Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/trlVB0yuISehsIVtu8jVJ1toBYE.roa
File:                     trlVB0yuISehsIVtu8jVJ1toBYE.roa (raw, json)
Hash identifier:          ru8dP/PdmrPgwe6VQ0to3yDR4Elh17axVSziCcvDqVc=
Subject key identifier:   B6:B9:55:07:4C:AE:21:27:A1:B0:85:6D:BB:C8:D5:27:5B:68:05:81
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0181D6FEC0B4B88B69C19F4A78EE74509159
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/trlVB0yuISehsIVtu8jVJ1toBYE.roa
Signing time:             Thu 07 Jul 2022 04:50:28 +0000
ROA not before:           Thu 07 Jul 2022 04:50:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     272027
IP address blocks:        85.209.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d6:fe:c0:b4:b8:8b:69:c1:9f:4a:78:ee:74:50:91:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jul  7 04:50:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6b955074cae2127a1b0856dbbc8d5275b680581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dd:08:36:ad:da:5f:44:08:8e:4e:80:23:f2:
                    3d:5f:1d:f9:e7:2a:01:f1:f9:2f:a9:94:c1:fc:21:
                    1b:75:ee:5f:ef:e0:b9:f5:de:47:95:a2:ad:60:6a:
                    df:e6:c3:ce:32:bd:78:35:21:ff:40:a6:14:1e:51:
                    f4:78:bb:57:fb:c5:fe:e7:62:7c:e2:91:3c:1d:87:
                    22:de:3c:a4:d4:4d:e0:4d:b6:42:92:15:e1:93:87:
                    8e:bd:9a:1c:1b:5d:0f:ac:e2:93:c6:f9:1e:ea:7c:
                    8b:d2:60:da:96:4c:37:da:a1:03:cb:b6:1f:21:3e:
                    e1:ac:57:71:fd:0b:9f:42:64:7f:0e:a6:38:34:c5:
                    cc:1a:a6:c0:73:7b:b5:4f:bf:a4:e2:f7:be:6c:82:
                    ec:ed:9c:63:3d:bb:37:bc:db:b4:b9:97:f7:2e:b7:
                    bb:43:71:85:21:d0:92:97:dd:79:8c:4d:b2:81:03:
                    5c:59:d0:17:9d:af:86:63:b3:fd:56:90:d1:95:f7:
                    bb:bc:0b:6a:ff:f8:4d:9c:b1:ed:a8:6e:d7:de:73:
                    6d:fd:c2:c7:57:53:68:4b:01:9b:82:1e:c5:84:d6:
                    6c:26:4f:f0:d1:75:3c:8e:78:7c:c6:13:ac:68:fb:
                    7e:20:be:dd:5e:25:d7:16:6f:9c:53:7d:9e:47:7a:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:55:07:4C:AE:21:27:A1:B0:85:6D:BB:C8:D5:27:5B:68:05:81
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/trlVB0yuISehsIVtu8jVJ1toBYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:bd:99:9a:14:91:95:ba:4b:23:6d:ea:1a:67:ef:5b:e1:12:
         0c:4b:7c:9e:c0:b5:2d:21:b5:33:fa:e9:d9:9d:90:87:9f:5b:
         cb:79:2b:3a:2b:eb:5a:26:ac:ca:ef:e8:10:dc:9b:2d:d2:54:
         bb:26:de:0a:74:d7:bf:9a:0b:eb:15:20:83:0a:c3:bf:b2:74:
         3e:ec:bc:85:63:82:f9:bb:21:64:6e:cc:c4:77:b6:ca:ed:89:
         db:b2:7e:45:43:33:bf:7c:d9:91:67:52:ac:dc:34:95:04:82:
         68:d2:b3:8a:b6:e6:2e:bf:98:45:37:45:d8:08:81:77:3d:58:
         cb:04:1c:dc:41:4e:21:4a:49:3c:14:5d:c3:45:b8:8f:5a:1c:
         2c:1b:a2:98:d4:b6:49:87:ed:3e:92:25:55:bd:2e:33:60:92:
         32:e2:df:99:dc:04:70:38:2d:5f:ef:5c:33:de:01:e2:31:3a:
         a6:e2:a2:be:8b:d3:25:20:4a:d2:a7:0a:b4:1a:bc:28:2c:49:
         90:34:84:f0:83:b7:af:f8:e4:03:49:c9:d4:45:71:84:78:f6:
         ad:3a:3f:93:98:1d:36:4a:a4:8e:9e:c9:ca:77:59:28:cc:0a:
         b7:dc:0a:da:37:8c:be:5c:5d:4f:b3:13:e2:56:68:43:b9:3b:
         e1:fd:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org