Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/yd2u-9odEHOQyOCMo9KemJ_YHr4.roa
File:                     yd2u-9odEHOQyOCMo9KemJ_YHr4.roa (raw, json)
Hash identifier:          LkgeclvJFc0JhJ3daBCGqfr1QEbf+20RmZkvYznlkag=
Subject key identifier:   C9:DD:AE:FB:DA:1D:10:73:90:C8:E0:8C:A3:D2:9E:98:9F:D8:1E:BE
Certificate issuer:       /CN=7f7554c170db4c29ac0cc123516ffb6c92fea9cf
Certificate serial:       010FE2DC
Authority key identifier: 7F:75:54:C1:70:DB:4C:29:AC:0C:C1:23:51:6F:FB:6C:92:FE:A9:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3VUwXDbTCmsDMEjUW_7bJL-qc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/yd2u-9odEHOQyOCMo9KemJ_YHr4.roa
Signing time:             Fri 25 Mar 2022 08:06:59 +0000
ROA not before:           Fri 25 Mar 2022 08:06:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.72.55.0/24 maxlen: 24
                          185.72.53.0/24 maxlen: 24
                          185.72.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17818332 (0x10fe2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7554c170db4c29ac0cc123516ffb6c92fea9cf
        Validity
            Not Before: Mar 25 08:06:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9ddaefbda1d107390c8e08ca3d29e989fd81ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:53:51:c2:6f:a6:93:98:f6:62:0f:1a:09:d6:
                    80:8f:65:7c:e6:c9:b0:70:ef:cc:92:7f:b7:4d:fc:
                    32:13:ed:e2:73:02:e1:79:c3:23:a6:c5:23:de:4d:
                    57:35:1a:42:94:b8:74:0c:b6:0a:dd:51:de:03:a8:
                    7a:c1:4f:b1:de:46:23:16:40:6f:df:9f:b7:9a:90:
                    86:49:13:be:ce:b4:57:ab:de:7f:9e:b5:75:2a:22:
                    7b:38:93:a6:f7:8b:8b:7e:68:b8:a5:5d:73:fb:ee:
                    83:b8:e1:52:c3:99:79:a9:df:1a:4b:ac:32:fc:6e:
                    b8:8e:82:de:8c:9f:5f:af:e7:63:38:b8:ea:b3:f0:
                    aa:57:d1:cc:50:bb:2b:3c:28:07:22:bb:6b:0a:63:
                    21:66:8b:e2:95:35:e2:65:7b:d6:40:79:29:25:21:
                    4e:e3:1e:ff:8b:d9:be:94:98:74:6e:18:42:de:8a:
                    18:20:f3:8f:f5:b8:35:9f:c3:af:ff:82:82:6a:62:
                    7b:92:70:34:c2:95:b5:9e:d6:b0:bb:67:fd:d6:db:
                    23:18:76:47:01:18:ba:fe:70:00:8b:53:a5:13:e0:
                    a8:a6:e4:80:fb:f3:02:91:55:a5:5e:f3:45:2a:65:
                    1f:92:8c:01:f3:34:8e:e3:ea:7f:37:24:70:07:bc:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DD:AE:FB:DA:1D:10:73:90:C8:E0:8C:A3:D2:9E:98:9F:D8:1E:BE
            X509v3 Authority Key Identifier:
                keyid:7F:75:54:C1:70:DB:4C:29:AC:0C:C1:23:51:6F:FB:6C:92:FE:A9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3VUwXDbTCmsDMEjUW_7bJL-qc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/yd2u-9odEHOQyOCMo9KemJ_YHr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.53.0-185.72.55.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:66:a3:b5:52:bb:60:fe:5f:e4:39:52:c4:ba:d5:de:fe:85:
         60:a3:f4:7e:c2:82:83:0b:25:b1:e6:7f:a1:73:2d:89:0a:78:
         31:f7:c1:d3:23:d0:ed:a8:eb:aa:ae:30:2d:bf:7c:bc:fe:83:
         89:85:9f:d9:18:49:60:1c:db:9a:4c:ef:fc:5d:ed:49:39:0e:
         09:6d:9d:8a:0a:04:44:06:1c:09:65:52:34:2d:ce:6a:3e:e7:
         bd:bb:fd:e5:0e:ea:56:6d:07:68:6d:8b:84:9a:4e:02:4a:cd:
         91:e9:75:d8:f3:ab:9a:1d:af:ca:ab:cd:6b:8d:5c:aa:69:1d:
         6a:d8:0d:a5:f9:cc:19:43:f3:90:56:03:5a:de:c9:2d:0a:15:
         34:ac:20:55:dc:fb:09:66:ad:60:61:7f:50:11:ec:02:f9:07:
         77:84:4d:e2:e4:3c:58:2b:7d:2f:5f:66:f7:01:fb:c6:df:3d:
         91:8b:4b:32:8e:54:40:06:6f:c0:ef:bb:84:f0:da:32:20:e1:
         24:f4:af:b3:fd:ce:f4:a1:94:d1:ee:b8:75:16:2d:78:7a:f7:
         f1:fe:9c:cd:49:c2:0c:c4:ab:84:9a:cd:1d:71:33:ba:a1:03:
         6a:7c:b9:31:ea:bc:81:0f:40:83:f2:b0:47:b2:8b:b5:b8:b6:
         ef:10:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:22 2024 by rpki-client on console-fra.rpki-client.org