Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/HCmPyV3Gd6MkU_mo9UH7HXLJqzA.roa
File:                     HCmPyV3Gd6MkU_mo9UH7HXLJqzA.roa (raw, json)
Hash identifier:          pLYRZWAbtfvOfmYogSpCzyI/S2gM6Fx/rNNBCw+qr7o=
Subject key identifier:   1C:29:8F:C9:5D:C6:77:A3:24:53:F9:A8:F5:41:FB:1D:72:C9:AB:30
Certificate issuer:       /CN=093da9146dad5ce3f160ce91c47a182d1b14943d
Certificate serial:       1B72BB
Authority key identifier: 09:3D:A9:14:6D:AD:5C:E3:F1:60:CE:91:C4:7A:18:2D:1B:14:94:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CT2pFG2tXOPxYM6RxHoYLRsUlD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/HCmPyV3Gd6MkU_mo9UH7HXLJqzA.roa
Signing time:             Sat 01 Jan 2022 01:53:05 +0000
ROA not before:           Sat 01 Jan 2022 01:53:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64492
IP address blocks:        178.212.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798843 (0x1b72bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093da9146dad5ce3f160ce91c47a182d1b14943d
        Validity
            Not Before: Jan  1 01:53:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c298fc95dc677a32453f9a8f541fb1d72c9ab30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a9:fa:70:e5:e0:3e:0f:43:78:40:b0:02:fe:
                    f4:cb:31:36:1a:a8:40:96:05:de:bd:97:65:79:0a:
                    e1:08:9e:2e:a6:24:28:25:6d:9e:c8:7b:6f:29:90:
                    cc:4e:1b:d8:96:58:6d:55:57:f8:b7:f2:44:80:29:
                    67:8a:ec:c4:9d:51:20:df:e8:bf:d3:a7:3f:16:99:
                    91:5d:2a:b7:54:c1:96:b1:58:c7:e8:b5:fe:5f:4b:
                    c5:d3:52:89:e6:1b:42:86:b9:b9:c3:79:d2:00:7d:
                    41:c7:38:af:f6:a0:d7:60:a2:2e:a5:a3:c4:24:50:
                    1e:07:fa:82:9f:6d:51:ac:bb:77:e5:27:09:26:78:
                    cd:27:80:f9:da:25:ab:fc:01:08:ce:de:b8:76:35:
                    c7:73:75:11:39:eb:f1:7c:ca:c9:4c:10:eb:36:b1:
                    5a:c3:ce:fb:e0:f3:05:93:98:06:aa:32:38:20:a3:
                    c5:f1:3b:f6:dc:a4:7f:2d:b4:02:88:f6:ad:20:88:
                    0e:3b:76:d2:48:b8:f4:b7:40:54:de:6d:ec:d1:c4:
                    28:70:cb:8b:23:e8:e6:3f:17:f2:1f:92:07:17:b3:
                    86:5f:a7:85:1d:6d:2c:85:f8:7a:cf:07:49:df:90:
                    e2:1b:8b:42:62:c8:29:8d:ca:71:41:df:80:26:2b:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:8F:C9:5D:C6:77:A3:24:53:F9:A8:F5:41:FB:1D:72:C9:AB:30
            X509v3 Authority Key Identifier:
                keyid:09:3D:A9:14:6D:AD:5C:E3:F1:60:CE:91:C4:7A:18:2D:1B:14:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CT2pFG2tXOPxYM6RxHoYLRsUlD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/HCmPyV3Gd6MkU_mo9UH7HXLJqzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/CT2pFG2tXOPxYM6RxHoYLRsUlD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:d4:53:77:d0:ca:09:23:a9:0f:2c:47:3b:9a:f9:42:30:
         16:5c:a5:28:88:8e:3a:79:ee:12:dc:a2:c4:49:f5:f9:af:69:
         22:29:8a:f8:26:30:4a:60:42:2c:56:1b:30:af:e4:79:d2:8d:
         06:71:ac:83:8d:c1:c2:a1:cf:4f:3a:30:33:24:4a:e7:03:f8:
         88:8e:a3:41:a5:5e:50:57:d7:f0:7b:5e:08:d1:41:13:ad:9b:
         60:63:6e:09:bc:91:df:0d:0f:fd:07:c9:95:91:55:dd:80:a5:
         5c:09:62:19:d6:ec:92:f7:52:f8:ca:49:0f:15:91:b1:5e:ba:
         3f:c2:11:f2:6e:07:44:03:37:b6:56:18:d0:86:65:fb:5c:87:
         19:26:aa:e9:af:4f:de:f9:65:ad:61:af:c5:2d:52:d2:ba:6c:
         20:b9:56:67:bd:7e:05:73:e4:da:e4:93:a9:05:fa:7c:15:e7:
         84:86:56:d1:c3:cd:74:4b:40:6b:3d:bc:d2:71:dd:1e:6a:d8:
         df:df:c4:67:c5:59:d8:9b:a3:b8:95:95:1c:bb:d3:80:e5:bf:
         d1:0d:b2:87:02:09:a9:b3:f0:c0:61:38:0d:63:66:86:fc:c9:
         8e:d3:9d:f3:ae:1e:19:1c:9d:93:a8:1f:c2:d1:07:ee:34:a5:
         51:14:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org