Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/r6bcjcR9pP4kRAeC1mlGG9pwNWU.roa
File:                     r6bcjcR9pP4kRAeC1mlGG9pwNWU.roa (raw, json)
Hash identifier:          XgiV6gpdPefHWU40kpmFbDLR+kvKfvw9TGgBL73xAfg=
Subject key identifier:   AF:A6:DC:8D:C4:7D:A4:FE:24:44:07:82:D6:69:46:1B:DA:70:35:65
Certificate issuer:       /CN=25778b203d7bcc64a960dc7d16c8211287401652
Certificate serial:       2650F5
Authority key identifier: 25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/r6bcjcR9pP4kRAeC1mlGG9pwNWU.roa
Signing time:             Tue 17 May 2022 21:08:27 +0000
ROA not before:           Tue 17 May 2022 21:08:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50284
IP address blocks:        88.151.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511093 (0x2650f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25778b203d7bcc64a960dc7d16c8211287401652
        Validity
            Not Before: May 17 21:08:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=afa6dc8dc47da4fe24440782d669461bda703565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:c4:87:8b:ac:0a:6c:73:7d:c6:7e:4f:93:
                    b2:0c:bc:ae:b2:98:81:b5:18:ff:d8:21:9a:03:c8:
                    1e:77:3e:d7:e3:54:33:38:f6:24:15:d5:e8:fc:d7:
                    b0:df:4c:dc:81:a9:34:c4:c2:31:fa:4f:df:ee:c3:
                    ae:d9:20:b0:29:9b:f0:d5:9d:82:d1:2c:8b:2e:fd:
                    08:4a:c9:6c:9a:95:dd:48:9e:1d:f4:04:37:68:0d:
                    3e:15:a1:1e:7f:05:5f:b9:bc:3e:25:98:cb:f0:74:
                    68:ad:4d:56:ad:ca:1b:fb:46:30:d5:5e:71:72:1e:
                    72:5c:0b:80:fa:76:65:27:8c:f3:bd:5d:50:85:3c:
                    b3:b8:35:fe:50:6f:6d:f0:5a:f1:5e:6b:89:bb:01:
                    40:7b:a1:62:7d:26:28:2e:76:2b:02:a4:33:ec:92:
                    22:7e:30:d8:92:72:0c:71:87:b3:4c:95:d9:67:28:
                    b1:b6:de:5e:7d:93:8a:44:9e:dc:03:87:e4:e5:3a:
                    f0:dd:61:fd:dd:a0:bd:23:8c:86:36:78:b6:a4:78:
                    5f:e9:d5:a7:e2:12:03:8e:c0:05:fe:cc:f0:47:dc:
                    b5:3a:62:ae:a3:32:4c:a1:a5:cc:55:17:c8:9b:f1:
                    32:65:c1:07:cc:51:78:31:81:88:2a:e0:09:52:bb:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A6:DC:8D:C4:7D:A4:FE:24:44:07:82:D6:69:46:1B:DA:70:35:65
            X509v3 Authority Key Identifier:
                keyid:25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/r6bcjcR9pP4kRAeC1mlGG9pwNWU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:f9:7b:59:74:5c:21:7e:ae:34:b5:22:46:1d:8a:0c:95:
         54:39:91:9e:d5:5a:50:c4:37:e2:60:6d:77:4b:bc:66:0f:fc:
         47:84:b4:3d:87:86:b4:40:73:f3:57:16:9d:1c:61:d1:01:49:
         bd:fa:6c:48:ef:f9:2f:27:5f:aa:a5:e9:09:b9:fc:27:c0:56:
         4a:0c:dd:72:3c:39:57:4d:a5:00:52:39:a8:c7:2b:81:9e:1c:
         fb:55:cf:a2:07:64:2e:59:23:1a:5a:ff:73:cf:81:32:1e:65:
         aa:0f:94:2d:0f:2c:8a:09:47:54:1d:bd:bb:00:cb:5d:46:31:
         f1:4f:42:b5:1f:8a:62:f7:46:52:ac:97:78:d4:39:ab:37:c3:
         ea:46:e2:90:8c:87:50:6a:cf:39:2e:18:26:82:d4:9f:92:a0:
         ef:73:66:5b:59:a7:58:8a:64:b9:da:88:d3:d5:24:3e:65:f4:
         5b:55:c6:dc:79:51:ac:49:a9:94:65:7f:a3:03:f1:50:1f:69:
         f5:91:03:8b:9b:e3:fe:91:a0:e7:e0:5b:59:56:77:e4:2b:e5:
         10:12:7b:56:c7:ad:39:e2:01:9f:38:7c:0b:bd:7d:11:f2:d0:
         63:b3:38:c7:81:3b:2c:2e:b1:97:91:16:2b:d9:f1:04:b8:49:
         2c:50:a1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:31 2024 by rpki-client on console-fra.rpki-client.org