Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/yjQEK-_dwFU7iAWdTrhECbTvTnU.roa
File:                     yjQEK-_dwFU7iAWdTrhECbTvTnU.roa (raw, json)
Hash identifier:          LDTHozOSqRC6klu8JVhoEFgPMrV+uLqWAjr82HZcH20=
Subject key identifier:   CA:34:04:2B:EF:DD:C0:55:3B:88:05:9D:4E:B8:44:09:B4:EF:4E:75
Certificate issuer:       /CN=5561992f8cd58f5d0a77c07089e3a7e80fe2f25f
Certificate serial:       01F45BAB
Authority key identifier: 55:61:99:2F:8C:D5:8F:5D:0A:77:C0:70:89:E3:A7:E8:0F:E2:F2:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWGZL4zVj10Kd8BwieOn6A_i8l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/yjQEK-_dwFU7iAWdTrhECbTvTnU.roa
Signing time:             Sat 01 Jan 2022 10:59:21 +0000
ROA not before:           Sat 01 Jan 2022 10:59:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47952
IP address blocks:        194.56.185.0/24 maxlen: 24
                          194.56.184.0/24 maxlen: 24
                          194.56.186.0/24 maxlen: 24
                          194.56.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32791467 (0x1f45bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5561992f8cd58f5d0a77c07089e3a7e80fe2f25f
        Validity
            Not Before: Jan  1 10:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca34042befddc0553b88059d4eb84409b4ef4e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:56:5b:86:6c:c2:11:9d:57:ce:a4:6f:93:
                    a8:1c:5b:00:81:83:2d:b1:dd:e4:60:e0:62:ea:54:
                    26:25:11:41:bc:e9:08:cf:68:82:1c:2f:79:f8:f0:
                    4c:93:23:13:04:59:6f:84:4b:c5:4a:85:15:d3:52:
                    06:86:89:b6:41:76:75:0d:e2:11:5d:49:fb:a9:12:
                    cf:80:c3:c5:9f:de:54:e2:f5:06:39:41:f4:30:9c:
                    2a:fc:97:10:e9:5f:e9:21:c5:9c:b3:d8:7d:f4:b6:
                    b6:c5:58:53:1c:b0:5d:7f:54:69:53:63:88:4b:2d:
                    ae:1e:d9:96:fe:45:fd:33:46:f2:e2:2c:e0:2f:08:
                    1c:96:59:08:e0:33:f1:9e:1f:10:f5:73:cf:fe:62:
                    45:f6:36:f2:96:1e:86:ef:0d:6c:c7:97:e8:a5:a4:
                    a8:c2:a8:64:96:30:b3:53:2f:f4:3e:c9:b5:94:a6:
                    5d:06:d6:b6:c7:fa:ea:71:e2:b8:15:ff:61:a5:46:
                    6d:45:f2:a3:c5:9d:22:80:58:e4:5e:07:40:1e:b5:
                    f5:f6:b9:ed:4f:a6:e5:8e:df:cf:20:0f:0f:3f:62:
                    a8:b7:39:e8:ac:4e:63:9b:bb:2e:fc:5f:1c:38:19:
                    b8:f9:78:a9:74:ce:5a:9e:2c:53:d4:b6:9a:47:06:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:04:2B:EF:DD:C0:55:3B:88:05:9D:4E:B8:44:09:B4:EF:4E:75
            X509v3 Authority Key Identifier:
                keyid:55:61:99:2F:8C:D5:8F:5D:0A:77:C0:70:89:E3:A7:E8:0F:E2:F2:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWGZL4zVj10Kd8BwieOn6A_i8l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/yjQEK-_dwFU7iAWdTrhECbTvTnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/VWGZL4zVj10Kd8BwieOn6A_i8l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:8f:69:7a:6f:41:c2:2b:f1:ef:d6:47:82:3b:98:70:60:
         36:ef:f9:38:ea:62:86:2c:13:7c:6b:0c:e1:e5:bd:20:24:cf:
         ff:24:f8:59:70:b4:42:4c:b4:cd:91:31:9f:62:0e:3a:0b:8c:
         8b:a9:be:be:87:f5:50:ab:60:14:d5:19:35:7c:93:91:1a:d9:
         9f:45:5b:0b:31:06:01:3f:0c:ec:b6:dc:07:ea:b6:f8:2f:51:
         08:95:fe:a5:97:db:5b:d6:1b:6f:40:55:eb:b5:b1:69:71:3c:
         7a:02:06:c2:6e:85:b5:25:49:15:b3:f9:02:00:0b:19:e3:1d:
         d1:a6:8d:05:ee:73:e5:8c:8a:6e:c0:67:e4:ce:0e:8e:b4:f4:
         37:fa:9b:76:21:86:60:a1:3a:45:aa:4b:3e:50:c6:ed:78:21:
         f1:6a:8c:86:04:2c:8f:79:a0:9f:26:95:70:98:4b:57:27:26:
         5c:3f:f9:7b:b3:1d:29:e0:eb:53:03:24:cf:ef:f5:99:7a:39:
         98:53:de:3f:1c:17:20:c2:70:4d:72:c1:ca:96:cf:d2:9c:89:
         39:cd:42:5f:c0:31:b6:18:74:1e:cb:a9:b5:d7:7c:67:20:58:
         df:d5:94:a3:d1:7b:ca:fb:1c:22:fb:dc:7e:7a:d0:48:b8:83:
         ac:11:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:11 2024 by rpki-client on console-fra.rpki-client.org