Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/HViOA4i0OsLfOp07byuYOmMJXk4.roa
File:                     HViOA4i0OsLfOp07byuYOmMJXk4.roa (raw, json)
Hash identifier:          Kf1m7+zMwkq71F/HFdTIf3aYTFtCF0kP0842csYozPI=
Subject key identifier:   1D:58:8E:03:88:B4:3A:C2:DF:3A:9D:3B:6F:2B:98:3A:63:09:5E:4E
Certificate issuer:       /CN=82dfd470782f8c4b359d7b9ffad3f660f6a42c32
Certificate serial:       11AB15DD
Authority key identifier: 82:DF:D4:70:78:2F:8C:4B:35:9D:7B:9F:FA:D3:F6:60:F6:A4:2C:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gt_UcHgvjEs1nXuf-tP2YPakLDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/HViOA4i0OsLfOp07byuYOmMJXk4.roa
Signing time:             Sat 01 Jan 2022 03:57:27 +0000
ROA not before:           Sat 01 Jan 2022 03:57:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202762
IP address blocks:        185.155.74.0/24 maxlen: 24
                          185.155.72.0/24 maxlen: 24
                          185.155.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296424925 (0x11ab15dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82dfd470782f8c4b359d7b9ffad3f660f6a42c32
        Validity
            Not Before: Jan  1 03:57:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1d588e0388b43ac2df3a9d3b6f2b983a63095e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:19:5b:ff:c8:0a:12:ec:3d:12:de:6b:5b:
                    45:fa:00:78:81:b5:31:bf:d5:0a:93:1c:55:d0:2a:
                    7d:b2:11:40:c4:15:1d:43:f4:31:c5:ad:76:d5:88:
                    66:73:2b:3f:57:b8:84:c6:13:f7:5a:5e:8f:a9:e1:
                    b2:7f:e3:38:40:16:fa:71:20:3d:28:04:6a:89:41:
                    6c:f4:6d:de:3b:19:bd:eb:67:69:4e:96:c9:f6:2e:
                    14:46:27:33:55:ac:ab:67:65:91:8f:38:ee:63:a7:
                    26:88:18:2c:ff:37:10:7b:61:d4:ee:1f:37:1f:86:
                    2b:a0:cc:0c:fa:6a:65:c6:c4:b8:8e:8f:c9:51:6a:
                    82:9b:2e:36:5d:43:bf:3e:c7:12:f6:4b:6c:d8:32:
                    9e:3d:fb:44:2f:2d:5e:67:b5:db:43:82:32:1c:ce:
                    08:9c:c3:38:ee:bf:dd:bf:2b:9a:81:07:b4:60:f4:
                    1a:cb:b5:33:21:ef:dc:ed:0a:c9:71:06:7f:a7:d0:
                    90:4c:68:3d:9e:e7:33:df:fc:21:c0:4d:89:6c:02:
                    b7:61:f1:35:93:50:90:71:d7:90:20:9a:ba:b7:80:
                    e7:0f:19:ce:a1:76:47:af:10:f7:e0:9e:17:21:63:
                    9a:42:fe:d8:a5:a9:d0:08:50:74:0e:4c:fa:24:3e:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:58:8E:03:88:B4:3A:C2:DF:3A:9D:3B:6F:2B:98:3A:63:09:5E:4E
            X509v3 Authority Key Identifier:
                keyid:82:DF:D4:70:78:2F:8C:4B:35:9D:7B:9F:FA:D3:F6:60:F6:A4:2C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gt_UcHgvjEs1nXuf-tP2YPakLDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/HViOA4i0OsLfOp07byuYOmMJXk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/gt_UcHgvjEs1nXuf-tP2YPakLDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.72.0-185.155.74.255

    Signature Algorithm: sha256WithRSAEncryption
         80:af:94:80:96:c0:57:09:2c:34:f8:45:c6:d3:41:09:49:ac:
         a2:ad:df:fb:3d:68:4a:71:14:ad:b6:43:ba:0c:79:18:e9:2c:
         67:d3:c3:e4:f1:21:17:89:f0:7f:84:0d:8c:7a:1e:47:e3:13:
         13:b3:34:47:4c:cf:0a:c8:d7:88:3e:fd:ff:ba:9e:b6:ba:0f:
         ed:07:09:81:4a:a8:e7:9a:82:12:f5:23:df:af:b3:a8:c1:ba:
         87:a5:dc:a5:ee:a2:38:0e:f3:0f:93:e7:23:43:eb:69:93:28:
         85:8a:24:ce:49:f8:f1:4a:cc:95:05:9d:80:9e:6b:5a:e3:1e:
         12:fd:34:83:66:96:70:cf:8a:d9:02:0c:5a:7e:55:6b:43:53:
         94:4e:6f:28:af:aa:ab:03:e4:55:03:b9:95:56:ea:a6:ba:2a:
         de:18:aa:b1:a8:08:3b:88:c9:4e:b5:44:c1:58:14:a8:2e:64:
         ad:39:9c:05:cd:57:dc:45:df:a2:a1:65:bd:6f:46:bd:bd:8d:
         45:22:06:e8:1c:a6:34:5b:c8:f4:ca:1c:2a:a0:dd:76:30:87:
         97:20:ae:88:54:d3:a6:1c:a3:e2:23:1b:8d:4b:a1:04:66:65:
         8c:ee:4a:96:ff:db:eb:67:40:fe:72:43:e0:69:f3:56:59:6e:
         98:22:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:33 2024 by rpki-client on console-fra.rpki-client.org