Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/eOsu92UMHy6MX3DoS1xUz9DsCOk.roa
File:                     eOsu92UMHy6MX3DoS1xUz9DsCOk.roa (raw, json)
Hash identifier:          7zfSJ9kmOVH1LY4138kG4wfsULkeQpbh0NwWPp7WI2s=
Subject key identifier:   78:EB:2E:F7:65:0C:1F:2E:8C:5F:70:E8:4B:5C:54:CF:D0:EC:08:E9
Certificate issuer:       /CN=7cf6ed2d1717e680e16e53d5b5af4dbbe688136c
Certificate serial:       01857295B342219B281153B44D6B116370B7
Authority key identifier: 7C:F6:ED:2D:17:17:E6:80:E1:6E:53:D5:B5:AF:4D:BB:E6:88:13:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPbtLRcX5oDhblPVta9Nu-aIE2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/eOsu92UMHy6MX3DoS1xUz9DsCOk.roa
Signing time:             Mon 02 Jan 2023 13:04:51 +0000
ROA not before:           Mon 02 Jan 2023 13:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211627
IP address blocks:        185.254.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:b3:42:21:9b:28:11:53:b4:4d:6b:11:63:70:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf6ed2d1717e680e16e53d5b5af4dbbe688136c
        Validity
            Not Before: Jan  2 13:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78eb2ef7650c1f2e8c5f70e84b5c54cfd0ec08e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:e8:61:f5:61:e6:15:74:62:e5:fb:e2:db:
                    29:2b:8b:fb:00:13:a9:54:a0:41:e2:d3:2d:58:f2:
                    a0:9d:31:1f:35:f3:95:c3:b3:00:c6:33:e4:8a:4f:
                    f9:55:b3:e6:95:ff:ad:c0:19:cc:ee:a7:ef:4f:01:
                    e9:0e:68:1d:40:95:d5:f7:57:e1:df:f4:6f:a9:f0:
                    c4:58:09:de:49:dc:90:4e:54:78:f3:3a:66:c9:96:
                    81:be:03:cf:ff:a7:98:9d:3b:d8:d8:41:94:0d:a8:
                    62:3d:21:ae:f0:35:10:69:10:0a:e9:d4:8b:0c:d9:
                    13:9a:b0:e0:42:26:da:b2:62:7e:a2:7e:4b:1d:91:
                    e0:ce:c0:00:f4:68:15:d8:61:98:47:09:b6:a0:97:
                    65:61:d0:a7:0d:e7:ce:34:74:07:73:8e:a3:fb:86:
                    06:aa:bb:b0:89:f1:eb:2a:2c:66:06:30:39:fc:ec:
                    07:7a:4d:3c:e6:06:c5:84:7d:09:1b:f7:36:40:0d:
                    9b:1c:48:b7:4f:9f:e8:33:ad:93:0f:14:25:29:8a:
                    dd:62:61:4d:36:de:85:bc:36:ec:21:ac:73:5e:3a:
                    ed:a7:ff:88:9f:82:36:66:46:9a:95:fc:ea:54:91:
                    63:b1:35:1f:d4:b0:e5:b0:3a:2b:f7:3a:e5:c4:05:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EB:2E:F7:65:0C:1F:2E:8C:5F:70:E8:4B:5C:54:CF:D0:EC:08:E9
            X509v3 Authority Key Identifier:
                keyid:7C:F6:ED:2D:17:17:E6:80:E1:6E:53:D5:B5:AF:4D:BB:E6:88:13:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPbtLRcX5oDhblPVta9Nu-aIE2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/eOsu92UMHy6MX3DoS1xUz9DsCOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/fPbtLRcX5oDhblPVta9Nu-aIE2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:b1:fd:b2:60:a8:5c:a1:68:20:35:7d:65:af:77:3e:8b:
         a1:4d:56:48:b9:31:e3:88:f5:57:66:ea:f2:85:07:8e:e2:fb:
         8c:c4:81:c6:82:61:04:9e:08:ad:aa:fd:91:48:9c:6d:29:34:
         a6:80:76:45:87:47:1d:c7:00:78:13:b9:8a:fb:9a:a6:81:2c:
         cb:bc:55:ac:08:10:3d:8d:ba:06:53:7b:aa:9c:aa:22:9f:f5:
         31:7b:ab:7e:03:70:f7:7b:1c:43:43:25:18:4a:92:93:bf:c5:
         ce:26:80:a2:38:14:c1:be:b9:bc:9f:4f:3b:e4:f6:f1:10:21:
         5f:c9:6c:8b:27:65:79:77:9f:91:7b:d1:95:be:aa:33:d6:e6:
         38:36:2d:2c:1c:62:c5:85:04:21:a6:d2:b0:0b:e4:19:78:65:
         32:54:3e:25:7b:75:6a:f1:8a:e4:ee:45:88:c7:c6:4f:93:bf:
         81:06:52:fc:94:bc:1f:11:fd:13:42:36:59:71:3c:99:79:90:
         ae:47:90:9b:a5:59:de:cd:26:46:f8:5a:2b:79:9e:ef:55:e6:
         46:61:66:0b:e2:99:f8:08:0e:61:0d:85:ca:4f:60:fb:0e:93:
         07:e6:19:a2:d8:ec:d3:8d:a8:f2:80:fa:6d:4e:a7:8a:68:09:
         f2:c2:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:30 2024 by rpki-client on console-fra.rpki-client.org