Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Efv-iJs6M-nb7Y0kQ_YLNdAb7TE.roa
File:                     Efv-iJs6M-nb7Y0kQ_YLNdAb7TE.roa (raw, json)
Hash identifier:          lm9GXDhJXfE/730s5H4OMFqy9cVZ1DOasBxRfO3H6D4=
Subject key identifier:   11:FB:FE:88:9B:3A:33:E9:DB:ED:8D:24:43:F6:0B:35:D0:1B:ED:31
Certificate issuer:       /CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Certificate serial:       06DEE7F4
Authority key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Efv-iJs6M-nb7Y0kQ_YLNdAb7TE.roa
Signing time:             Sat 01 Jan 2022 09:56:17 +0000
ROA not before:           Sat 01 Jan 2022 09:56:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56911
IP address blocks:        195.234.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115271668 (0x6dee7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
        Validity
            Not Before: Jan  1 09:56:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11fbfe889b3a33e9dbed8d2443f60b35d01bed31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:6a:eb:54:ce:27:7b:40:1e:aa:d3:da:28:
                    55:c9:1c:99:c2:fe:c6:f6:0a:9b:50:99:3d:73:87:
                    28:db:04:03:7c:b6:dd:16:9a:62:6d:ba:98:c1:fa:
                    97:14:0e:eb:37:eb:3a:90:27:b7:42:9c:f9:60:c3:
                    29:6e:58:da:45:59:40:8f:16:f2:a9:ec:0b:6c:83:
                    32:98:3d:f7:98:96:82:4b:06:c7:23:b2:4e:8a:94:
                    e7:6d:cf:c3:3c:6a:69:02:9b:80:cb:41:b3:9e:3c:
                    47:e8:41:07:06:1b:08:a1:26:a3:81:16:30:f9:0c:
                    f7:62:cb:c2:fe:5e:c2:6e:d8:af:95:0e:43:97:92:
                    97:ec:ba:10:0f:33:68:83:7a:40:b9:c3:80:40:e3:
                    76:1e:49:13:c8:b6:41:c7:f3:b2:23:99:bf:52:4f:
                    eb:4e:97:20:f3:b1:3c:92:08:3c:df:14:0c:cc:fc:
                    91:fc:07:e2:92:01:78:36:71:07:53:11:4c:59:08:
                    8f:3b:d7:7f:5a:1b:6b:b4:3f:72:9b:5c:f3:f3:23:
                    7a:f4:61:e9:ed:0f:fb:33:50:98:90:4f:77:4f:53:
                    2d:e0:0e:1c:57:a7:1b:77:2c:0d:c4:c3:eb:97:35:
                    19:e1:2f:a6:19:8a:de:33:45:19:78:12:6f:7c:23:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FB:FE:88:9B:3A:33:E9:DB:ED:8D:24:43:F6:0B:35:D0:1B:ED:31
            X509v3 Authority Key Identifier:
                keyid:43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Efv-iJs6M-nb7Y0kQ_YLNdAb7TE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:97:90:07:2a:06:31:73:d2:83:32:4e:05:ea:c6:7b:ab:6f:
         4c:5f:b8:5a:02:5b:d8:ea:6f:70:a6:86:2c:77:41:5d:09:d7:
         23:3e:94:b1:bd:65:d9:87:88:7a:92:63:ea:d4:77:d5:d3:3f:
         4f:9c:60:ff:6a:4e:80:40:d3:df:8b:ea:8d:0b:b1:e3:9f:94:
         26:fa:b2:98:dc:b5:bf:bd:1e:85:c9:aa:00:d5:42:e2:87:71:
         c5:ae:b0:e3:d8:1b:64:03:53:5d:79:31:a1:e0:78:58:e9:99:
         5b:f9:01:93:da:f3:ad:e4:6a:9c:1a:17:d5:74:a2:04:b4:f9:
         65:c4:9a:80:d7:12:64:f4:25:51:03:0b:5a:07:85:f7:49:22:
         75:30:08:68:f4:0a:7d:c0:b8:c5:66:ee:e7:08:94:a5:a9:e5:
         03:7b:e1:19:4f:b4:49:e2:ae:ad:8d:93:6a:36:01:60:4c:20:
         49:14:4a:cc:e5:ad:59:29:cc:d1:d1:e7:dd:39:07:e7:75:31:
         37:a1:df:cd:e8:1a:14:8d:30:5b:a4:ce:37:84:fb:c6:61:11:
         95:80:52:54:1b:2c:f4:13:bb:23:0d:bd:41:59:74:d8:38:9d:
         d5:19:58:03:91:b7:77:7d:10:2c:8b:13:fb:68:ec:99:e4:2c:
         a3:d7:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org