Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/0VLWo6Vgz_SpGgLJHp-eoiG8L0E.roa
File:                     0VLWo6Vgz_SpGgLJHp-eoiG8L0E.roa (raw, json)
Hash identifier:          U9fCs0ppNtuF2Osk/eY9+tk7Ki/qUBitFUnIbxIanGI=
Subject key identifier:   D1:52:D6:A3:A5:60:CF:F4:A9:1A:02:C9:1E:9F:9E:A2:21:BC:2F:41
Certificate issuer:       /CN=7356b179573c757e455d5047962de30176854055
Certificate serial:       DD4F6E
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/0VLWo6Vgz_SpGgLJHp-eoiG8L0E.roa
Signing time:             Wed 09 Mar 2022 06:17:39 +0000
ROA not before:           Wed 09 Mar 2022 06:17:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.164.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14503790 (0xdd4f6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7356b179573c757e455d5047962de30176854055
        Validity
            Not Before: Mar  9 06:17:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d152d6a3a560cff4a91a02c91e9f9ea221bc2f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:9c:ee:34:37:aa:ac:35:f8:e0:d1:36:15:
                    f4:d8:d6:a4:0a:1e:25:93:ab:6b:d8:a9:8e:50:2e:
                    43:7b:e5:ee:b3:89:cf:3a:f9:25:5e:cc:5f:29:15:
                    9a:08:dd:96:78:92:bc:57:f7:ec:50:e9:24:f6:38:
                    81:a5:60:13:f2:14:57:cb:6b:34:f8:98:35:29:d3:
                    5d:6b:14:4e:17:f4:34:53:36:11:0b:a4:c6:65:b9:
                    2f:b1:89:4a:47:5c:43:ce:21:fd:7f:ca:15:33:53:
                    46:bd:c6:99:36:56:a7:3b:13:87:fd:81:68:b0:e2:
                    97:1c:1b:86:f5:4b:80:84:60:1f:f3:9f:ec:31:a9:
                    f3:45:41:2f:7b:cc:ed:33:d1:9c:ff:bb:2f:06:36:
                    18:f7:84:40:2e:ae:ef:d6:e2:e1:69:c3:5d:6e:69:
                    e0:e3:f7:b3:d7:99:c4:ee:d0:d6:91:1f:14:3d:d4:
                    bf:5e:3f:42:55:ac:85:da:a9:f8:5c:63:78:f9:e1:
                    0e:b4:1c:49:2e:20:88:e6:9c:10:b2:b4:25:50:3f:
                    26:01:44:38:9e:ca:ae:30:04:5f:57:5e:77:c6:de:
                    d3:0c:2a:8b:79:ec:75:f5:22:f2:73:74:f3:55:87:
                    7d:92:c4:28:ba:27:aa:fe:5a:aa:d9:03:11:de:87:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:D6:A3:A5:60:CF:F4:A9:1A:02:C9:1E:9F:9E:A2:21:BC:2F:41
            X509v3 Authority Key Identifier:
                keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/0VLWo6Vgz_SpGgLJHp-eoiG8L0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:f0:ab:c2:3a:3a:45:f1:e8:08:66:6c:27:49:88:6d:28:31:
         84:42:f6:92:15:7e:de:cd:fe:b9:fa:7f:0c:3e:8f:06:fa:34:
         65:8f:1e:5a:ee:ef:31:60:69:1f:2a:32:c4:5d:ae:d1:80:21:
         38:2b:e5:c6:66:f7:40:31:9e:fb:8d:9b:59:71:38:fe:f5:87:
         da:93:73:50:94:dc:4a:29:88:49:f8:13:68:c6:34:29:74:8c:
         8d:6f:70:c2:a7:75:4b:b6:4c:48:67:c8:45:70:b5:18:53:5b:
         2e:58:18:27:0f:5f:c4:30:fc:d9:92:3a:bf:4d:76:af:e7:e9:
         d3:07:1a:25:0a:53:c4:73:2a:db:c5:46:83:d7:31:da:d9:af:
         05:03:6a:26:9a:d1:4d:33:3e:82:26:d8:2f:d3:8b:4d:e3:75:
         e4:57:ad:72:12:ae:7a:cd:96:4e:ea:09:24:0d:1f:53:7b:8c:
         6e:41:92:06:36:06:de:57:60:9e:29:9b:a1:21:a8:01:b7:1d:
         ac:9a:11:98:e4:4d:a2:69:bf:69:97:23:20:de:7e:fe:66:dc:
         02:1a:be:f5:55:cd:bf:87:fc:5a:42:e3:21:c8:0f:dd:aa:c5:
         65:2a:e0:92:8b:72:f3:fc:40:9c:fd:22:6a:5f:43:8f:01:6c:
         ec:f5:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org