Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa
File:                     zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa (raw, json)
Hash identifier:          FgHe6jsButxYiFonakblUI/obF1/4/tWOPwVZDEQUc4=
Subject key identifier:   CC:A2:FB:C9:EF:AF:20:33:62:B9:48:49:7B:6C:DB:43:21:56:53:E5
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       018439EDB427E5D4BCB6961B74BE037D33E8
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa
Signing time:             Wed 02 Nov 2022 19:59:50 +0000
ROA not before:           Wed 02 Nov 2022 19:59:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        194.180.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:39:ed:b4:27:e5:d4:bc:b6:96:1b:74:be:03:7d:33:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Nov  2 19:59:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cca2fbc9efaf203362b948497b6cdb43215653e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:6e:a0:ab:f0:b6:7d:d8:a9:26:08:ae:8b:
                    2f:84:2b:57:3e:fe:ec:d6:08:41:e2:af:79:34:d2:
                    2a:b2:d6:62:5b:6e:31:0c:7b:9f:62:87:b4:97:b9:
                    3a:80:38:9b:24:a6:c9:42:fc:82:98:08:ad:c8:37:
                    9f:ed:4b:c2:38:6a:c1:36:56:cf:47:be:15:81:f3:
                    06:79:02:76:1e:05:2a:e1:cd:e7:b9:b9:99:5c:40:
                    19:f3:a1:93:06:ff:f8:aa:b8:fb:26:e1:ab:49:f3:
                    f2:fa:7e:03:dd:dd:a3:9d:4b:a5:2b:9b:43:c9:71:
                    e1:5d:92:b7:46:9f:e9:4f:68:a7:ab:1c:b9:c6:82:
                    35:7c:a3:37:1c:b9:e8:2b:a7:95:1b:a7:97:4e:3a:
                    95:43:f6:ce:8f:f4:55:29:ca:56:e9:af:13:ed:86:
                    3c:06:f0:91:e5:2e:fb:bd:d3:bc:66:5a:33:52:98:
                    82:b6:ac:41:d6:cf:0d:48:dc:e5:07:cf:e3:f2:d8:
                    7b:59:d6:95:53:1e:f3:72:17:2c:13:69:06:b3:db:
                    35:a6:35:ea:ef:fb:5d:73:75:6b:35:ba:b0:4a:09:
                    da:aa:87:93:21:8b:a8:80:49:28:44:ce:27:70:90:
                    42:f9:52:2e:42:b4:2a:4a:c7:a6:86:2a:34:3b:ba:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:FB:C9:EF:AF:20:33:62:B9:48:49:7B:6C:DB:43:21:56:53:E5
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:af:f3:b2:5a:88:80:1c:46:9f:31:00:ce:80:ca:24:df:bf:
         7e:ba:2d:83:f7:c1:75:73:9d:cc:96:7e:20:87:74:fc:14:79:
         8c:01:35:c7:5b:04:93:06:eb:76:e4:d8:2a:29:96:e8:f0:88:
         2f:74:9c:79:24:03:1b:31:ea:0a:d5:2a:1b:ea:a3:fb:60:6c:
         7d:41:cb:d3:ef:7e:34:e3:3d:92:b9:da:cd:28:5c:61:db:5c:
         b2:60:61:bf:59:19:f0:98:34:45:17:f1:74:f2:81:30:ae:ef:
         c2:ee:17:07:bd:d2:f6:68:90:f7:4a:8c:c9:34:99:87:18:f7:
         37:7d:6b:d1:6c:c5:34:f1:8c:de:83:9d:56:bf:63:df:87:b0:
         52:4d:c3:e7:52:bc:d8:0b:c4:8b:e2:39:29:8e:bc:10:a0:52:
         3f:90:7e:4c:ad:16:20:6d:10:c7:92:d6:07:a5:01:7c:2e:41:
         57:a4:aa:d3:7d:1c:61:32:ce:d7:bc:dc:d8:f4:d2:2f:b6:fa:
         98:5d:0c:89:3c:bc:8e:31:28:10:5f:73:d0:e9:ca:dd:9a:cd:
         9a:37:c4:db:e8:53:a2:bd:d8:14:7c:a0:31:26:d2:a6:92:30:
         bf:20:99:e9:5e:96:17:0a:cc:8d:a6:f2:f6:f4:6f:e5:e6:64:
         c9:8d:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:24 2024 by rpki-client on console-fra.rpki-client.org