Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/88947c-4468-42d4-9277-8c4a90c8aa5d/1/107Pf7xQhZDlqes_zc7kmSChmNs.roa
File:                     107Pf7xQhZDlqes_zc7kmSChmNs.roa (raw, json)
Hash identifier:          tC7ccc7XkPnrwygCIhzBKqkEhoMf4aL3JphHs+Ka+fk=
Subject key identifier:   D7:4E:CF:7F:BC:50:85:90:E5:A9:EB:3F:CD:CE:E4:99:20:A1:98:DB
Certificate issuer:       /CN=8a750d42b19ec145984a3f485210ccbae5ffae15
Certificate serial:       03D41701
Authority key identifier: 8A:75:0D:42:B1:9E:C1:45:98:4A:3F:48:52:10:CC:BA:E5:FF:AE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inUNQrGewUWYSj9IUhDMuuX_rhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/88947c-4468-42d4-9277-8c4a90c8aa5d/1/107Pf7xQhZDlqes_zc7kmSChmNs.roa
Signing time:             Sat 01 Jan 2022 14:59:11 +0000
ROA not before:           Sat 01 Jan 2022 14:59:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60134
IP address blocks:        213.232.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64231169 (0x3d41701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a750d42b19ec145984a3f485210ccbae5ffae15
        Validity
            Not Before: Jan  1 14:59:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d74ecf7fbc508590e5a9eb3fcdcee49920a198db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:63:8d:3e:9f:5c:59:cc:48:1f:9d:3d:9c:
                    41:eb:6b:e7:f4:4e:2b:e1:45:2e:9d:d0:4d:4b:02:
                    06:ba:9f:fd:a3:4c:94:46:07:71:dd:e1:4b:8f:74:
                    c9:20:cc:29:5d:bc:e7:b3:47:6d:7a:e3:0c:46:e0:
                    2f:92:2d:00:19:8e:32:cc:da:86:cd:18:c6:5a:3f:
                    8c:11:05:f1:19:6b:c8:4a:0b:a9:1e:53:93:cb:e8:
                    a3:5f:11:3e:bc:48:55:ac:55:a3:83:62:a3:40:d0:
                    45:a6:80:0c:d4:ba:d6:09:28:d3:f8:52:5d:bf:83:
                    c8:ed:59:52:dd:7f:ec:9f:dc:95:41:2c:15:48:1d:
                    0e:5b:70:a4:6f:a2:ab:aa:9f:80:d1:6c:d5:e8:0f:
                    4f:43:da:9a:c8:77:56:bb:b1:85:f1:ce:47:71:f7:
                    2a:1f:c7:47:93:60:a4:62:6c:81:e5:12:94:45:1e:
                    51:a2:88:44:b5:11:bb:ef:bc:d3:f3:05:3b:ab:ac:
                    f1:54:ef:51:e7:7a:df:80:d4:95:39:98:fe:b1:23:
                    dc:65:cd:ef:78:b6:89:f0:d6:fb:e6:4f:2d:03:c9:
                    88:ba:5b:74:dc:3e:fc:7f:f4:9a:c5:1d:fd:21:7d:
                    0d:6b:df:72:ca:2b:90:9d:1b:67:d5:c7:10:a3:e4:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:CF:7F:BC:50:85:90:E5:A9:EB:3F:CD:CE:E4:99:20:A1:98:DB
            X509v3 Authority Key Identifier:
                keyid:8A:75:0D:42:B1:9E:C1:45:98:4A:3F:48:52:10:CC:BA:E5:FF:AE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inUNQrGewUWYSj9IUhDMuuX_rhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/88947c-4468-42d4-9277-8c4a90c8aa5d/1/107Pf7xQhZDlqes_zc7kmSChmNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/88947c-4468-42d4-9277-8c4a90c8aa5d/1/inUNQrGewUWYSj9IUhDMuuX_rhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:72:47:df:1a:cc:ba:40:e3:fa:0c:77:8f:56:de:87:e1:be:
         04:fd:49:8c:b4:3f:17:7f:b0:09:b1:31:48:aa:16:bd:f0:01:
         8e:ca:b0:34:e8:78:d8:40:96:50:d0:50:d2:6a:b5:fb:81:d6:
         49:b3:0b:70:b5:da:df:5f:ad:f4:9a:c5:d7:cb:72:f2:20:ab:
         32:b3:18:0a:73:ea:5e:0e:71:63:c0:73:56:d5:6e:c9:ad:6a:
         96:35:5f:83:3c:d0:64:04:f9:b1:36:5f:8c:0e:b5:03:b3:99:
         fb:4b:47:3a:69:b1:ca:ca:cf:e9:6d:8b:8f:29:14:b2:90:e8:
         2a:b0:a9:64:b8:20:c7:12:a2:d1:2e:68:8d:c5:09:9e:28:36:
         6f:62:54:fa:6e:0c:5f:06:a0:26:62:72:42:c8:4f:73:d7:1d:
         67:84:01:d9:b3:4e:08:c0:6f:2c:7e:f1:65:62:a0:94:ae:f4:
         b6:28:e0:c2:29:d5:aa:5d:98:b7:a4:d0:81:07:f7:b9:fd:ba:
         d2:78:9e:70:34:78:18:e4:4f:1d:1b:73:81:3a:d1:3d:26:af:
         f1:6e:31:c0:cb:66:72:09:df:20:d3:e2:f8:62:2c:97:c7:20:
         7e:67:1a:b1:7a:54:a2:ba:0e:8d:e4:83:01:af:ee:93:40:b9:
         0f:4f:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org