Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/xBGxlw1_D7Gk71-_262cu5ojXME.roa
File:                     xBGxlw1_D7Gk71-_262cu5ojXME.roa (raw, json)
Hash identifier:          jLQL7uMUL564zWjaxE73D8u9MUPIcyoUgnbT3A3xAB4=
Subject key identifier:   C4:11:B1:97:0D:7F:0F:B1:A4:EF:5F:BF:DB:AD:9C:BB:9A:23:5C:C1
Certificate issuer:       /CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
Certificate serial:       87B5FD
Authority key identifier: E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/xBGxlw1_D7Gk71-_262cu5ojXME.roa
Signing time:             Wed 23 Mar 2022 11:55:36 +0000
ROA not before:           Wed 23 Mar 2022 11:55:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207067
IP address blocks:        185.130.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8893949 (0x87b5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
        Validity
            Not Before: Mar 23 11:55:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c411b1970d7f0fb1a4ef5fbfdbad9cbb9a235cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:08:5f:da:9f:e9:3f:5a:67:ba:13:df:2c:fc:
                    71:ac:1d:f4:93:1e:f0:58:3d:b5:a8:19:45:21:c6:
                    09:47:df:ad:5d:5e:c7:61:27:31:c0:8e:41:ba:ce:
                    60:8e:36:ad:66:7a:5e:de:39:07:d5:d2:3a:96:30:
                    ff:4f:08:ca:fd:b9:58:90:7d:f4:eb:09:80:fe:c4:
                    29:9f:c5:57:20:fc:8f:93:18:1a:42:50:04:fb:91:
                    97:90:8b:4f:06:e2:30:ca:c6:d5:7f:52:1b:9b:8e:
                    2f:67:77:2b:ff:8a:81:1d:34:f9:2c:49:4a:66:63:
                    82:0f:70:b2:b6:df:3c:ed:b3:f8:cf:e3:6c:cd:01:
                    cc:33:04:7f:4e:1d:0c:a1:80:9e:d0:5c:18:0b:4c:
                    8b:0f:5c:a3:89:8f:fc:b7:87:0f:fb:8b:fd:ad:a0:
                    b5:a8:d5:03:0d:92:c6:50:8a:c9:08:08:3b:d7:df:
                    91:58:83:b0:b9:91:e3:f7:47:ae:0b:1f:49:ab:a3:
                    7b:ae:14:af:dd:89:a5:eb:d3:68:df:71:47:24:ab:
                    35:4d:60:ec:a1:ad:59:e7:5b:fb:c9:f4:e6:ac:58:
                    14:91:80:d1:b6:fc:a5:b4:4d:91:3a:fd:3b:93:eb:
                    b4:87:c6:d9:b9:ac:0b:36:d3:d2:ae:1d:0e:ad:71:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:11:B1:97:0D:7F:0F:B1:A4:EF:5F:BF:DB:AD:9C:BB:9A:23:5C:C1
            X509v3 Authority Key Identifier:
                keyid:E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/xBGxlw1_D7Gk71-_262cu5ojXME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:12:29:eb:63:37:ae:12:b5:aa:55:9a:85:13:a7:c4:f7:
         1c:43:8b:93:3d:48:9e:46:61:f3:3d:f2:9d:5f:97:7d:22:31:
         ae:ab:a4:fb:12:67:21:7b:58:31:69:a0:44:ce:0e:ea:37:f5:
         f0:9f:11:ff:86:b6:43:69:90:f8:90:80:c8:f1:5c:fc:e4:5a:
         9b:d0:8a:fc:a7:60:8f:ae:fa:7f:28:03:38:ba:3e:f5:ee:77:
         86:09:43:80:04:ec:d3:40:9a:f7:28:a3:c2:57:37:e1:87:b6:
         90:56:4e:8a:0d:f8:8a:29:b8:ba:0a:85:6a:df:f6:88:2a:18:
         84:92:0f:e5:55:1d:27:cf:94:ce:17:99:62:c0:22:70:c3:60:
         7b:34:76:c8:f8:60:5a:42:9b:30:d8:cf:cf:d6:b4:f2:b3:2d:
         25:47:8d:10:dc:f5:a3:7c:36:81:56:6a:10:76:3f:30:87:a9:
         90:78:77:1d:b3:b7:96:a8:6a:50:4f:45:76:ec:0e:06:28:b4:
         0b:09:62:20:ca:92:1f:8d:c8:6f:17:7c:4e:59:86:1d:96:e6:
         45:ad:16:5c:40:a1:41:d8:76:2a:3c:d5:64:d6:7d:2a:c8:07:
         99:a5:ff:94:7b:13:2d:bd:f6:64:64:05:9a:1e:2c:8c:71:7f:
         39:f2:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:07 2024 by rpki-client on console-ams.rpki-client.org