Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/1-I1eA3jywLs5pCPi9BKOBwYshoQ.roa
File:                     1-I1eA3jywLs5pCPi9BKOBwYshoQ.roa (raw, json)
Hash identifier:          6nj+TeTb/8PNZDfe78avF4GUgBCPyW7S8iPVjEpbXS0=
Subject key identifier:   F8:8D:5E:03:78:F2:C0:BB:39:A4:23:E2:F4:12:8E:07:06:2C:86:84
Certificate issuer:       /CN=7565008df899598c7a2c0f98b70f234bf6178011
Certificate serial:       01853E904C5DB29BBF6DA49FEB125684524A
Authority key identifier: 75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/1-I1eA3jywLs5pCPi9BKOBwYshoQ.roa
Signing time:             Fri 23 Dec 2022 10:38:42 +0000
ROA not before:           Fri 23 Dec 2022 10:38:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14576
IP address blocks:        176.126.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3e:90:4c:5d:b2:9b:bf:6d:a4:9f:eb:12:56:84:52:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565008df899598c7a2c0f98b70f234bf6178011
        Validity
            Not Before: Dec 23 10:38:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f88d5e0378f2c0bb39a423e2f4128e07062c8684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:2f:53:4d:b0:58:60:84:86:2e:ca:97:8c:
                    41:e2:f0:fc:25:ae:45:3c:f2:33:a3:8f:8c:ba:41:
                    d8:9c:e8:a7:2a:69:b3:59:c2:f8:24:81:83:dc:6e:
                    59:1e:6e:19:42:dd:e1:db:65:0f:71:34:19:98:69:
                    ce:8f:4f:8a:0c:4e:8e:c1:67:7e:2f:f2:9c:c1:eb:
                    a1:07:70:e4:08:bf:e0:ba:50:79:96:24:70:3f:22:
                    72:15:56:cf:40:c4:a2:99:b7:b6:66:47:a6:67:f7:
                    33:fd:51:29:da:d0:9b:f9:e5:65:82:27:65:81:dc:
                    d3:d2:ce:e8:35:07:9e:f8:67:9b:7b:b5:e6:79:4b:
                    78:ae:ae:7b:d2:92:51:57:8f:7a:6b:95:ab:ef:16:
                    9b:9a:27:16:ee:28:f3:1c:17:03:ad:8e:0a:a6:70:
                    ec:cd:25:3d:87:60:32:eb:e5:05:ce:14:c3:d6:4c:
                    c1:05:66:34:58:43:37:57:8d:65:ad:86:98:4e:9d:
                    02:3e:a2:fb:d2:84:c6:e7:7d:1e:4b:84:1c:99:de:
                    c3:76:2e:ca:0c:22:05:fe:60:6a:b4:9d:87:2c:81:
                    e3:65:a8:55:ac:c9:aa:08:75:81:e3:d4:00:ac:ea:
                    e2:25:a0:67:84:fd:44:80:8d:ac:41:8c:e0:8c:05:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8D:5E:03:78:F2:C0:BB:39:A4:23:E2:F4:12:8E:07:06:2C:86:84
            X509v3 Authority Key Identifier:
                keyid:75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/1-I1eA3jywLs5pCPi9BKOBwYshoQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:19:a5:ec:36:a5:4a:69:1f:d1:2e:bd:e3:66:32:62:47:
         f1:ab:d5:a3:35:fc:9a:1d:b7:9f:fb:9d:de:e7:92:50:e4:b6:
         94:ed:97:0c:42:d9:c0:cc:04:dd:24:8c:7c:d7:04:a5:89:c1:
         a5:ea:31:67:00:b3:0b:7a:cb:76:12:c0:d7:d2:7c:96:0a:ab:
         58:75:cd:63:93:bd:fc:81:67:ff:b3:59:33:81:50:82:0a:01:
         90:34:e3:ae:4f:40:24:c9:4e:b0:51:d5:5d:c1:f5:e3:1a:fb:
         f3:35:47:5f:76:c4:0e:d4:02:3e:02:92:cf:42:d5:85:82:5c:
         2a:66:ed:44:e5:2f:b3:1d:f4:c5:a3:8f:ce:0c:f7:24:63:01:
         1c:58:b7:84:f0:94:49:e3:0b:ee:dd:fa:95:74:7e:c7:47:91:
         b0:69:91:1b:c8:f2:cd:05:b6:d9:73:c6:48:27:9e:f5:b4:69:
         30:66:65:56:e6:e2:f5:dd:22:40:29:ed:ee:5c:48:eb:65:fe:
         0e:dc:e4:fc:04:3e:96:78:e4:d3:f6:cf:93:a1:1f:aa:19:72:
         b5:64:63:00:11:0b:d2:54:9a:7e:7e:85:9a:98:7c:a7:91:f1:
         59:8c:c0:c1:99:08:31:9a:b1:33:83:9e:93:03:6e:15:1d:45:
         b9:28:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org