Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Cqc3DtF_NtVyoidmsuJ7ixOT3n4.roa
File:                     Cqc3DtF_NtVyoidmsuJ7ixOT3n4.roa (raw, json)
Hash identifier:          4x6q9m3fH9DXIgMuwPSoZKWBOp5fh6ZLCVy5o4FVzwk=
Subject key identifier:   0A:A7:37:0E:D1:7F:36:D5:72:A2:27:66:B2:E2:7B:8B:13:93:DE:7E
Certificate issuer:       /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial:       27EFDCB3
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Cqc3DtF_NtVyoidmsuJ7ixOT3n4.roa
Signing time:             Sat 01 Jan 2022 13:00:26 +0000
ROA not before:           Sat 01 Jan 2022 13:00:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47206
IP address blocks:        188.224.0.0/17 maxlen: 17
                          93.182.192.0/18 maxlen: 18
                          2a00:e880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670031027 (0x27efdcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
        Validity
            Not Before: Jan  1 13:00:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0aa7370ed17f36d572a22766b2e27b8b1393de7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:ec:95:7b:ed:01:97:6e:ec:87:ce:b1:df:
                    f9:cc:07:26:c1:30:ae:9a:e9:0c:3d:b8:91:ce:e1:
                    31:89:03:1b:3a:3f:76:5a:ec:17:17:b5:6a:a3:be:
                    ee:41:15:17:7e:12:ad:03:0e:70:c4:0b:c9:c0:70:
                    ab:9b:43:f2:1b:ce:27:37:36:03:d5:03:d4:10:f3:
                    87:48:75:70:c8:e5:23:0b:66:8a:02:8d:9a:02:3a:
                    2b:fd:82:87:0c:ff:82:cd:3f:f0:44:8c:e5:36:82:
                    f0:89:ef:e1:b7:3c:3b:88:c9:98:63:ac:b4:96:17:
                    8a:4e:4d:70:71:14:60:d4:2f:d9:e2:16:e1:26:7e:
                    2d:55:25:1a:34:ec:4a:0e:e5:59:12:b2:8d:14:bb:
                    3e:cd:df:e8:34:fd:f6:b6:8e:e6:2b:fb:a9:b5:47:
                    ee:d5:05:80:97:55:b2:23:2e:04:2b:51:f2:55:42:
                    89:5c:29:fb:40:e7:d8:bd:56:f4:f3:85:6e:2e:99:
                    cf:d4:cf:d7:79:6b:25:e5:32:dc:7d:e6:6e:08:e6:
                    b9:99:b0:92:f8:73:bf:01:45:b4:f7:b9:c2:91:2b:
                    72:8a:b6:f3:0c:32:44:87:ce:b6:45:eb:e8:75:ad:
                    3f:04:73:39:e2:1b:04:8c:eb:34:fb:ab:eb:03:5b:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:37:0E:D1:7F:36:D5:72:A2:27:66:B2:E2:7B:8B:13:93:DE:7E
            X509v3 Authority Key Identifier:
                keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Cqc3DtF_NtVyoidmsuJ7ixOT3n4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.182.192.0/18
                  188.224.0.0/17
                IPv6:
                  2a00:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:10:bb:96:e4:f0:43:8d:bc:1e:86:e1:54:9b:d4:bb:e3:b2:
         ae:7e:94:c2:ac:97:9c:ce:63:3a:6b:6e:e0:94:16:99:ad:38:
         48:08:0e:2b:b8:f4:3e:e3:dc:90:e3:41:3a:3e:59:84:cd:99:
         a2:2c:5a:e0:70:95:d1:b2:32:bc:93:6d:a3:b6:72:92:dd:04:
         83:7f:3f:9b:99:33:95:d0:8d:cf:35:d5:56:db:8a:a5:76:19:
         3e:67:22:73:b9:b7:23:6e:7c:49:e5:57:2d:de:66:d1:f2:0a:
         c9:07:e9:fa:e0:7b:9a:7a:19:09:32:4d:35:84:82:0d:2b:b7:
         cc:29:c6:d0:f6:0c:cc:01:33:3e:44:e2:c2:29:3d:6c:8e:60:
         72:db:5b:06:f0:0a:a0:2b:67:88:7f:34:1a:21:7c:cc:98:57:
         6a:da:fd:00:c1:77:66:70:77:53:b0:97:68:26:90:b6:91:25:
         cb:55:74:63:e7:db:01:a0:f3:46:66:60:1e:38:14:10:ce:dc:
         d3:1e:b0:05:0f:27:0d:b5:77:14:af:9b:dd:51:12:71:34:c5:
         40:31:52:8d:ec:39:92:fc:2b:05:28:26:54:11:18:03:6d:c2:
         ef:4c:10:3d:2f:14:f6:6b:20:ed:f7:80:ca:f1:ee:05:28:9b:
         76:4d:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:53 2024 by rpki-client on console-ams.rpki-client.org