Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/KhwYqnelzKXo7Iq_vXgTSvFCM2U.roa
File:                     KhwYqnelzKXo7Iq_vXgTSvFCM2U.roa (raw, json)
Hash identifier:          8IBJvFlfDPNO5PTFin10CAopPwrp/nfptxTIMKQRlE4=
Subject key identifier:   2A:1C:18:AA:77:A5:CC:A5:E8:EC:8A:BF:BD:78:13:4A:F1:42:33:65
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       02E06CC3
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/KhwYqnelzKXo7Iq_vXgTSvFCM2U.roa
Signing time:             Tue 07 Jun 2022 14:52:02 +0000
ROA not before:           Tue 07 Jun 2022 14:52:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9123
IP address blocks:        213.226.125.0/24 maxlen: 24
                          213.226.124.0/24 maxlen: 24
                          213.226.126.0/24 maxlen: 24
                          213.226.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48262339 (0x2e06cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: Jun  7 14:52:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a1c18aa77a5cca5e8ec8abfbd78134af1423365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:83:c6:f0:8c:f9:44:8b:fb:54:05:a4:fd:
                    9e:89:65:90:6c:60:11:f1:23:5e:8c:3c:1a:44:86:
                    2e:bb:45:82:66:66:b2:ab:18:e5:9b:c5:bf:0b:f5:
                    43:31:67:5d:11:8f:41:8a:00:14:27:92:e3:be:98:
                    79:4a:54:d5:e1:2e:65:b5:05:21:8d:5a:cf:1c:a2:
                    ff:2a:ab:c1:65:da:d5:7b:11:aa:bb:05:7a:01:00:
                    a6:a5:d5:f4:12:db:67:c9:17:a5:cc:c8:27:ef:43:
                    c8:21:55:f6:6f:8c:f8:e2:d3:0e:0b:8b:44:4c:30:
                    a9:ce:88:4b:30:a1:9c:4b:37:13:c3:9b:52:4b:5f:
                    e1:01:b1:5d:5a:71:f7:62:24:11:19:2b:6f:bd:73:
                    66:cf:5c:52:20:65:ba:67:4b:65:5b:f3:38:bd:32:
                    7c:4c:39:56:76:6a:a6:bf:ab:33:4b:05:a5:55:68:
                    8b:de:a9:7b:53:c6:74:c3:1a:ab:d4:d1:fe:6b:da:
                    ae:6d:c6:70:4b:4d:5b:fc:29:91:aa:9e:cc:04:dd:
                    f2:0c:60:d7:c9:92:8c:32:86:e6:cb:2a:e1:0b:1b:
                    37:f3:f1:d5:0a:b2:11:40:ec:47:ed:c9:76:51:6a:
                    d9:8a:b0:79:1c:1c:cb:c4:25:15:b9:1a:f1:15:28:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1C:18:AA:77:A5:CC:A5:E8:EC:8A:BF:BD:78:13:4A:F1:42:33:65
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/KhwYqnelzKXo7Iq_vXgTSvFCM2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.226.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:d6:75:2e:56:d0:11:4f:40:21:92:eb:8d:f4:d2:7d:10:35:
         72:47:a9:f7:ad:27:f9:96:f9:c8:4e:9e:a6:ca:c0:9c:42:84:
         34:bd:8a:7e:da:e4:84:ab:fe:de:d3:19:49:aa:a5:07:07:a9:
         6a:42:e8:94:52:cf:cc:ed:f0:90:33:57:1e:49:ac:e2:54:06:
         bf:14:75:6b:f4:3d:2c:a6:a5:d5:a9:25:3b:fd:93:4a:73:b7:
         df:85:d8:e3:39:99:96:60:d6:52:19:c6:4d:fb:f6:dd:23:20:
         6d:0c:24:48:0d:7d:d8:51:71:6a:d4:6a:86:ab:05:f2:4d:fa:
         12:53:f8:2e:e0:c5:cb:9d:31:40:54:3d:9d:d9:73:e2:a3:ca:
         ba:82:13:57:e2:c0:36:24:6d:f2:82:32:17:c2:c5:21:a2:cb:
         b3:cf:9d:97:25:3f:a1:12:87:3f:53:89:ae:7f:ad:0a:16:70:
         95:ee:25:ba:6e:5d:8d:0c:91:0d:ab:17:64:34:af:5f:44:bd:
         d0:77:6b:30:41:6a:a8:be:39:5c:d5:17:ea:71:3b:fc:2e:45:
         30:36:fa:ca:a4:18:c2:60:3f:43:df:a2:1d:dc:ea:1b:1e:62:
         79:44:5f:5d:73:1e:2b:60:62:e2:62:4a:f1:1c:2b:07:41:b1:
         dd:12:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org