Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/VWevL56EXnqpabvPUUfd6IhAoh0.roa
File:                     VWevL56EXnqpabvPUUfd6IhAoh0.roa (raw, json)
Hash identifier:          I/fQr7uzLZmZptLEZA9ln2+6YAIsWVlEoK6yAt8owdA=
Subject key identifier:   55:67:AF:2F:9E:84:5E:7A:A9:69:BB:CF:51:47:DD:E8:88:40:A2:1D
Certificate issuer:       /CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Certificate serial:       A06256
Authority key identifier: 96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/VWevL56EXnqpabvPUUfd6IhAoh0.roa
Signing time:             Sat 01 Jan 2022 03:54:30 +0000
ROA not before:           Sat 01 Jan 2022 03:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        176.97.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10510934 (0xa06256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
        Validity
            Not Before: Jan  1 03:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5567af2f9e845e7aa969bbcf5147dde88840a21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:55:03:31:25:2f:96:96:49:08:72:c6:7f:
                    e6:1e:b0:58:09:53:c6:fd:f8:d5:6c:45:a9:80:e0:
                    de:f6:18:60:7c:ea:60:f1:f4:02:e6:d0:64:7c:cb:
                    83:2f:ca:d9:52:2a:cf:df:e7:ab:aa:b3:5e:e0:db:
                    fb:43:4d:c9:b8:f9:46:ba:bf:7b:ac:66:98:06:f1:
                    53:d7:f0:f1:0e:8c:8c:c5:80:bc:05:14:f0:f5:e4:
                    c3:e4:88:98:19:2b:13:6a:b4:ac:e7:ca:fc:ca:fe:
                    7b:d6:cc:1b:2b:50:f9:a0:48:3e:5a:99:37:39:a2:
                    74:31:38:63:3c:73:3f:30:9b:8a:4e:d2:8b:76:7b:
                    82:e2:06:fb:d7:67:31:39:46:80:d5:7c:62:01:df:
                    90:dc:88:cc:2b:bc:37:1e:90:48:44:7d:2d:be:4e:
                    f4:11:1a:28:bb:d7:31:0e:4e:8a:46:93:6b:14:30:
                    63:2c:f8:d8:48:9c:62:d1:f4:2b:e4:ae:9b:ab:d7:
                    77:28:f6:f0:17:41:9a:64:47:32:74:33:34:4f:c8:
                    24:e7:a7:88:b7:50:57:38:39:80:c6:46:87:d9:a3:
                    bf:f9:6f:65:aa:12:a3:8b:e3:d7:1b:bf:2b:e1:7b:
                    bc:fc:af:04:b8:39:96:d3:12:d4:88:70:88:76:e4:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:67:AF:2F:9E:84:5E:7A:A9:69:BB:CF:51:47:DD:E8:88:40:A2:1D
            X509v3 Authority Key Identifier:
                keyid:96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/VWevL56EXnqpabvPUUfd6IhAoh0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:54:5a:37:1a:23:0e:37:08:92:56:36:17:de:7b:a2:ac:62:
         6b:64:24:f3:37:8c:35:b5:e0:2e:16:d7:3c:56:39:d4:a3:53:
         9f:26:3a:5a:8b:1d:02:0c:6e:35:9f:45:c8:cf:73:af:14:15:
         31:c9:a1:79:22:cb:2a:55:ec:ed:59:d3:e1:2c:50:06:bc:a0:
         d2:fb:50:5e:4f:e8:ae:8f:bd:1d:56:38:06:c8:53:e1:35:ca:
         56:dc:40:28:36:d2:15:36:61:cb:34:02:8c:51:c4:84:e3:e3:
         20:bf:6c:10:7e:10:3d:f3:a0:bf:eb:8b:d9:6a:af:27:15:5b:
         56:50:ea:49:ec:1f:05:4f:6b:b3:0b:e3:3d:da:1d:a3:f4:18:
         b0:b4:94:4c:a9:07:f5:31:e7:ab:30:9e:3c:b4:2f:2d:34:ab:
         ae:0c:8e:77:78:3e:fc:4a:ec:1f:fe:d1:5f:df:0a:b1:f1:7b:
         ee:ae:31:69:2b:dd:aa:89:9e:a3:45:9d:cf:8b:a3:75:f9:45:
         84:27:30:77:e0:19:cb:54:a5:4c:97:ea:d0:da:57:83:12:2d:
         00:9e:9a:bb:77:83:26:00:cb:a7:16:63:04:d1:87:5d:a1:e0:
         a0:07:d5:e4:02:6f:21:6d:3c:6b:fd:26:22:8a:7b:6c:18:50:
         a1:02:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org