Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/997f3f-1046-4d7a-9cf9-1dc073c17218/1/3jBFouEEMWdaGy7m_YlumwwJIJ8.roa
File:                     3jBFouEEMWdaGy7m_YlumwwJIJ8.roa (raw, json)
Hash identifier:          7scUWMENwPZpahSQxdUTj6LpeJ+UEnpSbq1HLnpqydE=
Subject key identifier:   DE:30:45:A2:E1:04:31:67:5A:1B:2E:E6:FD:89:6E:9B:0C:09:20:9F
Certificate issuer:       /CN=a3ffd5c38e44f1bb4c3be3f3611f8927eee4d7f7
Certificate serial:       01179054
Authority key identifier: A3:FF:D5:C3:8E:44:F1:BB:4C:3B:E3:F3:61:1F:89:27:EE:E4:D7:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o__Vw45E8btMO-PzYR-JJ-7k1_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/997f3f-1046-4d7a-9cf9-1dc073c17218/1/3jBFouEEMWdaGy7m_YlumwwJIJ8.roa
Signing time:             Sat 01 Jan 2022 12:02:02 +0000
ROA not before:           Sat 01 Jan 2022 12:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        176.56.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18321492 (0x1179054)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ffd5c38e44f1bb4c3be3f3611f8927eee4d7f7
        Validity
            Not Before: Jan  1 12:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de3045a2e10431675a1b2ee6fd896e9b0c09209f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:7c:df:6e:31:8c:67:f4:57:82:3d:99:40:
                    b8:0e:4f:b1:56:6a:cd:f4:8d:58:fc:68:d7:32:8f:
                    84:f2:3d:2c:6c:a9:2c:b9:f1:0d:8c:30:cf:b2:ff:
                    ff:c7:37:99:34:12:8a:a7:2e:a4:a7:a4:1a:c2:d9:
                    2b:ef:d1:66:b7:5d:c8:1c:9c:dc:9b:bc:00:bd:0e:
                    a1:52:ec:3c:27:b9:a4:77:31:f0:e7:21:c7:39:02:
                    bb:30:dc:8a:e0:57:10:62:73:1b:ef:06:10:c0:40:
                    20:31:56:67:fa:fe:36:ed:74:a9:7b:32:33:c1:f9:
                    d0:a2:b1:76:fc:ae:78:6c:43:aa:d5:24:dc:f1:78:
                    ef:a2:ec:df:72:a9:70:0b:d2:00:bd:b5:46:e1:3f:
                    a7:45:50:94:e9:5b:0b:2d:86:c3:00:f2:db:88:d1:
                    96:f6:e7:bf:5b:c9:f0:31:91:0e:80:a4:59:c2:e3:
                    6d:51:6d:9c:05:80:f9:0c:e3:bc:75:a6:fd:4d:b4:
                    58:61:7d:fc:8d:45:9c:bc:96:e4:21:f0:a4:2d:f2:
                    ae:09:26:fe:cf:9f:2a:71:70:ce:bb:e6:bb:af:df:
                    93:38:8c:f6:a3:ef:a1:93:3d:aa:15:e8:76:55:81:
                    46:d9:7a:1b:41:c6:ff:2b:b7:2a:6b:8d:b2:ea:86:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:45:A2:E1:04:31:67:5A:1B:2E:E6:FD:89:6E:9B:0C:09:20:9F
            X509v3 Authority Key Identifier:
                keyid:A3:FF:D5:C3:8E:44:F1:BB:4C:3B:E3:F3:61:1F:89:27:EE:E4:D7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o__Vw45E8btMO-PzYR-JJ-7k1_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/997f3f-1046-4d7a-9cf9-1dc073c17218/1/3jBFouEEMWdaGy7m_YlumwwJIJ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/997f3f-1046-4d7a-9cf9-1dc073c17218/1/o__Vw45E8btMO-PzYR-JJ-7k1_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:be:d1:b7:9a:15:66:fc:ad:01:82:ef:f1:23:24:c8:b5:b2:
         bf:46:53:42:13:09:24:82:ac:95:17:5c:62:62:59:7c:fb:29:
         a6:83:4a:a8:79:38:18:9e:22:eb:4d:4b:86:84:e0:03:e0:e6:
         a2:bf:6a:cb:d3:b9:2b:b8:54:ba:4d:c8:56:da:1c:92:a9:be:
         28:dc:6f:ed:23:8d:7e:cb:31:8f:f6:86:8b:cd:4a:ed:7f:45:
         80:1e:ce:06:2c:7b:c8:ba:1d:00:45:19:39:b8:5f:d6:d4:50:
         be:4c:6b:5f:06:fa:ec:70:c4:88:3b:4d:57:d9:9c:92:8e:4b:
         f6:ff:a8:9d:2a:27:58:29:4e:87:d7:26:a4:44:0a:dd:b7:59:
         6f:70:7e:48:c1:cb:52:5a:9d:45:14:20:f1:92:75:55:ac:26:
         72:c4:37:62:84:70:1d:02:f4:cd:4d:5e:8e:33:f5:fc:5a:56:
         30:30:0e:23:ed:c7:2e:04:2a:2b:6a:a1:24:20:ea:c9:6e:b5:
         13:92:1e:ad:b5:59:8c:49:92:c6:34:70:1f:bc:ec:c7:03:17:
         1d:24:a5:bc:27:a5:35:bc:b8:45:c9:8a:1b:3a:0e:68:84:72:
         34:e2:ad:2f:09:b7:b7:ff:5c:51:64:09:ef:bd:24:85:59:06:
         ca:ce:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org