Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/EpGZzYqto_ufuQiuLSD6pmHCskI.roa
File:                     EpGZzYqto_ufuQiuLSD6pmHCskI.roa (raw, json)
Hash identifier:          HtJ3KVBxkRrMZV1klyCzOLchAaAzth3xRYTgay7tfkQ=
Subject key identifier:   12:91:99:CD:8A:AD:A3:FB:9F:B9:08:AE:2D:20:FA:A6:61:C2:B2:42
Certificate issuer:       /CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Certificate serial:       011CBEF1
Authority key identifier: DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/EpGZzYqto_ufuQiuLSD6pmHCskI.roa
Signing time:             Sat 01 Jan 2022 06:53:51 +0000
ROA not before:           Sat 01 Jan 2022 06:53:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44285
IP address blocks:        130.193.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18661105 (0x11cbef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
        Validity
            Not Before: Jan  1 06:53:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=129199cd8aada3fb9fb908ae2d20faa661c2b242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:dd:e4:67:71:b3:a3:07:fa:e2:46:cd:37:
                    6e:9a:9a:f6:8a:45:a4:2c:9d:7e:2a:55:d7:a4:ea:
                    54:dd:4f:3b:e8:7b:2f:0c:b9:ba:f3:69:d9:e9:5d:
                    a7:ca:ed:a4:0f:8a:f9:5e:88:40:f5:bc:bf:54:42:
                    a4:da:21:6b:d2:a3:d1:4c:f5:21:5b:e6:4c:c2:9d:
                    e6:e2:03:85:58:06:ca:eb:c0:37:4e:2c:ed:cc:ea:
                    27:e4:48:24:54:48:7a:4d:d5:63:d9:27:de:0b:be:
                    87:8d:0d:d6:c3:25:2c:bc:53:4b:60:7b:66:0b:17:
                    79:85:31:c9:d4:d3:b1:53:15:fa:cc:0a:02:c2:f1:
                    3b:75:68:04:dd:45:49:49:a1:4a:b6:0d:63:4a:79:
                    64:e1:02:5c:7f:ed:32:eb:5c:df:f6:f2:c8:ea:66:
                    3e:10:83:90:7d:94:b9:36:1b:f6:88:9f:0c:06:a3:
                    f1:a9:c1:7c:43:df:7e:4e:13:48:22:72:0b:04:9e:
                    0d:53:fc:c0:a5:d0:9e:09:ff:33:8d:f9:1d:62:eb:
                    ae:04:53:38:87:2f:9d:14:10:fe:57:ae:72:6d:53:
                    87:08:ee:2a:ad:1d:f6:73:d5:ae:f2:e5:e0:22:3e:
                    73:56:89:ee:7e:2d:2d:53:af:07:cb:34:3b:bb:6e:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:91:99:CD:8A:AD:A3:FB:9F:B9:08:AE:2D:20:FA:A6:61:C2:B2:42
            X509v3 Authority Key Identifier:
                keyid:DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/EpGZzYqto_ufuQiuLSD6pmHCskI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:2e:3a:bc:41:e6:64:7d:49:8b:bb:26:2e:98:ce:7f:29:
         c8:cc:d6:72:b3:a3:d7:1c:f7:bc:b1:8a:da:76:7a:62:3f:c9:
         7c:0e:c3:4d:96:2b:46:4a:0a:19:7f:58:bf:8e:fe:cb:8c:44:
         5b:58:c1:35:6c:39:26:32:b3:eb:26:71:b5:47:b4:8a:b0:aa:
         62:fe:06:65:ee:2d:51:31:29:da:cd:e5:b7:bb:ac:1c:fb:91:
         fc:1b:bf:74:18:df:47:db:38:c8:a0:f6:af:de:06:df:c1:91:
         81:cd:b1:5d:36:a5:3b:2a:4a:17:30:d8:5d:52:0a:ea:0c:c2:
         df:33:17:ef:b8:08:4d:d5:59:95:26:34:f2:33:8e:2a:a6:87:
         29:39:9b:bb:78:ba:33:9c:a4:7d:32:87:ce:05:1e:a3:b1:c3:
         d3:03:d0:de:a8:27:b4:47:52:ac:e4:1b:55:ce:df:05:d2:2e:
         e8:8b:0a:b6:2c:a2:16:ff:a9:6e:2f:92:e4:6a:92:3e:e4:bb:
         90:62:93:76:1f:61:8a:0d:fe:48:19:bf:13:3f:16:c7:af:18:
         4f:95:31:19:28:be:fc:5e:aa:6f:b9:60:4d:80:01:f3:70:47:
         98:c5:3f:97:50:6f:12:42:6d:f8:44:19:97:24:eb:27:eb:34:
         c4:61:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:16 2024 by rpki-client on console-fra.rpki-client.org