Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/55ewgiaeU1S3tLDxKmDP8dAVD_Q.roa
File:                     55ewgiaeU1S3tLDxKmDP8dAVD_Q.roa (raw, json)
Hash identifier:          hG6uXeD7MIWwNS5hGJCyUp5Zf9byxwcs/HObymaul0M=
Subject key identifier:   E7:97:B0:82:26:9E:53:54:B7:B4:B0:F1:2A:60:CF:F1:D0:15:0F:F4
Certificate issuer:       /CN=fa7fff0c206730c495ce44c01cd77c949a0e3e67
Certificate serial:       09AFBB52
Authority key identifier: FA:7F:FF:0C:20:67:30:C4:95:CE:44:C0:1C:D7:7C:94:9A:0E:3E:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n__DCBnMMSVzkTAHNd8lJoOPmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/55ewgiaeU1S3tLDxKmDP8dAVD_Q.roa
Signing time:             Sat 01 Jan 2022 09:02:56 +0000
ROA not before:           Sat 01 Jan 2022 09:02:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48205
IP address blocks:        185.173.146.0/23 maxlen: 32
                          2a0b:5b00::/29 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162511698 (0x9afbb52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7fff0c206730c495ce44c01cd77c949a0e3e67
        Validity
            Not Before: Jan  1 09:02:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e797b082269e5354b7b4b0f12a60cff1d0150ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:b6:30:4a:25:42:2b:c2:0b:50:72:64:85:
                    f4:2b:83:ef:da:a9:0f:df:cc:bf:d7:ba:e5:72:12:
                    82:09:34:b0:78:54:24:c2:2b:a7:a0:aa:d9:c6:06:
                    a1:cd:2e:ab:f5:bd:46:21:5c:bf:42:33:62:c2:6d:
                    be:50:e9:bf:16:61:2e:20:71:8e:77:12:b3:0f:8d:
                    d6:1b:60:ad:c5:bd:f3:99:00:6e:6e:fb:61:06:61:
                    2c:e4:4f:b5:ed:64:99:b7:9b:fa:b0:05:1d:f6:56:
                    0c:3b:0f:74:72:94:cb:b7:a6:b7:b5:26:1b:b9:48:
                    8b:b9:8a:ac:4c:7f:ca:79:0d:64:3e:8e:f8:d1:65:
                    32:12:c7:0e:04:c4:f2:3d:ec:ec:a4:4e:ba:5f:f2:
                    d6:68:cf:b7:c7:40:e6:ca:98:9e:8c:31:ac:8f:6d:
                    0a:49:48:6b:99:9c:3b:aa:ad:9d:a9:6a:64:ae:e5:
                    2b:2d:45:80:9a:8e:21:84:03:4c:6d:54:3f:b5:99:
                    d4:c2:ab:50:3e:cf:16:25:2f:aa:1c:1f:b7:b5:33:
                    c3:2c:26:22:75:6a:34:57:13:eb:9a:f6:d2:5e:fa:
                    7b:ee:c0:03:ad:18:f3:8a:d9:f4:dc:2d:e6:3e:5f:
                    70:66:87:1d:d4:ea:2c:d4:9b:b3:7d:7f:be:fa:8d:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:97:B0:82:26:9E:53:54:B7:B4:B0:F1:2A:60:CF:F1:D0:15:0F:F4
            X509v3 Authority Key Identifier:
                keyid:FA:7F:FF:0C:20:67:30:C4:95:CE:44:C0:1C:D7:7C:94:9A:0E:3E:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n__DCBnMMSVzkTAHNd8lJoOPmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/55ewgiaeU1S3tLDxKmDP8dAVD_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.146.0/23
                IPv6:
                  2a0b:5b00::/29

    Signature Algorithm: sha256WithRSAEncryption
         bd:e4:24:85:8e:ae:14:26:c5:21:87:ad:d5:d7:4e:0f:67:17:
         56:cb:03:7f:5f:3b:9e:bc:e9:6b:a6:7d:f1:1c:d7:b0:52:89:
         ef:51:20:e1:38:28:fb:63:d6:a2:a9:fe:ad:f2:ed:b5:7c:4e:
         92:f2:1e:c0:25:35:d7:d8:ea:04:64:8f:25:20:e9:e6:c7:39:
         fc:5e:22:0a:b4:66:53:fb:ab:fa:42:f5:aa:e3:6f:1f:33:92:
         29:10:39:ea:a2:77:d7:44:2a:3f:8e:b2:9c:75:bc:d2:8d:8b:
         ea:84:6f:b6:51:fd:08:37:57:45:34:21:29:85:5c:82:1b:bb:
         02:37:7b:77:3a:f9:41:91:fa:c1:37:14:4c:c3:b4:fb:08:be:
         9c:90:ff:96:c1:72:0b:94:cb:92:b1:21:17:9c:da:d1:d3:6e:
         48:7d:93:9e:58:ba:b1:48:f1:60:e9:f1:8b:d7:3f:7f:b9:1d:
         1b:47:1d:31:6f:e4:d4:e7:89:81:31:0b:05:a6:91:e4:dd:1f:
         42:66:13:0a:b6:81:ec:cc:b1:68:91:ae:ce:a3:02:2f:1f:97:
         c7:3a:a0:a6:a2:5a:a0:88:99:b2:08:6f:c6:a6:5e:79:f8:8c:
         ff:0e:72:75:e7:6a:f3:1a:8e:ce:9b:d8:84:9b:62:a6:56:13:
         ed:e9:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:54 2024 by rpki-client on console-fra.rpki-client.org