Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/eGjxSHhoMvR04jfZJ2k64avRf5Y.roa
File:                     eGjxSHhoMvR04jfZJ2k64avRf5Y.roa (raw, json)
Hash identifier:          m17r0FJ/QFs2kmO4gF5kT7T5d7GohNmDscjJPC4hqw8=
Subject key identifier:   78:68:F1:48:78:68:32:F4:74:E2:37:D9:27:69:3A:E1:AB:D1:7F:96
Certificate issuer:       /CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Certificate serial:       A7E0CB
Authority key identifier: CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/eGjxSHhoMvR04jfZJ2k64avRf5Y.roa
Signing time:             Sat 01 Jan 2022 02:01:30 +0000
ROA not before:           Sat 01 Jan 2022 02:01:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        109.107.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11002059 (0xa7e0cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
        Validity
            Not Before: Jan  1 02:01:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7868f148786832f474e237d927693ae1abd17f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:ab:b7:ef:a7:50:47:4a:06:b3:d6:75:85:
                    9b:2e:ef:c3:8e:5a:45:70:63:5b:c4:0c:47:1e:07:
                    fa:0e:91:b2:13:d7:9b:b0:fd:09:62:7f:bd:f1:86:
                    d6:d7:f9:d3:c1:29:f1:af:63:b0:9c:cf:b2:30:0a:
                    c8:aa:ca:d9:62:3d:ed:e5:83:58:ac:92:05:f3:79:
                    4f:5c:19:bd:a8:5f:05:22:f0:6f:89:7d:4f:b0:ac:
                    b9:5c:32:25:92:e2:18:09:83:9d:24:eb:b8:15:0e:
                    d2:8e:e8:0b:a0:d8:3e:34:e2:49:e5:8d:72:a3:2f:
                    fd:b0:a8:eb:10:80:68:1e:17:c3:00:10:9e:f3:ad:
                    26:8e:d3:f6:5c:9f:0d:69:31:19:39:76:c2:24:c8:
                    71:1f:62:75:7d:65:dc:bc:dd:50:a8:96:a8:40:e4:
                    8c:3d:1e:df:5b:17:ec:db:f0:94:a2:3c:60:33:62:
                    ed:51:b5:15:99:ea:d8:21:88:62:c9:11:f6:97:06:
                    45:38:78:01:71:6a:c0:a6:08:d4:7b:67:8e:8d:84:
                    39:b7:1f:8c:7f:26:32:25:62:7c:b8:3c:3f:92:d0:
                    e4:4d:bb:df:ee:4c:85:da:46:d4:78:61:01:58:7f:
                    d3:85:d5:6d:fc:60:c9:70:2e:e1:45:4c:77:96:4e:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:68:F1:48:78:68:32:F4:74:E2:37:D9:27:69:3A:E1:AB:D1:7F:96
            X509v3 Authority Key Identifier:
                keyid:CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/eGjxSHhoMvR04jfZJ2k64avRf5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/y2shj2088NsAUcoWoeUtUMbLKxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:a7:5e:1a:f5:2e:95:44:5e:dd:ea:2a:72:17:68:01:77:
         32:bf:72:c0:15:30:7e:72:39:fa:36:25:a0:e6:e3:dc:1e:40:
         5e:4f:13:05:fa:9c:59:93:70:a5:23:4c:af:ae:53:0d:a6:c8:
         5f:bd:1a:db:a7:4c:1b:be:8a:b9:74:2f:e9:02:7d:10:e7:42:
         3c:2c:3b:75:03:1d:e5:eb:00:04:18:74:a8:2b:95:6b:43:11:
         9d:2b:29:d3:f7:48:22:41:86:71:2e:ec:2e:5e:b6:99:e3:22:
         aa:53:0e:46:3c:36:a3:94:20:63:79:fe:fa:c5:21:d7:d1:30:
         97:59:42:78:c6:bf:c4:a4:7a:c5:46:84:fe:12:97:d1:be:05:
         a2:e0:94:57:fd:9e:26:99:e4:c4:ed:5e:74:ae:41:d6:04:d2:
         3d:3d:16:88:ba:ff:82:79:4b:a2:3c:24:6b:eb:df:4e:d2:17:
         cb:94:4d:40:48:0b:21:5f:04:e2:4e:d6:78:b0:2d:c1:25:60:
         2e:35:7d:2d:0b:09:b5:7a:73:3a:c8:72:18:de:e0:a0:ed:01:
         d4:a7:6e:03:50:75:be:5c:fb:88:14:44:ad:ed:91:77:53:00:
         dc:c6:d0:82:8d:a0:84:b7:c7:06:77:ef:f5:c6:9b:1e:24:b6:
         4c:66:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org