Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/rN6HkGM955gFZWO96KKjJZLmaCk.roa
File:                     rN6HkGM955gFZWO96KKjJZLmaCk.roa (raw, json)
Hash identifier:          Ed9ek+Ax/raFkP1OO/PHEHahwihI2b1QDt5F4yhqn6c=
Subject key identifier:   AC:DE:87:90:63:3D:E7:98:05:65:63:BD:E8:A2:A3:25:92:E6:68:29
Certificate issuer:       /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial:       018480FB9E9668B1F67B0723A964C528C96F
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/rN6HkGM955gFZWO96KKjJZLmaCk.roa
Signing time:             Wed 16 Nov 2022 15:08:04 +0000
ROA not before:           Wed 16 Nov 2022 15:08:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211252
IP address blocks:        85.209.134.0/24 maxlen: 24
                          85.209.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:80:fb:9e:96:68:b1:f6:7b:07:23:a9:64:c5:28:c9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
        Validity
            Not Before: Nov 16 15:08:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=acde8790633de798056563bde8a2a32592e66829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1c:28:20:d6:68:79:94:59:8e:7c:30:44:14:
                    a4:ae:8e:d2:89:0d:f0:8c:4c:6c:4e:48:62:28:cb:
                    89:05:53:bf:62:d1:69:89:a4:ba:86:89:f2:49:1e:
                    cd:7b:03:1f:b0:89:40:30:96:1e:4e:8d:8b:5a:92:
                    79:7e:c0:7f:3e:ee:02:bb:e9:8c:a2:8e:0e:1c:10:
                    41:8d:bc:6a:73:5c:fa:16:b1:23:ce:75:ea:95:9a:
                    99:5b:b0:92:34:2a:73:0d:63:42:13:b8:8b:60:2e:
                    a9:32:4f:67:46:4f:49:3f:c3:58:27:4c:94:24:25:
                    7b:29:ea:0b:d5:14:de:7d:ef:1b:3c:d8:52:0b:68:
                    c1:7e:cf:45:94:e0:b9:67:25:ac:9e:26:4e:b7:ca:
                    a9:91:89:e0:8d:de:3f:25:fb:dc:80:b6:55:8d:51:
                    8b:ff:1c:59:be:98:37:da:7d:ae:da:aa:9d:36:04:
                    83:c5:d4:22:94:65:b0:03:db:0b:2f:d0:db:bb:6d:
                    9c:3f:f1:bd:dc:cc:bf:db:fe:3e:63:89:a3:6c:ad:
                    20:76:2c:17:2c:7d:db:3f:81:6d:c8:58:e8:6a:1a:
                    dc:e7:5d:45:09:05:06:eb:f8:78:26:08:06:f8:30:
                    3f:f5:62:54:21:64:06:fb:6b:8d:23:2c:65:e9:59:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DE:87:90:63:3D:E7:98:05:65:63:BD:E8:A2:A3:25:92:E6:68:29
            X509v3 Authority Key Identifier:
                keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/rN6HkGM955gFZWO96KKjJZLmaCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:68:46:19:05:3a:b3:7d:9e:db:94:af:64:42:85:b3:a6:c2:
         0e:51:d3:0d:5f:7c:e8:4a:03:bb:af:8c:c7:5d:dc:af:2d:0c:
         a2:9b:c8:8e:22:85:db:6c:db:9a:31:47:af:ae:df:11:6e:ce:
         7c:c9:05:0f:76:d0:ed:cf:c3:d3:09:b1:61:97:d7:49:1c:21:
         21:14:cb:a9:bb:43:23:c9:2a:6e:36:27:1a:92:25:12:ba:49:
         94:80:5e:08:6a:96:39:9b:20:cd:fc:cf:ed:c0:74:5f:50:c3:
         53:be:3e:e0:97:19:df:02:96:c0:3e:4f:aa:e5:e7:5e:21:90:
         57:2e:48:83:43:e7:b2:43:00:02:08:9d:2c:87:d8:86:d5:16:
         8e:64:6f:5c:45:3e:55:49:af:86:41:cf:08:e2:3d:83:ed:30:
         6a:f1:dc:61:c6:69:ec:e0:05:17:9e:8d:91:14:0a:9b:54:30:
         d9:71:07:cf:ec:c5:ef:8e:79:b4:fe:de:8f:b2:71:9c:23:b2:
         2a:9d:ae:5f:f8:1d:e0:08:08:e1:7d:7f:39:7b:ae:16:1e:dc:
         48:45:97:90:09:33:6b:bf:f1:b5:00:ad:54:d3:86:5c:fb:eb:
         26:95:8e:07:54:9e:86:a6:e1:d2:2a:59:fe:6c:67:94:ed:1c:
         97:d0:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org