Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/1-AMq51Kly9lrKsfJQmEgYHLQV1A.roa
File:                     1-AMq51Kly9lrKsfJQmEgYHLQV1A.roa (raw, json)
Hash identifier:          A0M1JFrsuiRJW9VZI2XWrs+9LqvPpfhOL91cwgDKhyU=
Subject key identifier:   F8:03:2A:E7:52:A5:CB:D9:6B:2A:C7:C9:42:61:20:60:72:D0:57:50
Certificate issuer:       /CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Certificate serial:       901433
Authority key identifier: B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/1-AMq51Kly9lrKsfJQmEgYHLQV1A.roa
Signing time:             Sat 01 Jan 2022 01:51:35 +0000
ROA not before:           Sat 01 Jan 2022 01:51:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        194.26.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9442355 (0x901433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
        Validity
            Not Before: Jan  1 01:51:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8032ae752a5cbd96b2ac7c94261206072d05750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:51:02:4f:24:ea:2d:bc:fa:c6:7b:20:22:
                    fb:bb:5e:f8:4a:b2:29:35:83:12:b7:21:79:bf:50:
                    b7:fc:a1:61:f8:ae:a9:96:7b:c0:ab:e0:db:54:44:
                    21:87:9c:26:aa:45:00:e1:11:11:e2:56:9c:35:38:
                    e1:ef:55:e8:93:4b:f7:b8:0e:84:85:cb:d6:83:ca:
                    a5:84:88:8b:a0:6e:f2:3d:59:44:f7:d4:d0:93:ef:
                    4a:65:6a:f9:e8:fc:1a:c0:1c:a6:ef:7d:08:f1:12:
                    14:69:21:fd:df:e4:55:c3:6a:91:7c:7f:c3:9a:a8:
                    37:81:bb:9e:0e:35:3b:7d:77:98:07:b9:50:6d:b0:
                    a8:c7:2f:08:3c:49:ba:b2:b9:a6:5b:4a:12:66:cf:
                    f2:31:43:6d:9c:25:5d:90:ff:a2:ae:53:80:dd:0d:
                    fb:cf:54:1f:eb:05:c0:bd:ba:36:84:52:fa:be:14:
                    55:35:28:40:61:e5:ad:ac:14:26:44:2f:08:09:c5:
                    97:7a:40:14:44:79:6c:92:4a:6b:82:b9:e2:9a:b9:
                    66:6c:0b:ed:49:dc:c5:0c:8c:6f:85:45:3b:34:85:
                    bb:f0:db:84:eb:3b:5f:41:ac:00:19:dc:48:8d:71:
                    70:92:2b:b5:0a:51:06:1d:ee:95:02:1d:b5:44:3a:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:2A:E7:52:A5:CB:D9:6B:2A:C7:C9:42:61:20:60:72:D0:57:50
            X509v3 Authority Key Identifier:
                keyid:B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/1-AMq51Kly9lrKsfJQmEgYHLQV1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/s-_qOnL68N9DIs2quaE2153oo-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:e1:c3:db:ae:39:5b:ee:1d:3d:0d:64:e3:8a:9e:39:5e:
         f7:08:dd:bd:2d:ba:03:bc:ee:d9:c3:e4:d2:5d:26:27:9c:dd:
         80:84:2e:e7:bf:ae:6e:6b:d0:1c:7e:80:4b:65:20:40:71:8b:
         12:33:f7:a7:28:6e:93:4d:5b:d0:ce:83:0c:c5:b0:fb:89:8d:
         85:50:02:ae:65:c9:c0:05:52:26:75:8c:2f:98:c4:d8:85:b8:
         67:7c:bb:44:5e:12:17:7f:5a:01:39:f4:ca:e5:75:0e:0f:0c:
         a5:7d:03:bc:c1:38:c0:77:a0:d2:75:58:0a:6b:b3:fb:8c:96:
         fc:6f:cb:67:d2:8d:c8:30:ef:29:b2:62:4f:72:5e:56:3a:14:
         59:e6:79:91:98:43:fe:f0:fa:22:53:5d:a7:42:4d:88:ec:83:
         90:c5:15:81:fd:d0:9a:7f:f4:dd:89:3b:9a:08:63:49:ef:22:
         dd:7b:0e:42:73:67:2c:db:5c:63:91:32:1a:d1:4f:6e:9e:04:
         0b:d8:f5:af:6f:7d:b4:26:3e:ab:88:fb:23:32:d9:e1:a3:5d:
         ad:e0:0b:bd:b6:5e:84:ef:fc:7d:35:46:1c:5e:87:01:aa:f4:
         50:de:85:60:01:e2:96:12:26:49:d5:93:67:4b:d2:bc:38:b8:
         0e:b9:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org