Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/CCaa0XV-d2ZjQDXC3dyLjHDKMCU.roa
File:                     CCaa0XV-d2ZjQDXC3dyLjHDKMCU.roa (raw, json)
Hash identifier:          Xh6wOKubUqnfKfsHzZlgtUgOoBoSt6Fkb0itnt/J5gU=
Subject key identifier:   08:26:9A:D1:75:7E:77:66:63:40:35:C2:DD:DC:8B:8C:70:CA:30:25
Certificate issuer:       /CN=b092deb02be4c37814b000e6681894c261a7cfd0
Certificate serial:       01821CFE4C8B14E5E9CD3C6BF52C68628562
Authority key identifier: B0:92:DE:B0:2B:E4:C3:78:14:B0:00:E6:68:18:94:C2:61:A7:CF:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJLesCvkw3gUsADmaBiUwmGnz9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/CCaa0XV-d2ZjQDXC3dyLjHDKMCU.roa
Signing time:             Wed 20 Jul 2022 19:03:23 +0000
ROA not before:           Wed 20 Jul 2022 19:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     996
IP address blocks:        80.71.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1c:fe:4c:8b:14:e5:e9:cd:3c:6b:f5:2c:68:62:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092deb02be4c37814b000e6681894c261a7cfd0
        Validity
            Not Before: Jul 20 19:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08269ad1757e7766634035c2dddc8b8c70ca3025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:2b:0f:bc:9e:2e:49:a6:8e:f3:db:01:e8:
                    4a:f4:b9:f5:8a:e8:09:55:96:5b:fb:f5:8d:41:8d:
                    26:86:a0:7b:3c:92:2a:bd:a2:53:47:b0:ea:93:91:
                    a3:81:17:f5:ac:2b:2c:aa:56:85:36:30:6f:98:ad:
                    f0:88:98:3a:68:b7:1b:ce:2e:d3:80:f8:13:7e:f2:
                    99:a0:53:52:4e:fb:f4:9d:1e:14:20:9b:af:7e:32:
                    1d:aa:1c:cd:2e:cd:16:e7:0b:26:b1:1f:63:aa:37:
                    73:40:98:36:1c:a0:f0:3c:01:12:5e:3b:a4:70:74:
                    86:a3:ab:bc:87:2f:ab:d7:f2:f2:cd:aa:aa:8b:36:
                    38:d5:93:4c:83:d0:fc:86:0c:57:2f:ae:4c:ca:d4:
                    72:56:4c:ae:e5:52:57:9d:78:28:e5:27:7e:c9:53:
                    de:fe:cd:5f:92:bd:df:4c:e7:1b:9f:ff:e2:01:ee:
                    f4:6f:6d:f6:ae:64:99:63:72:23:d1:52:9a:d4:17:
                    83:59:59:3c:4e:16:4f:9e:d9:05:c9:36:3a:d6:be:
                    07:58:30:cb:43:b9:c9:0e:e4:96:e1:29:6a:e4:19:
                    ca:38:37:d7:ea:e4:87:c7:2f:85:b6:e7:90:cd:5c:
                    f5:49:97:71:b9:a7:1e:db:0a:6e:68:28:33:fb:15:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:26:9A:D1:75:7E:77:66:63:40:35:C2:DD:DC:8B:8C:70:CA:30:25
            X509v3 Authority Key Identifier:
                keyid:B0:92:DE:B0:2B:E4:C3:78:14:B0:00:E6:68:18:94:C2:61:A7:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLesCvkw3gUsADmaBiUwmGnz9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/CCaa0XV-d2ZjQDXC3dyLjHDKMCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/sJLesCvkw3gUsADmaBiUwmGnz9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:c0:63:a1:01:41:52:95:21:82:b8:27:be:bc:ae:6b:72:3b:
         9f:42:ae:52:c8:dc:2e:39:cc:a7:ca:75:60:8f:21:8d:1f:53:
         ba:bc:fb:80:90:e8:e0:93:c6:0a:c2:8e:f7:57:e3:eb:8c:87:
         91:59:f0:d0:e2:f0:72:80:95:99:5f:01:af:60:b4:73:45:6e:
         e0:a1:4b:2d:22:2d:fe:cc:b7:be:b0:70:98:62:be:82:af:9e:
         6b:1c:bf:f7:df:62:2e:cd:a1:9b:35:2f:6b:d3:e4:90:09:6b:
         26:bf:05:bc:91:4a:7d:75:03:7e:ac:a7:72:e2:b5:44:67:7e:
         bf:ba:00:a7:f3:d3:1d:7c:6b:e9:37:c8:07:0b:59:d4:da:cf:
         7e:8a:d0:3d:4d:55:42:55:f5:02:ed:2a:5f:ea:79:8a:41:da:
         9f:1f:74:a5:13:0c:86:e6:a4:2b:80:dd:13:61:bc:1e:84:69:
         aa:a2:3e:a2:6d:c9:a2:8e:03:ea:8a:65:18:fb:83:24:62:da:
         30:c2:fb:1e:f9:17:42:22:a1:c8:14:25:57:d7:78:bc:23:ad:
         fd:4c:e7:d4:fa:a5:90:e7:e1:72:3f:23:d4:27:de:40:f1:38:
         4f:55:fe:1f:55:e2:1b:b1:8a:2f:86:2e:92:02:56:9f:c6:f0:
         44:ba:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:58 2024 by rpki-client on console-fra.rpki-client.org