Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/EOoV1o9ss7-zZMFSk2GUZb8rjz8.roa
File:                     EOoV1o9ss7-zZMFSk2GUZb8rjz8.roa (raw, json)
Hash identifier:          FLd4BS37pxOcH7gDsbX9436f+QDJOwKAQ0iZhapZudE=
Subject key identifier:   10:EA:15:D6:8F:6C:B3:BF:B3:64:C1:52:93:61:94:65:BF:2B:8F:3F
Certificate issuer:       /CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
Certificate serial:       D92164
Authority key identifier: 7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/EOoV1o9ss7-zZMFSk2GUZb8rjz8.roa
Signing time:             Sat 01 Jan 2022 07:02:54 +0000
ROA not before:           Sat 01 Jan 2022 07:02:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        194.26.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14229860 (0xd92164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
        Validity
            Not Before: Jan  1 07:02:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10ea15d68f6cb3bfb364c15293619465bf2b8f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:85:7d:c8:37:bb:8d:ab:50:0e:68:ff:2d:
                    44:d0:bd:14:ee:af:fd:43:91:c5:ca:81:10:2c:65:
                    50:5c:0d:6c:7c:92:2e:68:47:fb:86:3e:1e:f8:7b:
                    fa:fb:06:ee:40:2e:24:16:4f:e1:76:27:ec:9b:84:
                    54:be:1b:31:be:bd:e1:80:10:45:ec:26:fd:24:75:
                    ce:bc:90:c9:2c:6b:e2:67:3b:28:20:ea:35:a6:28:
                    fd:0e:83:6d:ec:7f:56:ae:cb:87:dd:9c:74:94:c4:
                    99:ea:ca:40:81:52:d8:8d:89:84:f1:2d:0d:57:ce:
                    75:f4:d3:76:04:42:c3:10:1d:d8:c3:d5:c8:41:25:
                    d2:5f:b1:70:04:80:44:65:a2:3e:bd:b8:b0:83:34:
                    03:73:e8:69:05:f4:f1:f9:3c:b0:9f:48:60:0b:cb:
                    72:b4:58:95:32:39:8a:0a:b1:65:fd:82:56:ab:61:
                    2f:d0:4d:46:8e:ca:1f:d1:39:66:99:33:67:2a:23:
                    de:c0:6f:e2:8f:eb:08:01:c9:33:f7:de:c0:80:0a:
                    0a:3c:10:f4:69:8f:9e:fe:b9:7d:ef:66:7b:13:f7:
                    5a:44:4b:b4:1b:49:e6:e8:fa:71:65:84:36:35:3f:
                    c6:9c:8f:7c:18:6e:8b:a7:fa:95:74:d8:4b:c3:64:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:15:D6:8F:6C:B3:BF:B3:64:C1:52:93:61:94:65:BF:2B:8F:3F
            X509v3 Authority Key Identifier:
                keyid:7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/EOoV1o9ss7-zZMFSk2GUZb8rjz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/fLT1mzT-WYjP6Lw9txCgoF--9Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:eb:38:ea:db:0d:c0:14:68:1c:a2:45:60:52:98:8a:89:
         fa:c3:04:86:07:81:cc:46:2f:ca:77:22:77:01:2b:ec:b3:6b:
         56:b6:ca:4a:b1:51:cf:a8:d9:2d:87:b0:78:0a:dd:0b:45:45:
         d1:57:b8:dd:e6:e6:73:ed:32:a5:d8:bd:b5:d5:3c:33:fb:f5:
         0e:67:ac:f4:2a:85:d1:36:5a:fc:60:06:c3:02:10:3f:9b:b9:
         e5:2e:36:ce:93:bf:ce:9f:23:35:e8:54:77:b3:b0:83:9e:a6:
         16:c5:70:98:0a:5f:6d:f6:aa:90:14:b6:e2:0e:cd:24:b5:22:
         cc:cf:b9:7e:e1:5a:9c:45:06:e1:6f:47:6f:47:4e:3a:23:04:
         1d:7d:89:4a:e1:5c:3d:d6:21:7d:97:80:7a:01:8c:64:59:fd:
         ba:52:02:97:19:a6:2e:5b:56:89:a3:9f:36:5d:fe:44:28:a1:
         41:fc:79:14:f0:0c:da:5a:0b:a9:f2:56:88:cd:1e:83:6d:f0:
         29:5f:dc:f1:e1:2d:af:7c:db:7a:7a:aa:22:c7:2b:1f:bc:c5:
         b9:f1:5b:06:c5:8d:a4:63:b3:27:08:04:91:c2:99:c9:a1:c1:
         8a:f3:97:a6:7c:6e:36:39:20:52:7b:47:0f:fd:e3:1b:bd:bb:
         91:b5:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:21 2024 by rpki-client on console-ams.rpki-client.org