Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/kVkswZpXSyMQpCAEArPZsZ4JWmY.roa
File:                     kVkswZpXSyMQpCAEArPZsZ4JWmY.roa (raw, json)
Hash identifier:          VXhPtxWw7PNoTTKIXXTXIdfziv5iXSUlP/FE2InCrjs=
Subject key identifier:   91:59:2C:C1:9A:57:4B:23:10:A4:20:04:02:B3:D9:B1:9E:09:5A:66
Certificate issuer:       /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial:       F54A04
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/kVkswZpXSyMQpCAEArPZsZ4JWmY.roa
Signing time:             Sat 01 Jan 2022 11:01:12 +0000
ROA not before:           Sat 01 Jan 2022 11:01:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        178.212.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16075268 (0xf54a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
        Validity
            Not Before: Jan  1 11:01:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=91592cc19a574b2310a4200402b3d9b19e095a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:f6:fa:0a:47:c0:12:d8:9d:f8:0d:f4:41:
                    e0:e9:19:b7:42:45:0c:d9:6b:ab:c4:bd:a4:b7:af:
                    92:a9:a0:9e:e5:e3:bf:5b:04:a6:a9:68:1f:a5:ef:
                    8d:57:6a:35:76:68:c7:74:69:e4:4c:bb:6e:fa:61:
                    a7:53:47:20:42:46:5c:b3:10:a8:52:3b:b4:fe:02:
                    4b:8a:6e:02:7b:30:75:66:e9:94:8c:3c:8f:ca:94:
                    27:d6:a1:11:0b:f9:fe:b4:66:49:ee:a4:ec:37:f4:
                    7c:23:5a:b5:12:f7:28:79:1d:69:0c:3d:f4:fa:9f:
                    c5:e1:74:6e:98:fd:fd:d4:c7:e5:c2:68:29:92:3d:
                    8e:22:71:0d:ce:3e:ab:9f:28:7d:f6:88:ab:b1:81:
                    f8:6b:21:a8:d8:e5:1f:7c:17:cf:15:40:93:14:79:
                    a2:2c:27:cf:27:6e:fd:08:c1:74:10:1c:84:0f:73:
                    be:44:07:fe:0e:cd:fd:31:e3:79:71:3b:04:21:17:
                    15:18:6d:25:f7:d3:45:eb:d2:9b:67:61:10:a9:8e:
                    a9:37:2f:8f:37:cd:da:8b:ef:1f:24:d6:96:e7:7b:
                    aa:f7:9b:f7:92:09:0f:08:79:04:96:24:7b:5f:a0:
                    a3:d3:39:14:f9:31:3e:83:e7:37:e6:14:4d:ad:a9:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:2C:C1:9A:57:4B:23:10:A4:20:04:02:B3:D9:B1:9E:09:5A:66
            X509v3 Authority Key Identifier:
                keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/kVkswZpXSyMQpCAEArPZsZ4JWmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e8:e1:6c:b7:ac:d0:0e:3c:41:a3:dd:45:dc:a0:cf:b9:18:
         5d:9f:9f:d5:5c:6c:e5:94:f8:59:82:9b:b5:ac:09:21:de:e3:
         9b:29:2e:ee:dc:52:06:33:b3:a4:e2:3e:87:16:c6:3a:0a:d9:
         c2:65:da:34:a5:be:77:00:78:54:65:35:c8:be:cd:84:5e:72:
         49:fc:f4:1d:bb:e2:51:4d:87:fb:3c:8d:0f:b2:d3:dc:0c:da:
         b3:ea:82:b4:d5:5c:ef:f8:e2:e2:c1:11:cc:24:91:6a:d4:39:
         4f:3b:92:ce:6a:b3:1a:f1:0d:68:40:d9:95:26:fb:7c:e0:83:
         ab:d5:1f:d4:e0:3c:61:1e:8a:8a:1d:8a:d6:f0:39:40:e5:c9:
         3e:81:cf:3c:ae:42:e9:c0:eb:d8:b6:1d:da:e5:82:3a:1e:08:
         2a:29:27:11:da:8d:b6:21:ec:02:c6:63:e3:a5:f9:ca:12:01:
         de:11:ea:4a:15:eb:27:8b:81:c6:f1:84:6b:af:1f:08:ec:fc:
         f8:59:de:7f:de:8a:98:b5:97:f8:e1:ad:fe:bf:d6:3a:ac:5c:
         ee:fd:b5:7c:a1:30:f6:df:1e:c5:48:ff:f4:02:98:0d:41:2e:
         ae:7a:58:e9:c9:d2:61:28:29:99:3d:e4:d8:75:d7:e1:63:79:
         8e:71:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:32 2024 by rpki-client on console-ams.rpki-client.org