Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/nIllR9GkVEL0zcnsVtCYGWI_Ir0.roa
File:                     nIllR9GkVEL0zcnsVtCYGWI_Ir0.roa (raw, json)
Hash identifier:          1wwMYdtmbRjLNw3Y1RFklO38Q2EmghTDAb/qBGZjFrs=
Subject key identifier:   9C:89:65:47:D1:A4:54:42:F4:CD:C9:EC:56:D0:98:19:62:3F:22:BD
Certificate issuer:       /CN=cbec2487e97a699b5451a429e7dddaf295b523f1
Certificate serial:       031918
Authority key identifier: CB:EC:24:87:E9:7A:69:9B:54:51:A4:29:E7:DD:DA:F2:95:B5:23:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-wkh-l6aZtUUaQp593a8pW1I_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/nIllR9GkVEL0zcnsVtCYGWI_Ir0.roa
Signing time:             Mon 07 Feb 2022 07:52:46 +0000
ROA not before:           Mon 07 Feb 2022 07:52:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6453
IP address blocks:        176.98.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203032 (0x31918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec2487e97a699b5451a429e7dddaf295b523f1
        Validity
            Not Before: Feb  7 07:52:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c896547d1a45442f4cdc9ec56d09819623f22bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:ae:f4:d1:8a:0a:7d:c8:3c:07:01:bf:83:
                    29:ac:f8:a9:59:73:77:58:1d:1d:28:1d:0e:d0:30:
                    7e:43:8c:3d:36:d1:e5:7a:8c:ca:45:4b:08:19:71:
                    82:ec:76:6a:31:7b:a0:7e:09:5c:25:4d:88:e1:0a:
                    5b:5e:78:18:cb:14:72:78:b9:63:e6:9d:0d:9b:9c:
                    ec:8e:75:42:9e:8f:48:5f:8a:27:50:89:c6:50:af:
                    06:4f:26:2d:8a:04:d7:51:be:e8:86:1b:06:99:fe:
                    e5:24:4c:95:db:2f:25:91:08:54:96:ec:2f:be:4e:
                    46:22:28:fd:98:94:6d:6d:80:08:32:63:8e:30:4f:
                    5e:17:04:83:14:65:57:71:b6:72:e0:92:0e:bd:7e:
                    5f:9d:48:9d:95:3e:ff:f9:2a:46:c9:07:e4:1d:3a:
                    88:3c:ca:4c:2f:02:81:c8:af:a0:ce:ac:67:c5:97:
                    40:a3:12:16:c0:30:a8:67:76:6b:2e:3b:25:d2:5f:
                    f6:c6:42:af:46:40:14:92:f1:55:94:4a:f9:f6:c0:
                    e0:ca:5f:56:72:42:ad:93:63:b9:c2:2d:ac:a5:d2:
                    58:aa:12:28:08:95:0a:0a:07:c7:a0:58:d8:d9:d6:
                    1a:2b:d8:89:ae:c0:ab:e9:1a:c8:9f:29:67:a2:56:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:65:47:D1:A4:54:42:F4:CD:C9:EC:56:D0:98:19:62:3F:22:BD
            X509v3 Authority Key Identifier:
                keyid:CB:EC:24:87:E9:7A:69:9B:54:51:A4:29:E7:DD:DA:F2:95:B5:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-wkh-l6aZtUUaQp593a8pW1I_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/nIllR9GkVEL0zcnsVtCYGWI_Ir0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/y-wkh-l6aZtUUaQp593a8pW1I_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.98.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:db:09:1a:87:5e:23:ee:0a:f7:bc:22:2a:2d:46:c3:2c:9c:
         21:a6:90:05:0f:7b:d1:a3:b6:8f:d8:cf:e5:82:85:59:74:aa:
         d1:1b:dc:3e:5f:20:0b:ce:fd:6b:9c:8c:b6:db:06:21:7f:a3:
         12:c9:b6:5e:fd:09:9f:e0:9a:03:a5:0b:3e:68:8d:63:f8:ef:
         01:f3:8a:ef:7a:eb:73:c2:82:37:de:16:62:83:9a:49:1e:61:
         cb:b0:85:be:7c:03:93:4e:8f:5e:88:ec:57:76:ee:00:ff:1a:
         51:97:3a:3c:55:47:28:8e:de:09:b3:89:9d:ba:35:2d:87:73:
         76:c8:2e:8c:b9:b0:c1:92:03:70:2d:c4:23:bb:74:1f:a0:6d:
         15:97:9c:4a:e0:5a:97:a2:b6:4f:c5:ba:be:36:b2:c7:d2:8b:
         4b:ea:c0:88:4e:94:23:d0:61:06:32:f1:09:d8:12:bf:68:2d:
         66:ab:f0:76:06:6c:e5:53:1f:17:d3:4c:97:d1:7c:a4:61:da:
         e4:2a:ba:6a:44:c2:7b:92:bf:05:be:ea:f1:aa:6e:11:17:1c:
         ad:e4:8a:bc:eb:5e:ec:02:a2:b2:a5:ff:f5:a0:d1:17:a4:90:
         b0:ea:8d:bb:42:73:9e:8b:9e:db:24:1f:45:f6:d2:7d:54:7c:
         b4:67:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org