Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/7ZAtyhVuZX0PxpZ1-7MimnvlVW4.roa
File:                     7ZAtyhVuZX0PxpZ1-7MimnvlVW4.roa (raw, json)
Hash identifier:          lISCeT7z90tt7bCMWnABQaHzaVgZ4hL4dXkBvtw2dfE=
Subject key identifier:   ED:90:2D:CA:15:6E:65:7D:0F:C6:96:75:FB:B3:22:9A:7B:E5:55:6E
Certificate issuer:       /CN=31c4aa21f29036d202eece103154181712830636
Certificate serial:       018562EE4A036A7ECDB865F6AF24A221C672
Authority key identifier: 31:C4:AA:21:F2:90:36:D2:02:EE:CE:10:31:54:18:17:12:83:06:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McSqIfKQNtIC7s4QMVQYFxKDBjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/7ZAtyhVuZX0PxpZ1-7MimnvlVW4.roa
Signing time:             Fri 30 Dec 2022 12:07:41 +0000
ROA not before:           Fri 30 Dec 2022 12:07:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43641
IP address blocks:        195.128.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:ee:4a:03:6a:7e:cd:b8:65:f6:af:24:a2:21:c6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c4aa21f29036d202eece103154181712830636
        Validity
            Not Before: Dec 30 12:07:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed902dca156e657d0fc69675fbb3229a7be5556e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:f3:f9:96:92:5d:8b:63:d0:1c:86:14:04:
                    04:fc:bd:77:f4:c5:7e:d1:72:77:f1:19:f3:8d:62:
                    57:69:c0:91:a5:c7:79:44:f4:d6:6a:93:79:ed:f8:
                    62:a3:a1:38:53:02:97:8c:b8:e4:d5:ce:24:a0:ac:
                    f2:6b:47:c8:ea:c3:0e:2b:a2:a9:7a:ce:fa:e6:1e:
                    5e:b9:1a:2d:cd:68:59:23:b0:54:6f:47:50:3e:eb:
                    79:c0:06:92:0e:96:de:0c:78:47:34:a3:8b:7a:ac:
                    7e:12:b4:94:da:e4:55:9a:ff:9b:0b:b7:63:a4:f3:
                    b0:6c:81:8c:93:36:d8:37:dc:cc:45:a5:c4:3a:6f:
                    12:d8:98:15:c3:51:eb:3b:9c:73:e6:e1:11:34:f1:
                    30:ec:cc:9c:5f:32:1b:ca:89:81:3f:5b:fb:57:4a:
                    94:d9:da:f6:c1:48:7b:6f:41:7c:55:bf:69:df:a1:
                    5c:c1:d7:f8:57:73:7a:22:d2:fd:32:ab:ca:82:39:
                    98:7b:22:d9:d5:9f:7c:ec:76:6e:52:0d:ec:03:fc:
                    93:f9:ee:95:0e:1b:de:6f:29:fe:9d:a0:67:fd:b4:
                    31:a4:ff:4c:dc:9b:1d:25:f2:64:c9:6e:2e:f1:63:
                    8e:9e:83:b4:31:7a:16:31:e0:45:3a:72:a6:3d:24:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:90:2D:CA:15:6E:65:7D:0F:C6:96:75:FB:B3:22:9A:7B:E5:55:6E
            X509v3 Authority Key Identifier:
                keyid:31:C4:AA:21:F2:90:36:D2:02:EE:CE:10:31:54:18:17:12:83:06:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McSqIfKQNtIC7s4QMVQYFxKDBjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/7ZAtyhVuZX0PxpZ1-7MimnvlVW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/McSqIfKQNtIC7s4QMVQYFxKDBjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.128.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:ea:72:1a:91:93:10:d7:f0:e5:37:65:04:03:4b:59:00:
         02:2e:4e:23:de:b3:38:a8:eb:a3:ab:0f:f7:aa:f8:d5:01:d1:
         7e:7e:ec:e7:09:b9:da:f9:63:6d:1c:23:93:86:54:72:ed:be:
         b8:7b:e9:19:3a:a6:2c:cb:1e:50:1f:d1:0b:d6:73:c7:58:02:
         e8:34:d3:95:c2:d6:42:de:a5:df:ab:01:46:d7:9d:67:28:ff:
         e5:f4:80:87:f6:48:f6:97:0b:42:86:43:d2:88:4c:3b:de:f3:
         d2:d2:f4:33:58:ed:aa:97:97:41:c0:7e:90:aa:07:15:d1:1d:
         1a:d3:3a:9e:0d:67:27:fa:f2:db:2d:ca:2f:ef:2a:99:f0:a8:
         b4:26:d8:b9:aa:18:bc:83:cd:e9:f8:ee:ce:01:76:b4:53:7b:
         80:15:25:ec:56:69:4f:f0:82:96:c5:bd:45:7c:eb:b1:95:3a:
         f7:29:48:28:d2:66:9a:17:1d:ac:2a:ef:f6:f5:74:f3:a6:c4:
         83:2f:da:53:1a:00:9a:1e:7a:a5:cd:a6:8e:4a:10:df:c8:41:
         3b:c3:b0:e2:2c:9b:26:2f:e4:46:dc:b7:14:bc:5f:2c:e5:2e:
         f5:fb:32:87:0d:13:1a:04:4f:58:b3:5e:68:b7:58:94:0d:63:
         78:cb:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:08 2024 by rpki-client on console-ams.rpki-client.org