Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/GXbRJELgvGJmXRoPAFv2kmSpf5c.roa
File:                     GXbRJELgvGJmXRoPAFv2kmSpf5c.roa (raw, json)
Hash identifier:          R6wfey+31+PuLGgZo9sNSoIs0sSA59HMHX3JiDfFDn4=
Subject key identifier:   19:76:D1:24:42:E0:BC:62:66:5D:1A:0F:00:5B:F6:92:64:A9:7F:97
Certificate issuer:       /CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
Certificate serial:       055C3DFF
Authority key identifier: FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/GXbRJELgvGJmXRoPAFv2kmSpf5c.roa
Signing time:             Sat 01 Jan 2022 05:06:33 +0000
ROA not before:           Sat 01 Jan 2022 05:06:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207695
IP address blocks:        176.116.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89931263 (0x55c3dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
        Validity
            Not Before: Jan  1 05:06:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1976d12442e0bc62665d1a0f005bf69264a97f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:73:81:6d:f0:01:b2:ed:d3:26:27:74:05:
                    51:62:c4:e3:7a:1c:f3:50:5c:47:d6:e3:a3:31:cf:
                    0c:ba:30:f6:ea:2a:e8:0d:56:ff:ca:65:b4:db:b0:
                    89:8f:f3:be:3b:f4:41:b6:a0:35:34:99:c4:71:c1:
                    58:9f:99:71:a2:89:ab:1d:26:d8:a7:62:30:7b:bf:
                    94:cb:cb:5d:b6:49:dd:37:23:22:01:28:24:b8:0b:
                    ba:bb:d9:4f:54:d3:5f:d4:02:10:02:7a:8f:60:87:
                    cc:cc:da:6f:ad:5f:3b:bf:e8:27:90:4b:27:f4:c4:
                    74:f8:10:84:f3:07:e3:d0:a0:7f:8a:da:e0:82:32:
                    db:4e:29:0c:c3:9c:02:e9:ef:74:6c:d7:4f:38:26:
                    fc:c2:9a:d0:8f:66:e9:84:44:42:c5:2c:09:98:03:
                    4f:26:de:f4:9b:ac:44:ff:f7:42:66:1e:1f:7b:25:
                    5b:7e:b0:db:1c:cd:19:9f:35:03:8d:ac:92:e1:b4:
                    45:a1:e4:6d:81:2b:16:93:fb:af:60:75:2d:75:bb:
                    a8:a1:61:1b:03:70:f8:09:69:2c:d1:e9:31:8a:6f:
                    e8:1e:11:cb:1d:2f:e2:7e:d9:29:f7:90:63:d9:50:
                    b5:fb:74:63:9e:94:b2:76:d6:3d:2f:00:4f:12:5a:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:D1:24:42:E0:BC:62:66:5D:1A:0F:00:5B:F6:92:64:A9:7F:97
            X509v3 Authority Key Identifier:
                keyid:FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/GXbRJELgvGJmXRoPAFv2kmSpf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/__TJXHvHqKfLnLtzGcgbCsqkaV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:26:d6:ba:cf:76:9c:e4:c2:dd:2b:e3:05:37:62:f2:e5:59:
         e8:47:ea:a8:be:81:06:be:1c:76:6f:8f:c4:e7:ce:25:eb:a1:
         fd:49:25:35:36:52:ee:f8:91:73:dd:6e:4a:ee:42:91:15:af:
         7d:52:e3:74:5a:d5:5c:59:cb:f8:a6:c5:7a:a1:6b:46:ff:99:
         25:21:e8:97:03:a3:0a:3f:93:1c:9c:12:33:6b:d9:d6:36:fd:
         ae:5d:33:78:0b:87:0f:e0:19:53:dd:b8:3a:04:dc:a0:55:e2:
         3a:36:69:57:d9:8a:eb:87:70:18:a5:5a:a1:8a:0a:b6:d7:be:
         54:21:a3:3f:cb:b6:ff:68:c7:7f:d4:c8:d9:8d:93:ae:97:e6:
         93:14:87:76:bb:89:3a:63:a9:d5:56:58:2d:30:fe:6d:3d:a1:
         32:e1:76:60:05:97:72:41:c2:2d:0f:2f:5e:d8:0a:e3:63:3a:
         0d:bd:c6:1a:8b:90:fd:66:f9:80:7a:2e:e5:d4:bf:9b:be:3e:
         47:1b:e8:ad:ab:43:94:33:2d:aa:1e:6b:7e:c9:e3:44:52:02:
         2c:06:b0:43:0b:ae:0b:32:79:60:11:d5:95:6f:13:f9:74:01:
         eb:47:72:44:34:ad:d7:94:30:47:b9:92:b5:a8:9a:2d:e4:af:
         02:d2:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-fra.rpki-client.org