Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/KgTfqBHylb1Y1qxBF7Paq6cKeNM.roa
File:                     KgTfqBHylb1Y1qxBF7Paq6cKeNM.roa (raw, json)
Hash identifier:          PuVs6KmmMHaY561iOflEcpjSyChsqyHGWjsLhcRUtjI=
Subject key identifier:   2A:04:DF:A8:11:F2:95:BD:58:D6:AC:41:17:B3:DA:AB:A7:0A:78:D3
Certificate issuer:       /CN=26b5592fbbb6baa57ca8b6e556612c6ed8eb8eac
Certificate serial:       02CB1C81
Authority key identifier: 26:B5:59:2F:BB:B6:BA:A5:7C:A8:B6:E5:56:61:2C:6E:D8:EB:8E:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrVZL7u2uqV8qLblVmEsbtjrjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/KgTfqBHylb1Y1qxBF7Paq6cKeNM.roa
Signing time:             Sat 01 Jan 2022 00:56:39 +0000
ROA not before:           Sat 01 Jan 2022 00:56:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8220
IP address blocks:        195.149.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46865537 (0x2cb1c81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b5592fbbb6baa57ca8b6e556612c6ed8eb8eac
        Validity
            Not Before: Jan  1 00:56:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a04dfa811f295bd58d6ac4117b3daaba70a78d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:96:3e:ad:bd:c4:3c:a0:0a:12:6d:3e:75:
                    68:dc:75:ec:e6:85:01:d6:1c:a4:ad:8a:ff:ba:3e:
                    34:c5:4c:ae:e5:8f:b8:21:6a:d3:d3:57:0f:f6:47:
                    43:8e:79:b6:4a:7f:97:2a:48:a7:a9:dc:6b:00:97:
                    27:12:2c:5e:7e:86:1d:9b:39:a6:41:b8:6c:d6:0c:
                    56:9f:7f:aa:26:a9:68:12:b3:f2:75:03:fc:68:c9:
                    cf:29:83:c4:4f:ca:3f:15:73:30:e9:97:45:f1:2f:
                    a1:c2:68:d0:54:a8:89:05:ae:ac:30:ed:01:58:9f:
                    67:32:50:d9:f0:da:a4:a0:2c:9a:72:4a:68:82:9b:
                    e1:bc:d8:6b:ed:8a:e7:3a:a5:72:61:9c:48:c0:01:
                    5f:df:57:46:3e:d1:ee:a6:aa:6b:fa:e9:a8:56:91:
                    37:03:cb:44:c4:18:fb:6d:fc:f8:af:e5:a1:b0:58:
                    15:ce:1a:41:6f:2f:02:d3:f2:99:12:ce:ed:87:48:
                    b0:7a:f4:06:a5:e0:8c:f6:cc:b3:e7:99:8d:ab:4a:
                    7e:ac:b4:a7:6f:09:49:d4:a3:cd:1c:32:5d:a2:17:
                    14:69:c2:49:a4:81:eb:5b:8b:b7:d4:c0:84:2c:76:
                    4b:ea:ea:36:e1:15:2a:c7:73:97:8e:dd:bd:68:18:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:04:DF:A8:11:F2:95:BD:58:D6:AC:41:17:B3:DA:AB:A7:0A:78:D3
            X509v3 Authority Key Identifier:
                keyid:26:B5:59:2F:BB:B6:BA:A5:7C:A8:B6:E5:56:61:2C:6E:D8:EB:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrVZL7u2uqV8qLblVmEsbtjrjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/KgTfqBHylb1Y1qxBF7Paq6cKeNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:5c:75:fe:82:2e:c0:58:ba:c0:e0:ec:86:5b:7c:a5:be:
         8b:f8:8b:6f:a4:24:c2:f5:21:d5:48:7a:40:8f:cc:2f:b0:50:
         bd:6d:2f:65:2f:e3:d6:a9:31:69:dd:ee:f9:d5:31:20:a2:b6:
         e7:d8:d4:0d:0e:6d:ab:b7:75:a6:13:3a:45:89:8e:5f:f1:fe:
         19:88:53:26:dd:b8:6a:a8:72:65:76:38:7b:52:64:3c:98:3a:
         12:d0:5d:84:f7:b9:e6:10:5c:27:e9:43:5e:28:07:20:bd:e9:
         9b:ac:6f:84:c8:f9:6d:44:ca:35:5b:0f:5c:8d:f5:e8:ea:91:
         e5:87:9a:12:38:42:13:9b:44:e4:65:4e:35:d2:e5:4a:b7:1a:
         02:e0:ba:e6:25:cc:e6:0e:07:61:24:47:23:7f:31:d5:5e:92:
         94:a1:50:cb:24:db:e0:4d:c8:58:33:db:4a:e2:17:e9:6c:99:
         c9:ad:ea:dd:2d:66:70:85:c8:02:be:85:c5:42:fb:91:99:8d:
         bd:a2:bf:6e:14:3a:85:14:9a:fe:55:ce:cd:b5:f9:83:ad:14:
         15:62:99:d0:3b:0a:b0:62:81:60:23:c4:dd:f5:12:bf:46:bd:
         11:91:ab:f6:a0:a9:0e:24:7e:b2:f8:29:39:c3:4e:bf:8c:88:
         4c:4a:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:13 2024 by rpki-client on console-fra.rpki-client.org