Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/jP7gnRZWt56tmlmPhn2aAM7NXoM.roa
File:                     jP7gnRZWt56tmlmPhn2aAM7NXoM.roa (raw, json)
Hash identifier:          nWBVG3LcNrsOGRBKTDRac7SGB++uvQCh7zfT8c+kz08=
Subject key identifier:   8C:FE:E0:9D:16:56:B7:9E:AD:9A:59:8F:86:7D:9A:00:CE:CD:5E:83
Certificate issuer:       /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial:       01915563F4E7BEE8FC1088C12BE2ADA68910
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/jP7gnRZWt56tmlmPhn2aAM7NXoM.roa
Signing time:             Thu 15 Aug 2024 09:34:59 +0000
ROA not before:           Thu 15 Aug 2024 09:34:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2687
IP address blocks:        194.69.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:55:63:f4:e7:be:e8:fc:10:88:c1:2b:e2:ad:a6:89:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
        Validity
            Not Before: Aug 15 09:34:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cfee09d1656b79ead9a598f867d9a00cecd5e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:c4:95:02:a2:06:cc:d5:ad:89:a6:99:f7:
                    4a:cf:80:d4:ae:f3:56:04:75:e5:82:a7:b2:92:1e:
                    48:52:6d:79:51:79:22:2a:4c:59:45:5c:e3:03:68:
                    5a:f9:07:64:ea:e0:dc:53:42:cf:30:14:71:2a:5d:
                    70:16:42:72:7f:06:c8:ee:7d:dd:f6:1c:ac:98:8b:
                    57:49:f2:7e:bf:03:14:08:36:1d:4b:9a:31:5c:bb:
                    39:66:3d:c4:c0:e8:68:bb:af:2d:dd:84:80:e6:63:
                    95:7a:6c:d8:3f:ab:97:82:ac:84:ee:94:da:08:67:
                    ef:e5:70:c0:d5:98:7e:99:16:7e:47:28:27:cb:07:
                    df:0a:c3:9c:8f:33:3a:58:e3:6c:66:52:36:16:69:
                    a2:f5:26:14:19:a8:fc:76:8c:c2:13:ee:2f:ed:da:
                    e8:b7:fa:d4:eb:0d:62:65:80:67:e6:63:25:88:43:
                    b1:e4:20:02:1c:a6:7a:5e:69:fd:f1:c6:59:f4:01:
                    c6:c6:8d:a7:e3:90:b6:8d:61:04:7b:02:c2:db:82:
                    41:2f:6b:b7:64:af:a7:d1:e1:4e:ca:7a:2c:18:99:
                    64:d4:11:2b:80:d1:1b:64:e0:18:2b:7b:60:1d:2d:
                    79:76:87:0d:b0:92:2b:c7:55:b1:7e:27:64:69:b3:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FE:E0:9D:16:56:B7:9E:AD:9A:59:8F:86:7D:9A:00:CE:CD:5E:83
            X509v3 Authority Key Identifier:
                keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/jP7gnRZWt56tmlmPhn2aAM7NXoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:60:33:8a:6f:e2:f7:6c:b4:42:8a:d5:50:28:63:ec:49:5e:
         03:10:02:9e:f0:98:b5:43:cd:e5:67:8e:92:a8:c7:d2:d7:4b:
         75:48:2e:4d:ec:47:61:94:80:10:e2:b3:0b:7c:f3:77:ac:3d:
         2e:af:87:e9:8b:2e:27:07:cc:bb:5d:97:b1:4e:09:5e:4e:0c:
         33:f9:f0:b5:4f:17:b8:6b:04:85:96:22:a3:d8:66:1e:a1:0c:
         ec:46:61:ff:54:34:86:81:20:b9:ae:5c:f9:79:cc:9b:fe:a9:
         3f:fe:07:75:34:40:00:7c:3b:fc:bf:bd:bb:ee:c2:53:16:9c:
         8e:6d:f0:1f:01:4f:3e:ff:e0:8d:5d:cd:21:7e:0b:97:e1:b1:
         be:07:ba:3f:f6:da:00:87:ef:01:0e:34:cb:38:74:92:66:8e:
         29:c7:c0:4d:e9:d6:6d:dd:60:38:aa:f6:10:ef:24:bb:9a:fe:
         43:23:be:05:d7:c9:61:86:0b:b1:e3:d5:dc:19:62:01:08:5c:
         eb:21:d1:4d:b6:88:4f:9a:e3:55:5a:aa:37:f5:15:55:1d:fa:
         99:77:ac:8d:16:fd:3d:c1:87:8d:bd:d0:c7:26:ed:d5:39:91:
         91:69:e9:9e:34:4d:d6:eb:b0:0d:91:32:65:3b:c3:87:b8:9c:
         d3:c8:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org