Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa
File:                     Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa (raw, json)
Hash identifier:          tCibCjhD6ShGpzBTuDYP9aCncJLHY271eyzQ4VOzSPA=
Subject key identifier:   1A:FE:27:A8:85:D2:35:A3:D6:A8:10:D1:59:47:C4:6B:52:BE:A1:9E
Certificate issuer:       /CN=a61db78c7f21285866dab4a45a544dce559f43da
Certificate serial:       02D0C1E2
Authority key identifier: A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa
Signing time:             Fri 06 May 2022 11:07:37 +0000
ROA not before:           Fri 06 May 2022 11:07:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        193.32.239.0/24 maxlen: 24
                          193.32.236.0/24 maxlen: 24
                          193.32.236.0/22 maxlen: 24
                          193.32.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47235554 (0x2d0c1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61db78c7f21285866dab4a45a544dce559f43da
        Validity
            Not Before: May  6 11:07:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1afe27a885d235a3d6a810d15947c46b52bea19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:01:b1:41:1b:22:a7:8d:ea:82:21:e5:6a:
                    ac:be:fa:21:b9:21:7c:21:48:7f:39:25:41:29:ad:
                    bf:f9:9e:66:67:7b:4d:fd:d4:32:32:2a:df:66:70:
                    dd:5d:77:99:cb:21:93:f0:d2:7c:22:2f:a3:0c:e5:
                    eb:38:07:b0:10:ac:28:fd:d3:9a:14:63:cc:cf:62:
                    80:3e:e0:b5:fe:01:e3:32:ea:20:c0:8e:17:5f:70:
                    9d:ad:05:52:15:d5:7a:9e:84:49:44:12:8e:cc:a5:
                    6a:8a:97:0a:50:b8:04:a2:df:19:10:9c:e2:03:4a:
                    23:57:48:48:3d:3f:59:e8:bb:3a:34:a6:09:bb:0e:
                    c3:04:5d:14:27:24:39:09:1e:1a:af:d4:b4:c4:bc:
                    aa:38:b8:32:fe:d0:a3:cf:ac:88:7e:63:9f:49:01:
                    bd:1a:d7:73:04:60:dd:1f:80:f1:8c:18:cc:d1:80:
                    91:35:eb:2b:c8:a7:eb:f9:d5:9a:d3:f4:36:1e:8a:
                    8e:bf:b7:b1:01:e6:35:ac:c0:92:4e:83:cf:3a:43:
                    59:a5:4b:ba:d0:5d:93:33:d7:3b:78:fa:3c:f8:b2:
                    9e:5c:9d:4f:57:7f:4b:7e:f8:fe:67:d5:66:c9:19:
                    7e:7d:33:97:af:34:a7:65:ef:65:38:ba:da:c5:ed:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FE:27:A8:85:D2:35:A3:D6:A8:10:D1:59:47:C4:6B:52:BE:A1:9E
            X509v3 Authority Key Identifier:
                keyid:A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:c0:75:6b:07:97:f3:65:9e:0e:63:73:9c:5e:5a:f1:d5:
         49:86:21:47:13:6f:03:8b:79:55:6c:d5:40:d8:2d:90:54:2d:
         89:99:bf:ee:71:d5:7f:a2:0b:16:38:06:1a:55:1f:75:29:ce:
         24:2e:eb:d4:72:bf:6b:de:e9:e4:f6:8c:2c:c0:04:05:20:ae:
         e1:39:a6:13:4d:bd:4e:54:47:36:5b:31:36:6d:d9:df:a1:df:
         f6:a2:46:5d:96:78:8f:9b:c0:2c:91:da:9b:87:5f:90:ae:bf:
         8c:c1:46:f9:7e:3c:4b:ce:f9:ae:1b:4c:fb:12:d3:9a:30:bf:
         13:0b:f6:e5:84:33:d6:c9:2e:6f:60:de:87:56:ba:54:e0:1c:
         7b:9c:28:da:e7:50:d5:c8:1c:03:77:ac:fa:a2:fb:b8:ee:5f:
         7f:70:30:b6:09:9d:56:2b:13:90:74:f3:6c:ab:0b:81:8a:45:
         04:d0:1f:4f:aa:a7:be:b8:57:85:c4:c5:f1:d0:2d:cf:64:df:
         f1:27:4f:64:18:70:66:c4:5d:79:04:a6:85:8d:d2:a9:e9:fc:
         65:03:dd:16:ed:80:94:4e:6d:9b:9d:fd:92:92:5d:6c:11:dc:
         83:4b:ae:ff:4e:5e:c8:d3:31:40:51:0e:65:71:94:ff:f1:d4:
         27:f5:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:26 2024 by rpki-client on console-fra.rpki-client.org