Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/608c77-b7f0-4573-982f-a71112095d25/1/Eaaio-efAuJOouSg-7OlYKUyvTw.roa
File:                     Eaaio-efAuJOouSg-7OlYKUyvTw.roa (raw, json)
Hash identifier:          0VbKoYqahjuFlhfC6z3CU7TUAlJhTQOWPLIMYrUIZtM=
Subject key identifier:   11:A6:A2:A3:E7:9F:02:E2:4E:A2:E4:A0:FB:B3:A5:60:A5:32:BD:3C
Certificate issuer:       /CN=07a21316087f76149d367f7beb64a3fbcbb79a7c
Certificate serial:       19F312B7
Authority key identifier: 07:A2:13:16:08:7F:76:14:9D:36:7F:7B:EB:64:A3:FB:CB:B7:9A:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ITFgh_dhSdNn9762Sj-8u3mnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/608c77-b7f0-4573-982f-a71112095d25/1/Eaaio-efAuJOouSg-7OlYKUyvTw.roa
Signing time:             Sat 01 Jan 2022 06:00:57 +0000
ROA not before:           Sat 01 Jan 2022 06:00:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47622
IP address blocks:        91.246.26.0/23 maxlen: 24
                          185.169.120.0/22 maxlen: 24
                          5.199.0.0/17 maxlen: 24
                          212.74.32.0/19 maxlen: 24
                          2a00:17f8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435360439 (0x19f312b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a21316087f76149d367f7beb64a3fbcbb79a7c
        Validity
            Not Before: Jan  1 06:00:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11a6a2a3e79f02e24ea2e4a0fbb3a560a532bd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:5c:a8:f3:4e:88:21:2a:7e:44:24:7e:7d:
                    aa:48:7a:ae:57:9c:eb:a9:dc:5e:c6:57:ad:e9:a6:
                    e9:8c:06:34:04:d5:39:ee:f9:c8:2d:7c:00:ed:f5:
                    38:32:cd:ef:48:e3:2e:d8:d4:3e:a9:df:3c:ed:21:
                    a3:a9:b9:05:61:9a:3e:7e:dd:57:ba:19:14:db:b2:
                    dd:e6:0c:d9:a8:4a:db:23:a0:af:2f:3e:eb:a4:12:
                    90:c0:4b:9d:69:37:16:56:69:26:12:83:21:61:a3:
                    18:23:57:80:03:46:1b:c4:9a:fd:29:f5:74:a1:e7:
                    70:2d:77:a0:e7:6e:c8:3e:08:55:ba:16:e2:2a:ea:
                    7d:88:ee:e2:42:96:b2:ba:9d:d1:50:19:0e:d9:1a:
                    8d:00:8a:d3:84:89:ec:53:1a:ff:e5:6c:70:52:89:
                    ee:c1:47:c6:4d:65:ed:d9:16:6e:c5:56:2f:65:29:
                    98:d3:69:32:cd:ad:7d:ff:13:c3:72:92:b4:b6:91:
                    a6:35:42:e2:f5:ef:a4:1d:50:c9:c0:18:2b:83:da:
                    7c:e8:2f:41:05:7f:2c:28:8d:f1:8a:8f:ec:59:ae:
                    20:48:5e:f4:f3:08:f0:40:18:e0:62:a9:e0:87:a0:
                    7e:48:a0:03:c5:d5:f2:ff:b6:10:21:e4:0e:38:37:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:A2:A3:E7:9F:02:E2:4E:A2:E4:A0:FB:B3:A5:60:A5:32:BD:3C
            X509v3 Authority Key Identifier:
                keyid:07:A2:13:16:08:7F:76:14:9D:36:7F:7B:EB:64:A3:FB:CB:B7:9A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ITFgh_dhSdNn9762Sj-8u3mnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/608c77-b7f0-4573-982f-a71112095d25/1/Eaaio-efAuJOouSg-7OlYKUyvTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/608c77-b7f0-4573-982f-a71112095d25/1/B6ITFgh_dhSdNn9762Sj-8u3mnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.199.0.0/17
                  91.246.26.0/23
                  185.169.120.0/22
                  212.74.32.0/19
                IPv6:
                  2a00:17f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:46:84:54:53:29:5f:18:36:d5:5e:c1:f5:f5:40:0c:4f:f8:
         60:b2:c4:7d:4c:98:a5:60:af:fe:04:cc:7c:27:00:28:6b:90:
         73:ae:03:89:d7:2d:6d:93:30:5c:62:c3:66:1c:e3:b9:e6:2f:
         82:bc:15:88:f8:50:97:e4:28:b8:f0:3b:a4:69:3e:49:9f:8b:
         68:ba:d0:8b:16:8e:10:9b:ea:9b:d6:bb:17:9c:ed:5d:c1:b4:
         8c:db:dd:83:0b:67:0b:c2:29:a3:1e:72:7a:3a:b5:91:65:08:
         f2:fa:c7:a2:4b:9b:1e:46:68:c7:54:cd:b6:64:5a:cb:9d:2f:
         00:04:7c:51:08:fa:36:e3:28:8d:7d:e7:19:ed:ab:9c:86:37:
         b7:91:9a:0e:85:9e:ff:2d:54:b5:4d:e7:8d:f0:17:ee:32:02:
         1c:a3:c6:8a:b4:07:f8:4f:1c:28:55:f7:49:14:fd:b5:35:d9:
         2c:ad:b8:70:f2:ac:c0:94:99:7f:bf:36:2a:c7:60:d2:46:2a:
         9f:3c:3f:26:54:2b:1b:a3:1e:87:60:1c:68:3d:43:a2:c2:ac:
         d8:b0:45:6e:9f:84:20:30:b8:09:f8:4d:05:50:6f:0e:1d:c6:
         eb:67:e0:a3:8e:54:5f:8c:e3:1f:1a:4c:9b:bf:66:76:ba:15:
         96:38:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:55 2024 by rpki-client on console-fra.rpki-client.org