Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/OlJBDL75_4HSFR5Lfwd9YvYmFsk.roa
File:                     OlJBDL75_4HSFR5Lfwd9YvYmFsk.roa (raw, json)
Hash identifier:          h0IE6ZjFLUw9PqjUZSOU6fnIbHuCKuaanm07Ag9HNx0=
Subject key identifier:   3A:52:41:0C:BE:F9:FF:81:D2:15:1E:4B:7F:07:7D:62:F6:26:16:C9
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       081C32AE
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/OlJBDL75_4HSFR5Lfwd9YvYmFsk.roa
Signing time:             Sat 01 Jan 2022 13:04:50 +0000
ROA not before:           Sat 01 Jan 2022 13:04:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49453
IP address blocks:        83.97.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136065710 (0x81c32ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jan  1 13:04:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a52410cbef9ff81d2151e4b7f077d62f62616c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:0e:e1:4d:40:42:6b:91:20:ac:37:8e:48:
                    54:90:76:c0:61:27:7d:b9:9e:41:0c:24:82:18:2d:
                    6a:53:ba:64:ce:1d:8a:e6:21:cb:74:2f:9b:90:6e:
                    ba:b9:15:15:9a:6c:1d:bd:c3:9e:9b:a7:b0:87:0e:
                    19:9c:ef:c9:88:c9:6a:f0:71:af:23:4c:4a:15:d6:
                    aa:7d:ef:44:64:68:e7:14:e1:d9:14:91:c6:2a:a1:
                    e7:52:50:1e:c4:f6:61:61:32:a6:b3:2a:b2:ca:30:
                    4d:8c:ab:a2:ff:94:c4:ea:89:cc:76:83:cb:25:9e:
                    a9:62:38:a1:b9:58:02:f7:63:7f:c8:4a:a0:f6:42:
                    bb:7c:72:42:5a:15:af:d4:09:dd:0f:21:67:22:18:
                    53:fa:ec:0a:d6:a0:c8:48:6f:32:a8:09:c4:78:e2:
                    61:72:4c:ee:0f:a6:64:a5:07:da:48:6b:84:92:6f:
                    78:ee:27:41:8f:a1:6f:9c:fc:43:98:ca:48:93:d9:
                    53:cc:f2:c3:ac:0e:9a:6f:9e:1d:b9:ea:fa:6b:ea:
                    60:4b:6e:41:c1:40:73:33:49:79:2d:f6:9a:3a:b8:
                    98:c6:4a:83:13:1f:c2:20:f8:b3:fa:60:2f:e6:4c:
                    a6:44:44:80:24:37:a9:80:99:30:1e:e3:b7:d7:5b:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:41:0C:BE:F9:FF:81:D2:15:1E:4B:7F:07:7D:62:F6:26:16:C9
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/OlJBDL75_4HSFR5Lfwd9YvYmFsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:4e:33:47:c2:43:39:e7:9d:1c:28:74:d8:47:c1:e8:be:
         55:d1:b0:37:81:87:b7:82:df:de:45:27:e6:af:0f:37:a0:86:
         79:6b:d2:bd:4d:8e:70:4f:1d:be:7e:7e:75:0b:f1:a2:41:d2:
         ff:2e:00:51:fa:d2:3f:72:e7:12:45:cd:9b:bf:2e:a1:ad:8a:
         37:2a:2f:6f:8e:c2:63:70:42:6f:8a:0c:eb:ca:38:46:f2:2b:
         65:d4:dc:1c:ae:b7:1e:99:b5:ae:a4:05:47:ec:79:6a:d0:d9:
         b5:2a:2b:0d:b0:7b:bd:89:60:f6:9c:ac:42:6f:b9:0a:13:49:
         a6:0e:fe:ec:a7:a0:99:f8:f4:7b:77:d1:47:e0:84:9d:ec:82:
         09:51:2b:e7:b2:b0:6c:95:3e:57:21:7e:c1:fd:a3:ca:4c:9e:
         8c:e9:5b:9a:25:f2:7c:5c:06:8f:d0:8a:c2:11:1f:73:50:fe:
         a7:b9:2e:cc:0b:7c:30:3d:d3:e7:0f:14:01:8c:ae:a3:e0:44:
         e2:77:29:00:46:ed:75:42:d1:05:d1:fb:f9:2d:b5:b8:2b:4a:
         2f:e3:e0:7c:ef:c4:05:0f:cc:ba:c1:5b:c3:de:49:a9:e8:14:
         c1:9e:25:81:0f:f4:b6:6d:55:6a:27:d4:c1:7f:cd:ec:57:13:
         0d:f7:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org