Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/LoWTnkrGJDeU3RueCTRsc0GBlLQ.roa
File:                     LoWTnkrGJDeU3RueCTRsc0GBlLQ.roa (raw, json)
Hash identifier:          lC3YycbmMEYUf22a2O8A1BDo65Wawk2gFjg2MsReqW4=
Subject key identifier:   2E:85:93:9E:4A:C6:24:37:94:DD:1B:9E:09:34:6C:73:41:81:94:B4
Certificate issuer:       /CN=cc464d9f8f4e6fd19808857b27d3416c78a89633
Certificate serial:       0A59B50A
Authority key identifier: CC:46:4D:9F:8F:4E:6F:D1:98:08:85:7B:27:D3:41:6C:78:A8:96:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEZNn49Ob9GYCIV7J9NBbHioljM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/LoWTnkrGJDeU3RueCTRsc0GBlLQ.roa
Signing time:             Sat 01 Jan 2022 11:57:26 +0000
ROA not before:           Sat 01 Jan 2022 11:57:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48264
IP address blocks:        195.178.117.0/24 maxlen: 24
                          195.178.116.0/24 maxlen: 24
                          185.232.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173651210 (0xa59b50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc464d9f8f4e6fd19808857b27d3416c78a89633
        Validity
            Not Before: Jan  1 11:57:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e85939e4ac6243794dd1b9e09346c73418194b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0e:99:7c:95:2d:04:09:f7:4a:92:f1:89:8d:
                    25:ce:f3:11:be:ad:6e:8a:29:42:76:69:af:1c:48:
                    da:13:a5:dd:61:04:a8:b4:00:69:91:23:41:6f:9c:
                    20:b9:8e:c8:f4:7e:50:1c:95:13:8a:de:c8:21:ba:
                    8a:9d:30:90:ad:ed:42:c1:57:27:59:08:14:0b:33:
                    a9:8f:58:b6:67:88:8c:04:e0:bf:5d:18:59:51:36:
                    7a:ba:59:ac:66:62:29:8f:9d:94:b4:f5:de:d0:6e:
                    bb:82:30:8f:c5:73:75:41:39:6c:4a:27:e0:30:f6:
                    8f:23:1b:a2:1b:4a:1d:c7:81:75:55:22:2f:50:a3:
                    4a:18:8f:98:e2:b3:19:62:7c:82:91:72:3d:d7:70:
                    17:6c:de:62:48:ae:f9:4d:07:a9:f4:3e:50:06:40:
                    77:62:93:40:83:f2:d3:1c:38:f8:5f:e7:d7:1b:b3:
                    e2:06:f1:23:9a:a5:f3:c7:ec:8f:cf:50:5c:b2:a1:
                    b6:72:9e:0a:d7:c7:30:fa:93:56:20:d4:df:f0:9b:
                    76:b5:80:ff:2e:4b:74:11:3b:09:7a:bb:e8:72:87:
                    56:a3:7b:d3:f1:48:8b:79:84:b9:30:f3:f7:21:7e:
                    25:c3:3d:a5:49:0c:86:f8:7d:0f:33:af:fb:27:36:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:93:9E:4A:C6:24:37:94:DD:1B:9E:09:34:6C:73:41:81:94:B4
            X509v3 Authority Key Identifier:
                keyid:CC:46:4D:9F:8F:4E:6F:D1:98:08:85:7B:27:D3:41:6C:78:A8:96:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEZNn49Ob9GYCIV7J9NBbHioljM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/LoWTnkrGJDeU3RueCTRsc0GBlLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/zEZNn49Ob9GYCIV7J9NBbHioljM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.128.0/22
                  195.178.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:57:86:d6:b7:48:91:37:ce:81:32:01:25:ce:c3:4b:41:
         99:ce:b5:05:53:c1:b6:82:6c:98:4f:bd:c9:01:25:ad:71:25:
         20:60:7e:f8:af:f2:0f:c4:d6:14:5a:a9:7c:2a:04:8c:39:73:
         c5:ac:1e:b8:bf:01:92:47:b0:79:17:cb:85:05:2d:e1:20:f7:
         f0:e3:69:e3:f9:af:fd:a1:1c:21:40:5b:f6:ee:62:35:42:47:
         ae:82:38:cc:f2:2c:ed:6f:75:5e:d0:40:d6:25:a1:8c:cf:bb:
         91:99:7e:44:29:67:6c:f0:e3:ba:fb:90:f5:f3:9d:1f:22:8a:
         a5:5c:ae:f5:c2:8c:54:58:29:28:36:7f:37:b6:6e:f5:d4:03:
         1e:d2:64:6d:98:4e:6f:65:23:72:f5:ca:d2:73:49:c5:95:32:
         66:e2:df:a5:03:ab:e1:41:b7:01:ff:01:7e:89:5d:9f:be:30:
         ea:0e:25:03:3a:a7:4c:bb:7e:19:1e:1d:dc:01:6f:fd:c8:0c:
         c8:11:2a:d1:8f:15:23:b3:d9:e8:fc:56:21:a8:56:70:1d:10:
         92:44:1b:1a:0a:bb:cf:ce:81:15:38:eb:a6:7a:a3:0b:e6:6e:
         96:f0:9a:ba:61:67:13:14:c2:1a:3d:8b:3f:66:0b:b9:c4:ea:
         8b:be:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org