Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/Ecimxc1QeTOJGRm0tArmlVgSWnQ.roa
File:                     Ecimxc1QeTOJGRm0tArmlVgSWnQ.roa (raw, json)
Hash identifier:          wV9HttxtbGfGPKxKG0VKYx9QIA6rEMtJPeqfIKi7FW0=
Subject key identifier:   11:C8:A6:C5:CD:50:79:33:89:19:19:B4:B4:0A:E6:95:58:12:5A:74
Certificate issuer:       /CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Certificate serial:       A007E6
Authority key identifier: 96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/Ecimxc1QeTOJGRm0tArmlVgSWnQ.roa
Signing time:             Sat 01 Jan 2022 03:54:30 +0000
ROA not before:           Sat 01 Jan 2022 03:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        176.97.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10487782 (0xa007e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
        Validity
            Not Before: Jan  1 03:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11c8a6c5cd507933891919b4b40ae69558125a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:b0:95:bc:f6:e4:d5:0e:65:6a:f8:7f:33:
                    c4:a8:6a:1a:72:21:e3:f2:35:ec:47:6b:79:19:78:
                    88:b8:2a:d8:86:51:41:ab:4a:d8:07:9a:6a:4e:cd:
                    c2:5c:aa:ee:82:b8:e1:06:04:34:c8:62:71:86:88:
                    f5:54:41:c7:b8:2e:e6:69:fd:d6:e2:01:95:67:5c:
                    cc:ec:53:a2:3f:8a:73:14:a9:83:f0:78:b4:a0:70:
                    a3:22:ac:16:b4:4e:97:bd:92:66:19:58:f1:8d:be:
                    e6:a7:be:b3:58:c0:e9:05:3b:bc:08:82:71:78:d7:
                    7b:cf:0f:c4:88:eb:0d:de:eb:70:3d:17:2c:e1:28:
                    b3:92:7c:fc:2f:2f:13:f5:5c:18:ce:69:db:86:6f:
                    9e:81:a6:63:aa:aa:8e:06:82:b2:43:9b:cd:44:c6:
                    32:17:c7:98:a3:3b:8a:71:d0:c1:03:48:f4:7e:93:
                    53:99:ac:2e:94:02:70:aa:f4:c1:a9:26:72:88:f4:
                    c1:44:4a:e2:cc:bf:96:5b:e4:63:12:e4:a9:1d:06:
                    68:45:e4:c1:6b:89:1a:db:0e:35:a7:10:22:e0:03:
                    dd:21:d9:fb:0b:06:d7:bc:78:9c:66:3d:45:bf:af:
                    59:f4:c1:2d:d3:cc:1e:ef:b4:4d:e2:52:8e:a7:58:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C8:A6:C5:CD:50:79:33:89:19:19:B4:B4:0A:E6:95:58:12:5A:74
            X509v3 Authority Key Identifier:
                keyid:96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/Ecimxc1QeTOJGRm0tArmlVgSWnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:54:21:fb:1c:a1:9e:a4:a4:20:f1:d2:20:ff:0f:50:c0:
         01:ce:ec:91:ab:4f:27:b6:0d:93:d1:ac:e9:1f:f8:90:63:19:
         e0:26:e8:d8:79:73:82:4b:b5:89:0a:d4:75:4d:e9:4e:a3:6c:
         49:77:d7:51:6a:4e:7a:a4:99:99:d2:c5:cd:b8:8c:ce:a8:60:
         7b:2c:59:c7:3e:5e:87:43:ac:3d:b9:82:6b:b7:a2:20:41:0f:
         6c:48:61:a2:8a:f1:aa:91:be:dc:bc:5f:1a:c0:da:42:9d:ab:
         da:0d:f3:d1:fe:ec:65:94:36:ac:be:ee:13:83:5e:84:f6:43:
         31:4c:1c:4c:74:84:cd:f5:80:fb:53:73:37:b8:7d:cd:4d:5a:
         e7:4c:2c:57:7d:4e:37:03:42:55:79:8c:76:b9:b9:7a:ce:30:
         48:d5:87:07:51:39:6f:9e:bb:4e:ac:4d:e2:ef:f5:7e:59:bf:
         63:d6:8a:39:97:bc:56:77:40:be:c7:a2:dc:b7:5b:87:d2:da:
         43:0c:e3:2e:a2:cd:6f:ae:3c:69:7a:51:a6:46:4a:c6:f9:83:
         6a:19:6b:2b:28:39:8d:0a:fc:0a:89:dd:25:fd:b4:c2:bb:ce:
         03:d4:80:91:fc:dc:a5:37:61:50:82:76:4e:e3:2f:9d:82:c2:
         80:4d:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org