Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/O776Q_TVbp694ctno91nqt9l3EM.roa
File:                     O776Q_TVbp694ctno91nqt9l3EM.roa (raw, json)
Hash identifier:          JB20roP5lWREdp/48REJD4x/2C+/vKOsmWhXTHF1T0w=
Subject key identifier:   3B:BE:FA:43:F4:D5:6E:9E:BD:E1:CB:67:A3:DD:67:AA:DF:65:DC:43
Certificate issuer:       /CN=5168ebc18f9ffcbca5d6e6a6a2c904a8a4a7d93a
Certificate serial:       017018
Authority key identifier: 51:68:EB:C1:8F:9F:FC:BC:A5:D6:E6:A6:A2:C9:04:A8:A4:A7:D9:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWjrwY-f_Lyl1uamoskEqKSn2To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/O776Q_TVbp694ctno91nqt9l3EM.roa
Signing time:             Tue 26 Apr 2022 14:35:21 +0000
ROA not before:           Tue 26 Apr 2022 14:35:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51177
IP address blocks:        193.29.187.0/24 maxlen: 24
                          84.234.96.0/22 maxlen: 22
                          91.235.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94232 (0x17018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5168ebc18f9ffcbca5d6e6a6a2c904a8a4a7d93a
        Validity
            Not Before: Apr 26 14:35:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3bbefa43f4d56e9ebde1cb67a3dd67aadf65dc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:ae:e5:5d:44:82:69:14:43:88:6e:02:69:
                    91:93:4f:d1:cf:2c:6b:3f:6f:a9:53:b0:68:b2:51:
                    fb:3b:97:69:45:1c:28:0a:c7:5b:3f:e6:e0:ba:f0:
                    d0:dd:2b:44:0c:80:7a:9a:1a:73:33:63:7a:70:46:
                    25:83:1c:55:b5:5a:b7:fd:87:93:eb:aa:cf:f5:1f:
                    d0:66:b6:c9:45:9d:3b:92:e8:46:59:c0:a5:ea:ac:
                    8d:60:d9:cb:80:df:d6:fb:3e:08:fb:f3:ad:f7:b1:
                    55:df:fb:f9:e4:44:8d:2d:73:9c:55:cf:d8:22:da:
                    f5:59:59:ba:09:2b:af:af:41:8f:26:51:9e:1d:ef:
                    22:d8:ac:87:2f:b1:ba:48:ee:41:c2:73:22:88:d7:
                    86:bb:a8:ea:83:ec:be:7d:83:33:55:53:df:fc:71:
                    b4:1f:ac:3d:b4:85:e1:ed:91:86:bd:55:43:51:60:
                    5a:b8:e3:84:f1:9f:9d:ee:74:95:af:9b:8c:a3:1e:
                    76:fb:98:2b:52:b5:9c:e1:6f:e4:fd:91:44:be:48:
                    61:0c:9b:d4:5d:e9:48:42:53:94:b0:87:7b:99:82:
                    6c:d9:86:c8:11:38:a5:f0:31:e7:72:fa:93:0e:5e:
                    83:6a:20:5a:f7:fe:7f:a1:6f:8d:6f:b7:a5:88:27:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:FA:43:F4:D5:6E:9E:BD:E1:CB:67:A3:DD:67:AA:DF:65:DC:43
            X509v3 Authority Key Identifier:
                keyid:51:68:EB:C1:8F:9F:FC:BC:A5:D6:E6:A6:A2:C9:04:A8:A4:A7:D9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWjrwY-f_Lyl1uamoskEqKSn2To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/O776Q_TVbp694ctno91nqt9l3EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/UWjrwY-f_Lyl1uamoskEqKSn2To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.234.96.0/22
                  91.235.116.0/24
                  193.29.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:6a:28:a0:9b:90:34:1e:03:ad:56:6f:54:62:79:d9:fa:
         e1:49:68:4f:95:cb:91:f9:5c:84:09:40:c5:c8:f3:ff:f5:33:
         f3:33:42:6c:27:22:03:30:6e:a6:f4:9f:89:7a:c3:5b:51:b5:
         dd:dd:1b:73:40:44:6e:76:91:94:63:a2:86:0f:45:3b:29:da:
         60:c7:91:f7:9f:84:0a:99:b8:78:18:90:26:78:77:6c:ec:b6:
         63:f7:f2:dc:27:67:7f:dc:2b:6e:3e:1d:6f:52:a7:5e:4b:49:
         15:6f:48:d1:c9:7d:56:7a:15:59:28:1f:a1:a0:68:9f:7b:ff:
         10:68:bb:f3:03:14:66:9e:3c:9b:b8:4b:85:87:51:3f:93:19:
         a1:d4:77:c2:f2:af:a3:ea:95:77:2b:47:d9:dc:2f:1f:43:ca:
         b1:76:6b:d4:a9:b1:19:af:d5:da:05:7c:3a:a7:99:21:04:fc:
         83:e9:eb:b8:c9:6c:d3:30:dc:b3:ea:a7:f1:1d:6c:59:50:7e:
         11:fb:39:d6:64:53:45:45:6d:5c:8e:19:f7:66:09:a5:4f:2b:
         45:50:cf:19:9a:ff:2d:2b:23:87:1c:4d:b9:81:c4:c1:10:cd:
         73:08:40:25:b9:42:1a:99:eb:91:53:57:be:12:57:8b:ba:f9:
         c7:29:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org