10:32:ce:4e:18:e0:
                    17:c7:8d:c2:ef:d3:f9:79:34:be:23:61:e8:a2:49:
                    04:f4:a8:86:0a:2c:1e:00:23:a3:47:53:03:03:f4:
                    32:3c:b4:01:53:b7:5f:25:0a:0c:ca:84:5f:0c:bf:
                    1d:49:b0:7b:4c:07:da:e1:9a:3b:ef:5d:b7:85:3a:
                    d0:74:21:f9:03:5b:8f:ce:3f:30:99:80:2f:b4:c3:
                    d7:8b:03:0d:7a:b2:cf:9b:bc:f2:b2:f7:1f:47:cd:
                    9f:73:3e:e5:42:83:93:7d:ff:41:75:86:67:d5:3e:
                    6d:5c:79:9d:02:98:df:28:5b:9c:3f:a4:e4:3e:5b:
                    ca:9b:05:1b:63:dd:cc:45:b7:6b:2c:39:ce:fe:71:
                    35:08:1b:b6:d1:e9:3c:79:52:ad:17:77:67:c9:b6:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0A:B2:84:8D:85:61:99:F5:D7:3A:57:B4:F0:BD:F3:C9:78:5B:07
            X509v3 Authority Key Identifier:
                keyid:C1:BD:46:14:50:68:68:EC:BD:D8:96:E2:CD:4B:B2:AD:5D:3C:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb1GFFBoaOy92JbizUuyrV08tB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/OwqyhI2FYZn11zpXtPC988l4Wwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f384ec-3b16-4558-8ffb-df8460574b15/1/wb1GFFBoaOy92JbizUuyrV08tB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:79:95:a7:60:92:9c:0d:f2:a7:6c:02:5c:ba:85:ac:71:aa:
         56:84:c7:37:83:e4:a7:40:ec:da:4f:78:93:96:99:35:95:70:
         0d:65:b2:3d:26:bf:9e:49:0c:84:f0:63:21:d2:bb:f6:75:0f:
         36:af:c9:14:a0:97:e0:6e:fe:ad:ef:d4:61:4e:65:d7:04:fb:
         12:43:b9:c0:9e:a3:93:67:a0:08:fc:34:4e:d0:82:15:f1:20:
         63:cd:a9:0e:eb:fe:72:68:9f:01:b3:69:0f:3b:96:93:a4:11:
         89:10:33:9a:a3:5b:4a:ac:6a:7c:42:f8:8a:f8:70:45:56:c7:
         42:72:5e:0a:1d:0a:6b:be:ec:4d:c7:14:39:ec:85:33:2b:8e:
         d1:33:d1:24:ed:93:8e:c6:d8:4a:6c:fc:72:5e:db:a6:ce:4a:
         91:46:a0:6a:08:cc:fc:38:ea:2a:1a:35:6f:61:60:c8:c8:31:
         95:2f:2b:32:a3:79:3f:0e:9c:60:83:64:eb:df:c2:fb:27:17:
         16:b9:f9:54:8c:23:29:30:eb:d7:77:68:0c:43:52:84:5f:b9:
         f9:75:50:c3:2a:b5:cf:ce:c2:29:12:45:f7:74:f0:c2:00:6a:
         6e:a9:fc:76:cb:7b:bf:99:d9:c7:c0:24:2a:5c:e3:8d:ce:bd:
         d5:5f:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:15 2024 by rpki-client on console-ams.rpki-client.org