Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/qoItVMuTd4nBzbeG3UON9VuAdh8.roa
File:                     qoItVMuTd4nBzbeG3UON9VuAdh8.roa (raw, json)
Hash identifier:          11nhHOVtgiRlxdi73IF9TPJpc7reIyuMQhOV2qpHTfA=
Subject key identifier:   AA:82:2D:54:CB:93:77:89:C1:CD:B7:86:DD:43:8D:F5:5B:80:76:1F
Certificate issuer:       /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial:       F500C4
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/qoItVMuTd4nBzbeG3UON9VuAdh8.roa
Signing time:             Sat 01 Jan 2022 11:01:12 +0000
ROA not before:           Sat 01 Jan 2022 11:01:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        178.212.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16056516 (0xf500c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
        Validity
            Not Before: Jan  1 11:01:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa822d54cb937789c1cdb786dd438df55b80761f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:d9:6c:f2:26:b8:2e:6d:1d:6b:b7:08:c7:
                    ca:56:9a:89:f4:36:be:93:c9:3b:73:a4:98:50:26:
                    42:a1:09:79:20:59:15:e4:63:b0:4d:56:51:c9:23:
                    e8:d8:eb:3a:60:ce:70:fa:51:a6:1b:1c:1c:b1:99:
                    e5:f2:74:bb:c4:c0:77:a1:cd:7a:11:b3:2e:72:6b:
                    dd:71:55:24:f7:08:4e:21:c9:79:e1:a9:ea:f6:cd:
                    a0:c6:71:f3:79:dc:a9:ec:ab:f8:77:d0:81:26:bd:
                    6b:7a:31:42:68:92:cd:ab:f6:a1:21:b7:1b:aa:d2:
                    b1:2a:a9:10:70:f4:3c:fb:e9:d5:de:50:fb:64:65:
                    2e:6c:7f:9c:80:81:a7:95:99:95:7c:6e:28:0b:e9:
                    e4:16:aa:b4:37:40:39:dd:ea:70:50:f9:b2:f6:61:
                    b7:bb:c6:46:c3:02:03:28:1e:c1:7f:33:6b:45:e1:
                    a9:fd:7b:ed:2b:ea:2e:b9:5e:a0:ab:90:c3:95:60:
                    e8:ec:dc:8f:f5:58:0f:7a:5c:10:15:17:20:7b:a8:
                    6e:15:07:f8:f6:89:76:44:d9:e0:6e:d2:85:86:ac:
                    80:c3:ca:fa:5e:62:eb:39:42:2d:9b:c4:b0:1c:f2:
                    48:fa:05:8d:05:1d:32:f1:7a:b1:ef:b0:eb:da:cf:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:2D:54:CB:93:77:89:C1:CD:B7:86:DD:43:8D:F5:5B:80:76:1F
            X509v3 Authority Key Identifier:
                keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/qoItVMuTd4nBzbeG3UON9VuAdh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d1:39:3e:b8:d4:9d:09:5f:97:46:4c:6a:a0:94:f7:ff:1b:
         76:18:6f:33:b7:dd:d6:93:b7:f2:e2:d9:e3:d6:f9:26:fa:b4:
         d8:27:af:11:16:b0:34:b4:15:9c:37:f2:a9:d3:54:95:23:d9:
         15:72:59:f5:91:2a:40:4c:14:c8:41:80:be:c5:57:d5:3a:03:
         8f:5b:ce:74:d1:6c:01:13:ab:2a:f4:a8:4c:ab:0a:50:e3:f9:
         04:5c:f7:e4:26:80:e6:55:e4:75:8b:43:33:d7:03:11:b3:77:
         26:ea:3b:d0:90:04:d1:97:c4:2b:bc:6e:aa:a5:72:f0:df:c8:
         78:5d:9e:ea:64:1e:66:00:97:de:de:87:00:80:ad:81:71:14:
         f7:31:54:0b:63:8e:2a:8a:26:9c:ce:0e:51:ce:a6:a9:9d:b0:
         4f:03:ee:a8:65:07:d2:3f:ac:96:95:a4:f8:c2:11:5c:ec:5e:
         96:37:8d:10:ca:8b:f2:e7:6e:a1:fc:e4:49:56:63:97:1e:a7:
         b3:93:c4:29:a5:c7:6a:d7:c3:72:df:6c:71:5b:a3:56:93:fb:
         fe:e5:c0:11:e9:6b:c8:66:7e:c3:e1:7e:10:e9:4b:f3:fc:ec:
         82:51:96:a4:89:8d:34:5c:a0:3e:6f:5c:d9:a0:d4:de:93:33:
         93:ad:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:32 2024 by rpki-client on console-ams.rpki-client.org