Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/E6w4Uk0FVA64dAlBgl4Mk4XtSxw.roa
File:                     E6w4Uk0FVA64dAlBgl4Mk4XtSxw.roa (raw, json)
Hash identifier:          KuA9VCsf/c+RqgHhMg/559aB9nZ2R37hC3slh64FqLE=
Subject key identifier:   13:AC:38:52:4D:05:54:0E:B8:74:09:41:82:5E:0C:93:85:ED:4B:1C
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01856D11D553DBC116518119930F49486443
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/E6w4Uk0FVA64dAlBgl4Mk4XtSxw.roa
Signing time:             Sun 01 Jan 2023 11:22:43 +0000
ROA not before:           Sun 01 Jan 2023 11:22:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47479
IP address blocks:        178.254.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:11:d5:53:db:c1:16:51:81:19:93:0f:49:48:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 11:22:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13ac38524d05540eb8740941825e0c9385ed4b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:36:73:fd:ff:a3:f9:0e:0d:e1:18:e3:4f:
                    c2:fd:a1:44:7c:ce:d5:94:b4:6e:1e:02:38:62:4b:
                    c0:34:a2:f3:a6:3b:10:b4:d8:b4:ad:0c:00:39:2e:
                    70:61:15:5d:66:96:0b:74:87:0d:60:6b:0d:97:1c:
                    29:9d:8f:cf:52:21:38:8f:f8:a0:75:c3:0e:8b:cf:
                    92:c0:42:90:38:99:aa:66:13:e5:03:20:32:7b:1d:
                    44:5c:b2:a0:c2:49:66:4a:23:14:45:98:a0:0b:f3:
                    fa:c3:b9:d2:b0:25:30:3d:a5:f2:97:5c:81:86:9e:
                    2b:42:54:b2:49:50:6f:8b:31:82:22:58:65:69:24:
                    7b:57:1b:90:41:9d:46:30:a1:4d:1c:aa:9d:90:de:
                    9d:ce:a9:6a:4b:cf:42:72:28:f0:71:eb:f4:73:f5:
                    14:65:bb:8d:de:e6:67:77:34:49:12:bf:e2:51:5b:
                    c6:a5:b4:d7:2c:00:e6:29:e1:6e:7f:c2:99:8c:e3:
                    f7:d2:49:e4:c7:75:17:d1:f7:61:b6:91:89:ee:27:
                    f4:05:c6:51:5d:df:96:44:8f:1e:06:cb:d6:e1:f2:
                    7d:d8:c4:85:11:a9:f4:ab:2a:54:f5:70:f0:98:66:
                    02:b6:e6:38:51:76:66:7d:07:ba:f2:b9:a3:e8:c9:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:38:52:4D:05:54:0E:B8:74:09:41:82:5E:0C:93:85:ED:4B:1C
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/E6w4Uk0FVA64dAlBgl4Mk4XtSxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:00:42:70:38:fd:bb:a0:ae:56:b3:3c:fb:d4:4f:b2:0c:0f:
         6f:91:9a:01:93:5a:d6:58:c6:3a:1b:38:da:76:33:ef:e4:2d:
         3b:3c:b1:9b:04:86:4a:3d:13:b0:36:c3:79:b9:4a:1f:d2:30:
         15:54:9c:2f:bc:42:e6:45:56:19:87:02:4c:09:b2:85:49:77:
         53:8a:60:1d:fb:cc:e9:e1:0b:96:5b:1f:97:1a:4b:66:26:4a:
         28:5f:67:83:25:cd:08:32:25:f3:76:3b:71:fc:9f:2a:83:8f:
         0b:86:f6:f4:96:9e:9c:95:b5:6d:2b:3f:c7:05:4d:4b:1f:eb:
         da:89:a0:ed:09:88:16:d0:03:6f:0c:81:b0:2b:a8:17:e4:1a:
         0a:25:9a:5c:ab:10:39:13:34:f2:02:2a:dd:96:10:5c:03:38:
         32:1a:08:6a:2b:83:da:4c:ee:51:64:6e:7f:be:29:8e:e4:a5:
         e5:8f:38:35:2b:62:f7:d0:6c:32:31:fa:cb:8d:8c:a2:7f:fc:
         39:6b:88:9f:1a:e5:3d:86:8c:3a:55:ed:00:78:92:ae:4b:14:
         51:ab:2d:a0:38:19:05:15:c3:e1:91:72:ef:14:eb:a4:bb:62:
         00:4a:9e:ae:f5:63:e2:44:47:d5:e4:fa:49:2a:57:79:5c:cc:
         48:5f:2c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:45 2024 by rpki-client on console-fra.rpki-client.org