Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/hm0RHMiBwGICx_7wihznlvSnhXE.roa
File:                     hm0RHMiBwGICx_7wihznlvSnhXE.roa (raw, json)
Hash identifier:          2ofF77nUdcLP89MXJn77V062eo4kHD0Tc+krupeHe38=
Subject key identifier:   86:6D:11:1C:C8:81:C0:62:02:C7:FE:F0:8A:1C:E7:96:F4:A7:85:71
Certificate issuer:       /CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Certificate serial:       04913B5C
Authority key identifier: 6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/hm0RHMiBwGICx_7wihznlvSnhXE.roa
Signing time:             Sat 01 Jan 2022 10:55:05 +0000
ROA not before:           Sat 01 Jan 2022 10:55:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16235
IP address blocks:        194.9.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76626780 (0x4913b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
        Validity
            Not Before: Jan  1 10:55:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=866d111cc881c06202c7fef08a1ce796f4a78571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:57:a9:8f:60:e4:63:b9:d0:77:5a:a1:ee:
                    a5:d9:4f:8e:50:d8:25:99:ad:89:9c:f2:84:a8:ef:
                    01:29:07:63:6d:9c:bb:1c:71:b9:43:37:2b:96:34:
                    f1:af:5a:1c:b1:b7:d9:e6:bc:55:02:2d:de:a2:84:
                    98:0f:5f:60:36:ff:9b:55:99:b5:85:70:1f:c7:21:
                    92:d6:23:77:4d:d1:4a:c1:52:e7:e4:88:01:f7:e8:
                    41:c8:e8:9f:83:8b:19:e1:27:c5:4a:05:66:4a:f6:
                    d5:9a:bd:9c:fe:63:6c:ac:c0:eb:07:4e:f4:e6:73:
                    85:61:8a:fa:02:44:2e:af:69:85:0e:9e:50:b2:81:
                    ef:a7:aa:cc:1c:bc:ce:a7:07:bf:39:92:b5:67:6f:
                    f2:5a:02:f7:f2:0e:b8:ce:15:d4:22:ca:4b:22:e8:
                    0b:20:13:c7:dd:6f:a4:93:44:ab:80:eb:fc:e2:8f:
                    23:5a:33:af:7a:46:62:7b:29:a6:7c:7b:54:1a:78:
                    64:ed:a3:b6:7d:a0:64:d4:48:5b:91:9b:4f:e0:51:
                    9a:5d:9b:44:0f:6b:5d:21:1f:55:e7:16:e3:3c:0c:
                    03:d1:cf:5e:d5:9e:87:cc:ad:ba:b4:38:76:a0:05:
                    2e:7c:cd:c2:aa:cf:e6:f7:59:31:23:5c:12:aa:f1:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6D:11:1C:C8:81:C0:62:02:C7:FE:F0:8A:1C:E7:96:F4:A7:85:71
            X509v3 Authority Key Identifier:
                keyid:6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/hm0RHMiBwGICx_7wihznlvSnhXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:ed:45:e0:91:cf:44:0d:82:dd:28:06:5b:10:16:ce:2a:
         58:52:db:3b:17:dc:22:b0:3b:02:37:6a:d9:5e:5d:6c:97:bd:
         e0:63:d1:82:52:ef:fe:21:f3:9f:87:7e:ce:d2:65:9f:29:24:
         69:b7:ba:ae:c6:28:c4:f7:c8:e5:66:5b:96:8d:e6:df:f6:6c:
         49:43:a8:c6:38:a1:d6:56:a9:83:0b:1c:9e:f4:20:f5:18:6a:
         c1:18:f0:1d:51:22:3d:3f:35:de:07:4e:81:7a:10:18:98:ef:
         0d:f2:d6:4d:8e:2a:5f:26:bf:17:90:e2:56:da:62:4c:cb:fc:
         f8:c6:a3:49:b9:00:72:63:97:db:92:b4:5a:10:29:74:ec:00:
         2e:29:0b:5b:ec:a7:eb:0c:ac:88:5c:de:59:43:e8:5f:a2:d6:
         94:c0:33:53:77:5b:50:74:2e:80:15:68:61:6d:c8:45:c1:8a:
         45:76:be:2f:20:98:74:2a:ff:0d:b7:fd:d4:03:56:ab:d5:54:
         3e:94:6c:73:76:33:8a:fe:23:d9:be:6e:25:04:d7:fb:f4:d4:
         08:e8:48:50:51:df:40:c8:b0:d2:4c:8d:dd:c7:e7:40:05:84:
         9a:52:0d:5a:8e:fa:a9:6f:a3:02:92:4e:eb:93:a2:47:ca:62:
         b9:de:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org