Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/hn2rMd2hGQbrYI2Te3lghkZV8t8.roa
File:                     hn2rMd2hGQbrYI2Te3lghkZV8t8.roa (raw, json)
Hash identifier:          gzcfUwGVHWbKuDgibRgp0m6K0tMriB2of6VEaDeNaNA=
Subject key identifier:   86:7D:AB:31:DD:A1:19:06:EB:60:8D:93:7B:79:60:86:46:55:F2:DF
Certificate issuer:       /CN=651698c0cd983797915e7d793fb6d18c481e84c5
Certificate serial:       36BE4B
Authority key identifier: 65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/hn2rMd2hGQbrYI2Te3lghkZV8t8.roa
Signing time:             Thu 17 Feb 2022 12:25:08 +0000
ROA not before:           Thu 17 Feb 2022 12:25:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        178.211.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3587659 (0x36be4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651698c0cd983797915e7d793fb6d18c481e84c5
        Validity
            Not Before: Feb 17 12:25:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=867dab31dda11906eb608d937b7960864655f2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:ff:fc:84:47:f8:f2:07:57:38:a5:45:ba:
                    5f:51:4e:c1:62:3d:42:59:dc:56:c4:43:20:08:91:
                    f4:a1:a9:62:bb:74:e4:d7:28:5d:fb:3b:af:c8:45:
                    a0:7c:3e:b3:48:7d:da:fa:50:fe:3d:12:bf:f9:99:
                    97:6d:aa:e7:0a:67:fe:8d:72:70:ba:37:3e:f0:be:
                    41:0d:ae:e3:b3:3c:60:44:cb:4b:d6:e4:85:16:de:
                    76:e0:d8:ae:00:39:b9:4c:9a:ae:f0:82:f1:a8:4d:
                    b3:85:62:db:65:ae:54:9b:d1:7d:7f:39:32:03:64:
                    ae:88:d6:a1:02:dc:81:21:50:99:bd:0c:e6:71:c6:
                    88:60:65:60:75:7b:a6:47:ad:cf:74:0c:79:13:6d:
                    d9:27:e8:a4:58:b7:2b:04:3e:16:fb:1c:16:69:04:
                    fd:19:f2:b6:4a:f6:6e:8a:c6:43:df:0e:e3:7b:2a:
                    c9:57:7a:bf:2e:45:a8:88:21:b6:3c:bf:b7:2a:60:
                    a7:10:dc:b9:bd:d4:f6:31:7d:c2:a8:47:29:f8:84:
                    9d:41:8a:57:e2:0d:d0:31:26:13:c6:f7:1e:1d:98:
                    ed:46:09:33:c9:86:d3:3a:7e:c3:d4:b9:ec:10:05:
                    3b:62:e9:be:da:63:de:02:aa:de:68:dc:9b:79:ac:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7D:AB:31:DD:A1:19:06:EB:60:8D:93:7B:79:60:86:46:55:F2:DF
            X509v3 Authority Key Identifier:
                keyid:65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/hn2rMd2hGQbrYI2Te3lghkZV8t8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:79:78:1a:8a:22:c5:51:14:03:22:1f:ac:20:8a:82:4e:
         d6:73:9f:c2:ef:d8:74:2b:ce:7d:f1:81:9f:7b:0c:ec:3e:41:
         d7:7d:2c:a1:8a:cb:c9:ac:69:4c:e8:bf:6a:89:8f:b9:19:d2:
         96:14:45:db:ea:d6:5e:ee:d2:1d:3e:5f:bc:50:b6:24:8a:22:
         b7:c3:6e:8a:2d:90:db:b6:87:3c:7c:e3:23:87:58:61:29:14:
         d9:b8:59:e9:90:14:23:33:d9:e3:8c:7b:ab:d4:83:06:a8:fc:
         48:6b:3a:f0:0c:24:a7:fd:10:5f:8f:47:6f:9b:51:24:8a:f2:
         9c:cd:df:6f:cd:97:3c:d3:6f:ce:ab:c0:b6:38:40:2e:8a:7a:
         08:f3:16:8f:be:6a:42:57:96:87:ce:a6:38:56:6d:a2:05:e0:
         6e:f3:74:e3:d8:11:d7:3c:92:c0:40:dc:5e:4d:71:f6:75:55:
         cb:8f:da:19:eb:0a:02:39:ab:dc:c6:94:fb:98:26:d0:45:4a:
         83:1e:45:a6:bc:96:9f:5c:c9:0a:c7:45:ff:db:8c:a3:40:43:
         61:85:60:fd:1e:a1:aa:5d:6f:78:45:72:e2:25:08:a4:60:40:
         49:06:86:e5:1a:83:91:50:1b:17:6b:a4:5c:ea:bc:58:39:4a:
         ac:89:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org