Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/XutJzU32ozKMRc4ycMDG7bl9ECw.roa
File:                     XutJzU32ozKMRc4ycMDG7bl9ECw.roa (raw, json)
Hash identifier:          NZI2ZJFQ+53M7oqkNilae0dhBJyVmAA5mUYpZ5X5a9c=
Subject key identifier:   5E:EB:49:CD:4D:F6:A3:32:8C:45:CE:32:70:C0:C6:ED:B9:7D:10:2C
Certificate issuer:       /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial:       01832B8ED009B2CF239E7192B1B75AA7D7A0
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/XutJzU32ozKMRc4ycMDG7bl9ECw.roa
Signing time:             Sun 11 Sep 2022 07:58:43 +0000
ROA not before:           Sun 11 Sep 2022 07:58:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        188.227.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2b:8e:d0:09:b2:cf:23:9e:71:92:b1:b7:5a:a7:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
        Validity
            Not Before: Sep 11 07:58:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5eeb49cd4df6a3328c45ce3270c0c6edb97d102c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:6a:06:d4:3d:d3:7b:db:d1:a3:d8:7e:87:
                    5c:39:a3:4c:1f:e5:11:a7:e3:69:7d:74:d5:1f:43:
                    2d:ba:36:8f:21:06:94:62:c1:c0:8d:b2:4f:8c:9c:
                    46:c0:3a:86:94:e1:1a:42:6c:3d:8c:1a:b8:5b:64:
                    46:fa:8b:f8:a4:a0:8b:0f:53:6b:d7:ad:4d:bc:23:
                    cf:4b:3b:00:31:20:73:4e:50:fb:f9:23:5f:6c:f5:
                    11:aa:6a:f9:e4:af:ff:c5:58:09:de:cd:04:a6:f6:
                    ab:d9:a7:24:89:3a:79:57:48:e4:b6:9f:2c:61:fb:
                    61:5d:03:e8:93:1a:67:c8:93:06:0b:f7:44:e4:b0:
                    ef:1d:78:37:96:47:47:51:42:cf:6a:d8:e3:87:ad:
                    4b:75:71:38:83:19:93:da:1d:e5:cb:14:01:11:41:
                    38:38:0d:41:70:7a:98:57:1c:18:0a:ed:88:f3:3b:
                    fa:58:ef:ef:60:45:5f:47:8e:1f:94:bb:e8:a4:64:
                    15:86:38:3e:91:33:a4:fb:2d:74:89:14:cd:59:4c:
                    89:98:fa:eb:09:85:10:3f:1b:e3:b6:e4:db:ed:67:
                    10:b3:8c:b0:90:8f:95:59:6a:4d:c4:1a:ea:6c:37:
                    97:5f:a7:f3:4e:b2:ac:c7:67:d1:6b:6c:09:70:08:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:49:CD:4D:F6:A3:32:8C:45:CE:32:70:C0:C6:ED:B9:7D:10:2C
            X509v3 Authority Key Identifier:
                keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/XutJzU32ozKMRc4ycMDG7bl9ECw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:af:25:c5:52:35:69:a4:67:16:f2:14:61:69:17:ed:64:61:
         11:72:6f:d2:3a:c9:33:ae:cb:21:6f:ad:02:2d:e0:31:1a:4a:
         a9:52:df:75:38:2c:05:f8:b8:55:88:0d:e0:1d:34:5f:d3:13:
         04:60:2b:93:6d:d8:5e:34:a5:67:41:22:59:42:7a:f3:30:a0:
         d2:41:cf:0c:96:e0:e0:17:52:07:3b:b6:de:b0:84:49:bf:51:
         f5:cf:f1:e6:38:07:57:34:19:12:ca:0f:ac:49:98:bc:d6:45:
         da:86:09:d9:cd:ab:c8:f0:d4:7e:bc:1b:d5:1f:21:f6:0c:35:
         d7:89:a1:e9:08:db:6a:85:c6:dc:88:0a:40:50:d4:ad:b5:5e:
         e3:a2:d3:a9:c9:30:d8:92:b9:6e:b2:61:6a:e2:d4:8a:86:6f:
         5b:95:0e:24:d4:09:96:ff:8e:4b:f8:93:5b:92:61:21:27:84:
         f3:20:b1:a4:8a:55:32:5a:a6:3b:ed:9f:ae:3c:a8:47:7e:07:
         15:d4:c4:06:ea:0c:63:25:61:ab:50:f4:50:5c:19:f1:e0:01:
         ef:62:04:d5:08:c1:79:80:66:1a:99:fe:c3:a5:e3:05:bb:aa:
         9b:79:5d:f9:6c:c2:c7:01:27:3b:49:44:5c:70:64:0b:85:e6:
         af:d5:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org