Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/DbmDNpJKZZDqEaWD4vZgXtTshLo.roa
File:                     DbmDNpJKZZDqEaWD4vZgXtTshLo.roa (raw, json)
Hash identifier:          YtVljOyf5pQtfD6HSsKetCUOS8/Fdb9RIaDjyfbPlwU=
Subject key identifier:   0D:B9:83:36:92:4A:65:90:EA:11:A5:83:E2:F6:60:5E:D4:EC:84:BA
Certificate issuer:       /CN=c648ee064453d799b82e847b349666bf29daa961
Certificate serial:       2C8DFF
Authority key identifier: C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/DbmDNpJKZZDqEaWD4vZgXtTshLo.roa
Signing time:             Wed 27 Apr 2022 06:30:23 +0000
ROA not before:           Wed 27 Apr 2022 06:30:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5089
IP address blocks:        194.39.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919935 (0x2c8dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c648ee064453d799b82e847b349666bf29daa961
        Validity
            Not Before: Apr 27 06:30:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0db98336924a6590ea11a583e2f6605ed4ec84ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:39:3c:67:94:b8:ff:9c:38:ce:74:ce:05:
                    e3:29:21:b9:d3:26:f7:25:2a:1e:14:a9:a9:05:55:
                    e6:ed:67:0b:3f:a0:a7:f8:97:d4:81:74:c2:ae:df:
                    bd:e9:5e:e8:98:71:0a:7e:63:e0:0a:39:ba:47:6f:
                    d6:0e:6b:1f:66:79:3f:08:f2:21:b0:93:5d:6a:c3:
                    99:2a:6f:3e:f4:b3:19:bc:af:e5:03:85:a9:3e:c8:
                    a5:71:b6:d2:32:9a:0a:5c:3d:c1:82:b7:f6:8e:37:
                    3d:9a:13:1b:70:8c:d3:fc:6a:ff:c6:ad:6a:b6:23:
                    0d:2d:e0:c3:ed:7b:80:36:cb:b2:bf:96:75:6e:d2:
                    07:1a:58:38:b5:6d:5d:f0:01:8d:72:f9:41:c9:06:
                    fa:0e:8d:cd:80:c2:2c:d7:ea:1f:a8:a0:ac:33:50:
                    d5:e2:1b:26:39:43:dd:19:9b:b8:c7:27:cd:77:ab:
                    7a:2e:0e:3b:fc:4f:98:52:74:3a:76:97:ae:8d:e1:
                    14:2a:ef:36:69:34:3d:38:b7:12:f2:a2:d0:41:a1:
                    15:05:26:6f:9a:fc:ff:e9:7b:51:4e:54:54:6d:4f:
                    aa:7c:47:34:95:2e:47:d2:0a:38:97:12:dc:01:ce:
                    0b:b4:65:50:1f:e7:52:60:b8:1f:b8:7e:32:18:11:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:83:36:92:4A:65:90:EA:11:A5:83:E2:F6:60:5E:D4:EC:84:BA
            X509v3 Authority Key Identifier:
                keyid:C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/DbmDNpJKZZDqEaWD4vZgXtTshLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/xkjuBkRT15m4LoR7NJZmvynaqWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:08:e7:e2:8c:33:42:e7:a9:dd:6f:c9:78:a5:c9:f3:9e:
         03:fc:45:26:94:41:9a:a3:bb:4a:ac:27:92:f5:d3:2a:8a:47:
         96:c3:8c:38:59:76:2f:50:0e:ef:e5:af:50:b4:c1:46:1d:f9:
         f8:b8:13:2f:ac:17:ef:6b:74:b2:c5:41:eb:04:dc:fe:69:a6:
         de:a7:f9:ae:e2:ee:17:6d:77:13:9e:71:5e:30:ce:98:aa:bc:
         67:18:0b:d8:48:93:7e:69:61:e5:2f:8a:6b:fe:74:59:56:fc:
         7a:52:99:cc:6e:d6:e5:98:17:f6:a1:6d:3f:49:52:e7:8b:27:
         ec:3f:6c:13:ed:fe:ea:a1:a2:3b:75:34:ee:da:77:82:9e:4f:
         f5:4a:f9:0b:90:45:4e:4c:48:fc:54:85:00:ba:b1:20:fe:0a:
         eb:08:bb:52:f2:66:e1:7b:63:af:f2:76:23:d9:f7:77:03:f1:
         26:55:fd:91:b6:ad:85:0c:c7:b8:17:01:50:82:89:15:49:ea:
         35:3a:8f:15:bc:01:15:61:7b:fb:fc:90:a5:8e:50:a2:03:7a:
         fe:56:43:99:ee:a5:fe:0c:d9:da:c5:07:1b:8b:5d:74:ef:28:
         d1:20:9f:b1:ba:f0:63:6d:46:f9:33:75:a6:37:8d:4f:ba:8b:
         9d:ef:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:59 2024 by rpki-client on console-ams.rpki-client.org