Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/63egugnBdYBktMm_OHImI4NNMiw.roa
File:                     63egugnBdYBktMm_OHImI4NNMiw.roa (raw, json)
Hash identifier:          fxAGY64pJDiLVpCQjBmGl0y0STbeOEOhwOGw6KbD+YE=
Subject key identifier:   EB:77:A0:BA:09:C1:75:80:64:B4:C9:BF:38:72:26:23:83:4D:32:2C
Certificate issuer:       /CN=28642ab1790b7f5f359068e9fbb72641c5413079
Certificate serial:       CDEB07
Authority key identifier: 28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/63egugnBdYBktMm_OHImI4NNMiw.roa
Signing time:             Sat 01 Jan 2022 07:58:27 +0000
ROA not before:           Sat 01 Jan 2022 07:58:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.218.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13495047 (0xcdeb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28642ab1790b7f5f359068e9fbb72641c5413079
        Validity
            Not Before: Jan  1 07:58:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb77a0ba09c1758064b4c9bf38722623834d322c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:26:78:c9:ed:76:e8:df:cc:e1:b0:d7:fc:
                    23:6b:ab:f4:12:05:65:a3:b5:bc:db:dd:ad:b1:ac:
                    67:e3:e0:11:bf:c2:73:a3:a1:94:43:df:6a:28:a1:
                    74:3a:02:14:25:33:6d:ab:de:8d:50:f2:68:34:cb:
                    70:dd:13:85:c9:7a:5d:64:ca:b7:6b:c0:0a:5b:ea:
                    e8:2f:68:aa:06:87:97:6d:3d:95:a2:24:c8:da:86:
                    5a:c7:93:00:c0:25:78:9a:62:76:71:3e:94:47:22:
                    db:90:9a:18:d3:1a:41:f8:f0:66:87:2c:4e:b3:20:
                    5a:93:bd:e7:bb:b1:ee:57:88:63:74:c6:e3:6f:08:
                    e2:4f:25:66:ea:c1:13:9c:ee:d7:33:71:d5:d6:f3:
                    02:ee:ca:8e:83:12:5c:dc:5c:47:d7:f7:a5:5f:7e:
                    8b:72:d2:c6:5d:a2:1d:da:eb:a0:92:0b:40:f0:77:
                    39:66:61:bf:af:53:da:14:3d:01:b4:53:6c:b4:6a:
                    fe:a8:64:18:ff:3e:86:4b:c8:46:81:67:86:b1:25:
                    70:c8:bb:81:99:13:25:39:e4:cd:f2:0e:71:94:c1:
                    62:1f:c1:a1:2f:b4:95:85:24:9e:9b:ff:22:94:fa:
                    e6:6a:e5:b3:81:8c:1d:9a:88:38:5b:fc:56:b2:4a:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:77:A0:BA:09:C1:75:80:64:B4:C9:BF:38:72:26:23:83:4D:32:2C
            X509v3 Authority Key Identifier:
                keyid:28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/63egugnBdYBktMm_OHImI4NNMiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:91:dd:50:d9:27:6e:aa:3b:c8:9f:46:7b:68:40:8a:2e:dd:
         1a:e5:4c:35:2c:af:a0:35:b6:61:8d:f4:21:5e:40:84:a4:7b:
         2e:6d:89:93:51:a8:a3:e5:55:da:06:ff:57:9d:29:69:e1:97:
         90:44:f4:ad:c0:8f:c2:32:0b:70:70:91:64:0e:94:e3:7a:59:
         4c:46:df:61:97:3a:2f:5e:bd:cb:45:bc:91:f7:cc:07:2f:79:
         17:26:42:a8:26:9b:02:92:cc:03:9a:d8:28:66:fb:11:7b:3c:
         e1:67:1c:f4:c8:6e:b0:0f:41:77:c5:58:8b:91:f0:11:3e:73:
         f1:10:a2:c3:59:e0:a1:a2:fd:f9:c4:73:10:25:43:bc:39:e6:
         a7:91:a2:a7:2b:a2:70:d8:b3:b4:26:78:57:39:67:42:24:8b:
         e8:52:c4:1c:df:be:fe:8d:74:2b:f6:32:f6:59:ce:b5:9e:dd:
         b9:b5:5f:d7:a6:d8:0f:96:a3:17:41:12:7a:f6:83:52:f7:8f:
         14:29:23:e7:44:68:9c:90:20:3c:00:11:f7:3b:09:78:3a:ee:
         cc:ee:3e:17:ad:f6:ae:a0:73:32:5c:19:25:d0:7f:10:23:7c:
         44:17:8e:3d:c3:13:a0:3d:ae:33:7e:85:99:c8:d0:50:ec:1d:
         24:25:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org