Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/eEBRj6Qknr5Pdw7NfjbKBITuRAc.roa
File:                     eEBRj6Qknr5Pdw7NfjbKBITuRAc.roa (raw, json)
Hash identifier:          FSIeAlXinifT0wLpIDCAGZzvWcahAYmKIH4G8fG0NiM=
Subject key identifier:   78:40:51:8F:A4:24:9E:BE:4F:77:0E:CD:7E:36:CA:04:84:EE:44:07
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0A22FC07
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/eEBRj6Qknr5Pdw7NfjbKBITuRAc.roa
Signing time:             Thu 05 May 2022 16:10:36 +0000
ROA not before:           Thu 05 May 2022 16:10:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        85.209.18.0/24 maxlen: 24
                          45.66.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170064903 (0xa22fc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: May  5 16:10:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7840518fa4249ebe4f770ecd7e36ca0484ee4407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:7e:67:2a:fd:55:ce:b5:a3:0d:0e:44:1e:
                    54:2d:cd:7f:1d:09:71:ba:57:22:b0:ca:48:0f:9b:
                    70:36:c0:b0:32:26:70:80:7f:be:e5:1b:fe:44:70:
                    59:d4:f2:7a:a5:e4:e5:f3:0e:46:d9:38:75:db:50:
                    8e:d1:1f:7c:d2:9c:5f:6f:a9:63:60:81:91:ca:7e:
                    13:02:9c:fe:e1:49:45:12:57:95:a2:ac:72:b6:8c:
                    6f:1f:93:98:0f:2c:06:6e:53:a0:93:84:b3:9e:ca:
                    0c:ac:bf:f4:ff:9c:85:aa:0d:57:8b:94:c1:21:d7:
                    11:67:89:17:39:76:79:2d:73:3f:46:ac:9f:57:1f:
                    94:1c:44:1d:24:3b:f8:01:c6:06:11:ca:f6:c7:ce:
                    98:7e:0d:ed:8a:55:6b:a5:34:44:d8:9f:c0:06:cf:
                    63:65:de:8a:a3:54:be:0c:5c:d7:6d:d8:e9:9d:c4:
                    6c:d2:24:39:cb:1e:93:46:91:b0:7a:a7:e1:87:a8:
                    7f:48:9e:53:e4:06:f0:1a:9d:87:b1:61:e4:4e:7c:
                    a1:80:f0:b8:45:e3:9d:1c:ce:70:df:a0:ff:c1:1c:
                    32:12:71:a2:ae:93:aa:66:c9:aa:da:02:63:03:27:
                    3c:73:6b:7e:f8:75:98:3e:35:b0:04:4f:d0:64:b5:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:51:8F:A4:24:9E:BE:4F:77:0E:CD:7E:36:CA:04:84:EE:44:07
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/eEBRj6Qknr5Pdw7NfjbKBITuRAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.148.0/24
                  85.209.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d1:78:8c:b2:7a:f4:8c:fd:94:9c:b5:71:db:d5:b1:3e:4c:
         26:99:23:7a:a1:a9:2f:ae:fa:3a:81:2a:fd:0b:d3:d9:bb:a8:
         82:ef:4a:7b:72:16:9a:1a:16:c8:ee:e6:b4:4d:1b:11:cf:ab:
         5a:1e:fa:c8:b0:b2:2b:10:32:53:1e:a9:ee:ac:75:87:96:7a:
         86:2c:b2:75:cf:bb:38:87:75:3c:e4:24:42:3d:ef:29:e2:a1:
         8b:cd:67:8d:69:b6:6c:9b:8d:a2:25:0f:ac:99:75:90:70:c4:
         bf:b8:2a:c7:ac:40:bd:78:5a:d0:e2:31:d1:8c:12:c4:f4:b6:
         8c:c5:d7:dd:cc:c7:e4:05:0f:74:93:70:23:69:61:1a:c2:5a:
         ba:88:70:46:35:c7:55:09:e1:24:ae:c9:be:f8:8a:65:c6:5b:
         6f:ff:84:e2:25:6e:47:9b:15:d0:23:7a:67:a5:1e:c4:4c:cd:
         42:29:e4:4e:a5:d2:73:62:8b:d4:bb:ef:7e:1b:b3:27:b2:4e:
         30:c1:a2:bf:4d:1a:43:5c:37:55:9c:2d:77:42:e8:6d:66:d4:
         00:71:6f:1d:ed:46:de:d7:11:c5:bd:cd:f7:36:65:a1:45:5d:
         2c:cc:f5:dd:6f:cc:b4:26:5e:15:bb:85:31:23:8b:bb:43:2a:
         4f:8e:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org