Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/GfKd5qF6iqzPyOejXWxQ38Sbi_Y.roa
File:                     GfKd5qF6iqzPyOejXWxQ38Sbi_Y.roa (raw, json)
Hash identifier:          7N1mWl7Sld1m6I3CHK9qcxKpBpRh8vL9+PP0aWYOp2M=
Subject key identifier:   19:F2:9D:E6:A1:7A:8A:AC:CF:C8:E7:A3:5D:6C:50:DF:C4:9B:8B:F6
Certificate issuer:       /CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Certificate serial:       018234D188813123FFA1A1A91F6EB92B78C8
Authority key identifier: 37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/GfKd5qF6iqzPyOejXWxQ38Sbi_Y.roa
Signing time:             Mon 25 Jul 2022 10:05:23 +0000
ROA not before:           Mon 25 Jul 2022 10:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212609
IP address blocks:        213.109.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:34:d1:88:81:31:23:ff:a1:a1:a9:1f:6e:b9:2b:78:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
        Validity
            Not Before: Jul 25 10:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19f29de6a17a8aaccfc8e7a35d6c50dfc49b8bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:5f:c6:2c:62:2f:13:e8:ef:ac:79:6f:c5:
                    0b:25:ab:db:97:5f:e3:e5:75:ff:6a:d9:64:b5:ec:
                    09:f1:bf:f7:00:ef:50:3f:5a:14:69:21:4b:61:5b:
                    2c:3b:fd:88:15:8e:51:c0:7b:65:d3:b7:b0:7a:db:
                    2c:b1:fc:e8:5d:1e:b1:aa:98:34:d4:63:93:51:69:
                    cc:6a:06:f4:b0:29:d3:27:5a:ea:97:25:3a:ca:4e:
                    bc:a8:99:58:31:d1:bf:12:4c:58:fe:55:39:24:6b:
                    2e:1f:5a:ac:65:95:57:58:5a:9f:ae:da:15:9a:78:
                    26:de:a2:cc:ad:91:68:f1:51:5e:c8:a8:64:eb:bc:
                    e8:51:41:81:69:f6:13:e4:c6:bf:91:6b:d6:81:d2:
                    12:ca:e8:ed:f1:04:b7:bf:f1:15:99:34:43:6d:eb:
                    f0:a6:73:f8:27:9e:07:d2:78:3d:34:fa:f4:79:dd:
                    8d:5f:65:7b:aa:c2:be:86:77:7c:11:ab:7b:13:8d:
                    37:f1:8d:b3:ec:c8:4d:b5:2c:c9:b9:9f:3b:01:e5:
                    1d:ec:fe:96:94:1a:9f:c4:69:e7:17:12:95:4a:82:
                    28:ad:18:6d:d1:8d:32:dc:83:b0:c9:e8:f4:2b:15:
                    c3:8a:f7:b4:d4:96:50:52:14:9b:fb:87:e4:1f:dc:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F2:9D:E6:A1:7A:8A:AC:CF:C8:E7:A3:5D:6C:50:DF:C4:9B:8B:F6
            X509v3 Authority Key Identifier:
                keyid:37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/GfKd5qF6iqzPyOejXWxQ38Sbi_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:56:18:45:e2:0d:b8:3f:1a:b6:90:f1:0c:02:c7:b5:bc:
         1d:30:bc:56:d1:6a:ff:e1:8d:87:72:18:e9:29:8e:be:6b:03:
         0c:37:72:62:52:99:71:02:48:e7:d9:8f:ab:c1:b0:61:8c:b6:
         c5:aa:e2:20:aa:0e:65:39:e5:c9:02:17:4c:f5:77:af:e6:7d:
         9e:c9:a9:68:8d:52:89:62:b3:4d:6d:b7:9f:20:23:ee:6e:8c:
         47:b1:ad:26:5a:0c:bb:5b:8f:05:1e:a9:21:14:c3:02:5a:d0:
         9e:ab:39:6e:47:37:09:b6:be:09:34:0a:9f:5b:4b:73:bd:a7:
         07:8e:d5:fd:53:16:49:63:cc:56:27:9a:22:69:50:77:82:8a:
         a4:67:8f:f1:77:86:83:ec:cd:4e:9d:27:5c:e7:9f:67:59:b6:
         19:ee:33:dc:b9:75:4c:e4:76:70:95:14:f0:a6:55:1c:b4:3a:
         49:73:1f:fa:08:d6:27:8e:79:93:32:0a:52:fc:4e:14:cb:99:
         06:69:81:f7:81:93:d6:c5:f6:dd:b6:2b:0e:99:7f:2a:ea:cf:
         b3:c9:78:61:2b:a7:99:75:71:d9:e1:3c:15:dd:8e:0a:65:7b:
         df:53:66:10:79:f4:0b:90:44:d5:54:a5:3c:e4:9d:92:c8:c9:
         c5:e8:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org