Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/N8ETInNRV9IWJSLdgE8UETazPY8.roa
File:                     N8ETInNRV9IWJSLdgE8UETazPY8.roa (raw, json)
Hash identifier:          OOapCgIoaVPw9lFwLDuhOitFdVWquIiW8sv2XSxYn4E=
Subject key identifier:   37:C1:13:22:73:51:57:D2:16:25:22:DD:80:4F:14:11:36:B3:3D:8F
Certificate issuer:       /CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Certificate serial:       0182207DB3E4A39E3493F099D32808A5AA71
Authority key identifier: D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/N8ETInNRV9IWJSLdgE8UETazPY8.roa
Signing time:             Thu 21 Jul 2022 11:21:25 +0000
ROA not before:           Thu 21 Jul 2022 11:21:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        176.97.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:7d:b3:e4:a3:9e:34:93:f0:99:d3:28:08:a5:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
        Validity
            Not Before: Jul 21 11:21:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37c11322735157d2162522dd804f141136b33d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b6:1f:96:74:64:cb:12:c1:7b:d7:12:49:ab:
                    c5:c9:b6:41:bd:3d:5d:18:45:1a:ea:da:7a:49:3f:
                    80:d3:d4:92:fc:7f:3d:ef:57:71:45:5f:79:32:99:
                    6c:91:c3:1e:4b:4b:5e:39:c1:14:81:8a:97:66:e4:
                    30:0e:96:e7:f2:1b:a6:21:e6:7e:3b:9f:e1:82:ca:
                    4f:29:c9:6b:d7:ed:6c:d8:4d:7c:a2:a5:02:dd:c8:
                    69:b1:f4:44:19:d6:02:6a:70:87:b4:2b:bd:51:29:
                    e2:af:4d:00:13:a2:03:ad:1e:6c:7e:d8:7c:ed:cf:
                    fe:e1:2a:33:63:e8:41:ac:10:db:6a:b7:19:54:8b:
                    52:53:69:92:32:2b:1d:2b:b5:bb:12:20:a6:a0:db:
                    e7:f4:6d:bd:d9:ce:48:5c:7f:58:a4:5a:77:be:75:
                    48:55:24:1b:b0:63:b1:96:18:f4:0f:26:53:14:dc:
                    e0:e6:98:98:85:a2:48:9b:64:b3:8b:83:79:63:4f:
                    48:a4:58:bb:8d:98:dd:f4:f7:73:b5:41:bd:38:61:
                    bf:af:b1:d2:b9:a7:3b:d7:50:97:5b:93:73:7e:c7:
                    6e:8f:65:8e:be:38:11:92:ca:a9:38:0d:21:41:5b:
                    22:90:b3:33:10:00:2b:35:b1:73:07:5c:02:1a:f0:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C1:13:22:73:51:57:D2:16:25:22:DD:80:4F:14:11:36:B3:3D:8F
            X509v3 Authority Key Identifier:
                keyid:D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/N8ETInNRV9IWJSLdgE8UETazPY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:da:39:f8:a9:6d:5a:cd:08:4a:e0:c6:80:89:c4:6d:15:
         0f:34:d3:7b:65:d0:e1:21:10:53:e0:31:9b:16:2b:09:8c:73:
         44:6f:81:f7:91:33:d1:cc:f1:b4:28:55:d7:ff:70:06:95:5d:
         49:f9:c9:7e:3d:a3:5d:b1:7d:10:e6:9e:39:43:30:c5:97:62:
         d1:a1:da:3a:76:65:84:fe:3b:5e:6d:cb:5e:91:e6:71:82:3f:
         03:37:f1:15:33:78:57:ae:3c:c2:c4:36:a4:f1:d8:2f:9a:52:
         2a:42:e0:b7:b6:8e:e1:74:90:37:5a:3f:4c:6a:79:57:4d:64:
         18:6d:ac:2c:c8:cf:52:b0:13:7d:64:09:4b:72:39:a3:79:8c:
         73:f8:ff:cc:33:65:8e:f1:5c:17:47:4a:72:56:c3:25:10:3f:
         3e:b0:9e:62:0a:9c:85:4a:32:d1:48:cf:56:50:6e:88:ee:57:
         78:60:30:cc:71:ef:3e:6b:24:51:af:d4:2c:8b:bb:e8:79:d5:
         77:01:6a:8a:0c:a5:14:0f:08:25:fc:6e:3e:61:31:0e:be:e7:
         a3:97:6e:b0:09:53:90:02:6b:6e:82:81:20:b0:f2:48:f1:09:
         37:4b:52:28:02:be:e8:ae:2a:f2:10:31:e9:fc:0d:80:0c:19:
         74:16:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:38 2024 by rpki-client on console-fra.rpki-client.org