Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/IObUdVSjv9F5-G1Izh1vNxL4Q1s.roa
File:                     IObUdVSjv9F5-G1Izh1vNxL4Q1s.roa (raw, json)
Hash identifier:          oexEKLfCYcIODcI5KbYaFztEtK34oKjl1DkGpqA62Lo=
Subject key identifier:   20:E6:D4:75:54:A3:BF:D1:79:F8:6D:48:CE:1D:6F:37:12:F8:43:5B
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       029EDAB9
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/IObUdVSjv9F5-G1Izh1vNxL4Q1s.roa
Signing time:             Mon 09 May 2022 20:33:00 +0000
ROA not before:           Mon 09 May 2022 20:33:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        195.18.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43965113 (0x29edab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: May  9 20:33:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20e6d47554a3bfd179f86d48ce1d6f3712f8435b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:0c:db:e0:66:ad:2f:bd:ec:8b:2d:67:fd:
                    02:1c:a8:26:8c:02:12:6b:58:b8:27:f9:16:0f:aa:
                    42:01:dd:3e:08:ca:d1:b2:6b:d0:4b:32:2b:ac:5c:
                    c7:dd:11:85:86:d8:65:dc:fa:bf:cc:fc:cb:01:8f:
                    57:85:b2:de:41:51:1c:8c:ab:5f:09:e8:33:0b:c8:
                    d8:71:7d:22:f7:e5:d8:69:35:28:36:fc:c3:07:ba:
                    23:29:ff:97:1f:0b:69:db:59:2f:09:dd:d8:cd:5d:
                    8b:37:61:ca:81:ee:b2:45:94:7e:e4:5a:fc:2d:a3:
                    b1:8d:25:ae:86:f5:27:8f:48:e6:fa:9a:23:dc:6d:
                    54:b5:fa:fc:01:17:92:7e:fa:e6:37:83:94:c3:89:
                    3d:33:04:47:e2:ba:f4:40:51:a9:33:12:5f:e4:2f:
                    9e:33:f1:1d:ae:79:0f:c0:ee:84:1c:79:84:6c:b0:
                    9b:4b:36:b1:47:53:e8:e9:3c:f1:32:1c:29:fe:47:
                    50:a5:f2:79:e5:b7:c5:5e:1c:4f:4d:c2:97:56:4a:
                    62:90:85:84:74:2f:e1:c7:68:49:ec:08:cd:7a:0c:
                    03:3e:53:18:dc:79:70:14:5e:4b:31:f4:7c:07:44:
                    e6:64:bb:65:81:a5:0f:f7:f1:84:37:ff:af:0d:69:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E6:D4:75:54:A3:BF:D1:79:F8:6D:48:CE:1D:6F:37:12:F8:43:5B
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/IObUdVSjv9F5-G1Izh1vNxL4Q1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.18.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:2d:64:3c:55:90:03:e4:14:35:5c:37:37:dd:bf:5c:e7:c7:
         e7:24:46:12:43:f8:9d:30:b5:62:8e:1d:91:25:55:05:e3:cf:
         90:75:8a:62:84:15:66:87:f4:24:c1:5b:f7:99:83:87:52:a6:
         af:92:35:ff:62:53:e1:82:90:c9:42:d3:cb:0f:46:7d:ca:3b:
         32:e0:75:99:7d:54:32:e7:3a:6d:38:74:ec:37:ff:77:1d:9f:
         33:c4:0f:b8:32:6d:68:06:6d:77:05:d0:21:5f:fa:9c:99:81:
         b2:a8:e3:90:21:eb:83:36:e6:b9:65:fc:7d:5a:bc:48:84:1a:
         04:e4:17:6e:10:b9:69:6c:ae:69:da:ef:05:a9:ad:e9:5e:44:
         02:89:aa:01:99:5c:75:19:64:6a:0b:c4:95:1e:a3:df:21:ee:
         e5:a8:9b:89:6a:8e:20:3b:25:9e:19:8d:ab:d3:6f:6f:da:d0:
         4c:bc:03:fd:c7:4e:a3:ed:cb:83:bd:ec:1a:4f:ea:c7:da:24:
         e0:aa:3a:97:4b:eb:7b:a2:2e:dc:16:05:8e:c5:48:85:31:f3:
         b9:df:17:81:02:c9:83:fe:0f:4f:07:d9:8c:76:54:97:4f:46:
         e4:75:c7:b1:f8:bc:38:f1:f5:71:71:f7:44:9c:6b:c6:96:c2:
         d8:a9:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org