Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/gL74MxGkzRJAJUuaCODM7XggF5A.roa
File:                     gL74MxGkzRJAJUuaCODM7XggF5A.roa (raw, json)
Hash identifier:          ffN396kC/T2C36YaiBf6xREAjp+boijOVzdrJkHZBUI=
Subject key identifier:   80:BE:F8:33:11:A4:CD:12:40:25:4B:9A:08:E0:CC:ED:78:20:17:90
Certificate issuer:       /CN=651698c0cd983797915e7d793fb6d18c481e84c5
Certificate serial:       A54A
Authority key identifier: 65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/gL74MxGkzRJAJUuaCODM7XggF5A.roa
Signing time:             Tue 25 Jan 2022 21:25:42 +0000
ROA not before:           Tue 25 Jan 2022 21:25:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        178.211.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42314 (0xa54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651698c0cd983797915e7d793fb6d18c481e84c5
        Validity
            Not Before: Jan 25 21:25:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80bef83311a4cd1240254b9a08e0cced78201790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:4b:7e:e0:6d:57:a4:df:a4:25:83:a5:d7:
                    56:86:f7:56:37:7c:26:3f:d2:18:58:9a:98:45:31:
                    de:03:9a:82:08:fa:65:74:63:3d:17:7f:25:e9:da:
                    ec:20:8f:00:01:03:f6:39:ee:fc:3e:ea:99:0a:50:
                    0e:48:aa:bd:b3:55:e9:ca:2c:ee:94:88:e4:2a:99:
                    95:ba:da:86:a9:63:cc:93:2d:2d:2e:06:34:6c:ac:
                    05:b6:e7:a0:36:d0:9f:d1:62:52:08:b0:c5:4a:60:
                    e4:51:30:c6:77:f2:3a:5c:c0:b4:60:4e:86:f8:0a:
                    50:e0:0c:85:7a:c5:cb:2e:b2:6d:ab:60:b1:e0:75:
                    c9:eb:9b:cf:be:b0:df:a0:49:7e:d4:aa:b9:8b:e8:
                    69:10:97:05:88:c0:f4:4a:d1:bd:6c:61:5c:8d:85:
                    bb:24:68:0d:24:be:1e:37:ad:17:86:3e:f2:b9:e3:
                    0c:10:d3:c1:dc:59:58:a3:f4:82:58:86:0a:95:4c:
                    58:7b:1a:ac:a4:9a:65:62:a7:06:de:6d:9a:b8:a7:
                    c5:12:95:65:94:fb:44:2b:94:c3:ad:7e:ce:69:68:
                    71:9f:c3:39:95:89:80:75:58:e1:d3:f7:80:6c:f2:
                    c7:1a:d6:cb:65:6f:31:7d:4e:5e:b1:af:8f:91:d6:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BE:F8:33:11:A4:CD:12:40:25:4B:9A:08:E0:CC:ED:78:20:17:90
            X509v3 Authority Key Identifier:
                keyid:65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/gL74MxGkzRJAJUuaCODM7XggF5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:59:aa:87:b0:c9:a4:25:0b:2d:67:54:3f:c8:8d:52:87:ee:
         cb:2a:cb:6a:dc:83:92:44:3b:60:4f:d3:c9:ec:57:51:99:3f:
         eb:f4:1b:44:ca:6f:17:08:0a:d6:92:63:7b:64:61:a1:c6:35:
         e9:81:9e:38:6b:5c:1d:b1:9a:4d:d9:6d:06:7b:64:f5:24:a8:
         80:9a:7f:62:27:cc:9d:31:14:12:f1:a3:ad:da:fc:0e:71:75:
         2a:db:5f:2a:96:38:3c:21:31:01:f1:53:56:ff:a9:48:91:77:
         f7:a6:28:54:7d:3e:16:5c:cf:93:bb:60:8f:81:da:f8:07:41:
         ae:30:53:79:c8:9f:24:89:01:94:ab:94:e1:ec:0d:c8:5d:c6:
         92:ee:61:85:bf:f6:ac:46:21:aa:2e:14:81:62:cb:79:94:7a:
         60:0a:04:c1:ac:56:16:c2:0c:fe:71:4c:7f:2b:a9:aa:46:c8:
         07:06:35:bd:c1:1d:34:35:84:69:dc:4c:d5:be:f8:5d:56:42:
         3d:d2:d6:0d:92:ab:69:64:f8:2c:7b:74:07:a5:d3:db:6d:0f:
         c8:44:e2:07:22:13:26:18:9e:11:98:a5:cf:ed:c0:c2:66:2e:
         0e:5a:b0:42:03:fa:3b:c7:74:38:18:8e:f2:01:25:4b:a8:80:
         c7:b6:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org