Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/E-29e-WELnNhXphsARw6YBlo4ag.roa
File:                     E-29e-WELnNhXphsARw6YBlo4ag.roa (raw, json)
Hash identifier:          LQwZ/7RiZJ4gNT6Nn9/A9l4KQzqBb7C4lITW6u6QMEU=
Subject key identifier:   13:ED:BD:7B:E5:84:2E:73:61:5E:98:6C:01:1C:3A:60:19:68:E1:A8
Certificate issuer:       /CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
Certificate serial:       DC0C28
Authority key identifier: 7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/E-29e-WELnNhXphsARw6YBlo4ag.roa
Signing time:             Sat 01 Jan 2022 07:02:56 +0000
ROA not before:           Sat 01 Jan 2022 07:02:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        194.26.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14421032 (0xdc0c28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
        Validity
            Not Before: Jan  1 07:02:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13edbd7be5842e73615e986c011c3a601968e1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:54:68:69:c6:79:db:c1:8d:82:69:fb:0f:
                    35:81:b3:6f:9a:f9:a1:0e:f5:5c:d5:db:fc:de:29:
                    ab:ca:11:55:9e:0f:b7:0a:91:36:26:b1:b1:8b:be:
                    de:be:35:26:76:4f:d2:ad:bd:3a:20:ae:91:f7:84:
                    a0:30:35:39:d1:ed:07:b9:d0:aa:ab:5a:58:79:cd:
                    6f:ed:26:35:67:80:ee:9e:0b:a8:d3:ce:12:22:c2:
                    59:d2:0e:7e:64:cc:9d:ea:7c:30:c7:cd:79:e4:ec:
                    92:c9:61:78:4b:2e:68:1a:68:0c:b3:9c:90:4e:93:
                    70:d9:3a:44:0f:c9:e6:7d:a2:cf:3c:88:a4:c7:35:
                    9e:bc:0d:b7:da:d2:14:ce:ab:9d:9f:d6:eb:48:33:
                    d0:48:c0:d7:46:ea:6c:b7:0e:8c:50:12:fc:bb:80:
                    a9:cc:c6:aa:0a:6a:fe:34:cc:7b:d8:e4:a3:fe:a3:
                    0e:df:08:e2:1a:36:6c:a0:a1:36:68:f8:88:7d:24:
                    ce:de:8c:8f:59:4b:9b:2e:44:c2:7c:84:75:e6:43:
                    aa:0f:96:79:a4:1a:fa:62:61:4e:85:ec:70:c2:d1:
                    91:05:d8:cf:0c:19:a1:22:f7:80:74:69:40:7a:26:
                    85:43:7f:54:38:17:74:2f:80:7e:b9:ea:dc:68:26:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:ED:BD:7B:E5:84:2E:73:61:5E:98:6C:01:1C:3A:60:19:68:E1:A8
            X509v3 Authority Key Identifier:
                keyid:7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/E-29e-WELnNhXphsARw6YBlo4ag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/fLT1mzT-WYjP6Lw9txCgoF--9Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d0:f6:fa:ec:21:db:af:d6:5d:94:f3:6b:de:0f:5b:da:38:
         95:55:f9:56:09:90:00:8d:93:65:ba:50:af:01:d4:46:13:7a:
         4c:a7:f3:2c:73:49:55:1e:23:74:dc:ed:1e:c1:ef:4d:af:3e:
         0a:55:1d:ec:70:c2:9a:80:c5:b2:56:bb:84:17:61:9c:9c:0f:
         94:1f:df:a0:31:c8:c1:94:43:13:d6:d6:e6:a5:13:34:e4:28:
         e6:57:2d:4d:7a:57:79:d6:6c:aa:a7:1f:e4:95:5c:25:a1:ae:
         da:de:71:e8:a4:89:e9:f0:28:a4:72:0d:d7:7d:30:d8:e4:09:
         79:e3:ba:0a:ad:5f:2f:c2:fe:18:10:78:8a:6a:1b:21:f2:cf:
         18:9f:d2:1e:de:90:5c:a5:69:14:8e:f3:d0:f6:aa:b6:39:2e:
         db:44:2a:8f:bf:7e:38:5f:c5:5e:bf:d8:b0:1a:0d:3f:b7:1a:
         79:d1:e2:d4:c7:d3:eb:af:5a:a9:c9:29:83:0e:5f:46:c9:f9:
         bf:55:3b:2c:df:16:e2:98:84:f4:8c:1e:d9:54:00:5a:d7:f7:
         ad:79:3d:07:61:b9:1f:88:f3:ce:87:15:10:71:08:4c:5a:a4:
         c1:e1:6c:07:38:db:b4:7d:c8:5a:2f:5f:6d:f2:70:99:90:51:
         71:0f:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:03 2024 by rpki-client on console-fra.rpki-client.org