Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/myV1_9v2PJyNlaZjSNXiQIFqK8E.roa
File:                     myV1_9v2PJyNlaZjSNXiQIFqK8E.roa (raw, json)
Hash identifier:          /8sz5nZguh9+IoKlVdD/ZK5yIfM++BxOISnWoe1pnaY=
Subject key identifier:   9B:25:75:FF:DB:F6:3C:9C:8D:95:A6:63:48:D5:E2:40:81:6A:2B:C1
Certificate issuer:       /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial:       1C637C06
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/myV1_9v2PJyNlaZjSNXiQIFqK8E.roa
Signing time:             Sat 01 Jan 2022 04:52:33 +0000
ROA not before:           Sat 01 Jan 2022 04:52:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54103
IP address blocks:        212.26.200.0/24 maxlen: 24
                          212.19.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476281862 (0x1c637c06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
        Validity
            Not Before: Jan  1 04:52:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b2575ffdbf63c9c8d95a66348d5e240816a2bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:10:9d:91:d1:e1:56:53:89:2a:cd:59:68:
                    73:27:09:1c:62:cf:0a:55:e2:13:c4:45:c2:dd:e7:
                    80:3b:b5:dc:93:c3:62:28:f1:f6:45:ca:33:52:19:
                    59:03:db:c1:d6:ff:29:37:4b:54:4a:d2:8f:c5:c5:
                    73:54:18:69:7b:c3:17:a1:df:f2:61:6b:3b:1e:d0:
                    65:10:0d:c7:65:48:41:67:4e:1e:ab:d7:b4:e8:e0:
                    4b:47:63:c8:fb:7f:8b:c6:47:7b:1a:08:ee:c8:06:
                    1e:45:6e:68:e7:15:a5:12:10:9b:ef:5b:03:20:d9:
                    6a:e3:3c:ee:33:aa:4a:46:48:d1:cf:97:40:bc:b6:
                    70:92:e6:7f:7e:d6:a8:7e:7c:21:38:74:1c:f4:9c:
                    3d:3c:8c:e9:1e:12:e8:3f:c4:ff:71:66:1d:58:d5:
                    1e:64:6e:44:a2:ac:16:5d:3d:6c:13:97:c3:40:30:
                    5f:a1:43:1d:46:5b:bc:ee:1c:f9:39:99:75:1c:67:
                    64:f0:55:da:9c:fe:61:95:14:98:6b:17:27:6b:a8:
                    a7:5e:a6:64:a0:14:74:99:b9:ea:4f:d4:a1:15:a1:
                    9c:32:8c:53:a4:37:27:c1:38:c4:37:6e:1c:a6:6a:
                    1f:c7:19:97:9c:b1:30:09:27:69:30:f5:60:45:75:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:75:FF:DB:F6:3C:9C:8D:95:A6:63:48:D5:E2:40:81:6A:2B:C1
            X509v3 Authority Key Identifier:
                keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/myV1_9v2PJyNlaZjSNXiQIFqK8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.19.207.0/24
                  212.26.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:79:72:a3:23:5b:e2:10:46:15:54:46:55:d8:5c:f3:1d:
         d9:89:99:08:e3:c4:2d:a9:9d:b2:20:2c:29:0c:2e:22:c8:0b:
         49:d8:8b:e4:64:0b:6a:57:49:6e:c1:b1:59:61:9c:16:b5:07:
         25:4c:03:04:e9:a7:1d:23:d8:ff:c9:4a:84:66:9b:65:86:e1:
         5d:3d:ca:e6:83:8d:ec:fb:b6:0f:eb:f8:6a:f3:00:6c:c6:07:
         33:ef:b7:89:a2:a2:db:7a:30:f7:73:9d:0a:9a:52:31:b7:fb:
         bb:ea:8e:6e:f0:d8:91:46:fc:ec:91:fc:f9:0f:6e:43:82:e4:
         97:83:7d:71:e9:b0:49:a3:b5:10:82:98:fa:ee:9b:1b:63:92:
         34:d1:a7:f6:9d:e9:c5:68:c4:4a:79:ac:80:1d:37:9f:76:e4:
         09:df:a4:a9:9a:b5:04:09:d8:50:7e:65:b3:5a:4b:c0:fd:75:
         af:97:02:67:68:bc:ca:8c:22:39:93:a6:16:de:b7:20:29:b2:
         4e:23:d6:f5:42:a7:4d:05:b7:74:d7:7d:ee:d8:3a:51:a9:01:
         e5:76:93:ca:83:cd:f0:fc:6c:42:26:6f:8d:f8:77:6c:63:89:
         9a:77:52:74:20:24:d0:04:e4:e4:e6:8b:8c:19:51:44:cc:08:
         9c:73:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org