Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/8tT30uqUaMQqZTJaTd7BohHgUaQ.roa
File:                     8tT30uqUaMQqZTJaTd7BohHgUaQ.roa (raw, json)
Hash identifier:          0D2PhcNJyHy73qj5yk/ueGe4mboFyfkPDvxy/uTL5mg=
Subject key identifier:   F2:D4:F7:D2:EA:94:68:C4:2A:65:32:5A:4D:DE:C1:A2:11:E0:51:A4
Certificate issuer:       /CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Certificate serial:       35223C0D
Authority key identifier: 9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/8tT30uqUaMQqZTJaTd7BohHgUaQ.roa
Signing time:             Sat 01 Jan 2022 01:57:09 +0000
ROA not before:           Sat 01 Jan 2022 01:57:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199568
IP address blocks:        82.196.24.0/24 maxlen: 24
                          82.163.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891436045 (0x35223c0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
        Validity
            Not Before: Jan  1 01:57:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2d4f7d2ea9468c42a65325a4ddec1a211e051a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:20:7c:39:30:3b:bc:2a:1d:f0:6e:ef:58:
                    c5:0e:0f:0d:2a:fc:ee:c5:d9:90:c4:09:e4:b5:44:
                    f2:24:d7:c9:c8:75:e2:d8:b9:99:9d:95:c2:ea:71:
                    c1:41:95:86:1b:a2:7e:73:b5:56:d0:ea:53:63:0c:
                    f8:96:04:72:b3:9b:a2:bd:90:9d:2f:51:8c:d1:8a:
                    7f:e0:b8:61:b5:21:5b:b3:91:e0:a2:14:90:24:e4:
                    5c:58:32:20:60:79:5c:8e:83:8a:e7:7a:58:1b:b7:
                    6c:48:26:d8:e1:fa:f3:1c:28:10:9e:a9:0d:6f:e8:
                    0c:3c:ba:79:37:9a:48:c8:58:d7:bc:4d:ee:9a:30:
                    60:ea:f2:4c:ff:41:ac:6d:8f:0f:ad:c5:99:0a:43:
                    65:2c:cd:09:1c:f7:8a:a3:ed:d8:fc:12:7e:24:58:
                    40:95:1b:69:7a:f5:26:35:fb:c8:7c:ac:b0:fa:ff:
                    bb:b8:8f:d0:90:78:6a:79:54:15:47:71:7d:98:ce:
                    c3:21:aa:96:95:db:61:af:3b:fd:83:e2:22:32:08:
                    16:3c:a3:2c:6e:29:e4:37:fb:d1:13:45:53:e8:4e:
                    c0:29:98:f7:ff:ff:94:2b:04:4d:6d:74:c0:e0:db:
                    bb:76:6f:99:80:51:7f:12:42:f3:70:02:12:51:ca:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:F7:D2:EA:94:68:C4:2A:65:32:5A:4D:DE:C1:A2:11:E0:51:A4
            X509v3 Authority Key Identifier:
                keyid:9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/8tT30uqUaMQqZTJaTd7BohHgUaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/nrXnF8759mRM2ISbihjUHcdPQIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.163.38.0/24
                  82.196.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ca:82:21:80:24:49:21:dc:59:6c:66:b3:c8:df:97:00:51:
         e6:81:9e:e8:26:d2:e6:3f:61:da:80:b4:be:5b:57:c9:8b:3c:
         90:76:5b:b1:a4:dd:8f:36:57:ec:ec:01:6c:55:a0:03:1f:9b:
         1a:39:64:f5:1a:1a:fc:73:cf:1e:68:17:99:06:38:18:79:44:
         43:7a:e7:74:11:78:61:f5:d1:34:79:63:b0:27:e9:13:12:88:
         a3:86:2e:b5:18:ba:fe:15:a3:1c:d7:4e:b0:1a:6f:48:5b:8d:
         7b:fa:df:1f:70:92:78:9a:b4:7f:33:16:6d:65:d3:65:06:18:
         16:df:c7:c8:c5:79:88:e9:be:0a:6e:4b:ef:0d:09:ae:bd:29:
         41:a9:46:63:d8:43:97:86:dc:c4:55:c3:f2:47:80:bd:b2:f6:
         70:3f:d0:fe:1f:06:3f:de:7b:9c:f4:de:d2:19:12:cd:dc:0d:
         9b:ab:97:17:a9:73:19:ef:58:08:4a:04:b0:71:48:db:d9:96:
         dd:c2:26:b5:f2:31:bf:87:a5:c3:1a:a8:ac:bb:7f:aa:d1:5f:
         b1:0f:c5:47:3d:62:98:4d:1c:aa:f6:cf:e1:31:92:c5:da:16:
         80:a7:53:11:d1:99:1a:0e:13:a1:0d:b7:dd:62:a9:c2:5f:c7:
         81:be:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:22 2024 by rpki-client on console-fra.rpki-client.org