Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/omZ8fwv_NVCpTZ76nV12wIiOq1Y.roa
File:                     omZ8fwv_NVCpTZ76nV12wIiOq1Y.roa (raw, json)
Hash identifier:          Pb4v0QVpiNTuFLubalreKe9mddQ5ms6ZmoT1kd+MkOo=
Subject key identifier:   A2:66:7C:7F:0B:FF:35:50:A9:4D:9E:FA:9D:5D:76:C0:88:8E:AB:56
Certificate issuer:       /CN=f091d2d77461d9cbd94aa2112ff120f2aa6b5d74
Certificate serial:       753C59
Authority key identifier: F0:91:D2:D7:74:61:D9:CB:D9:4A:A2:11:2F:F1:20:F2:AA:6B:5D:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JHS13Rh2cvZSqIRL_Eg8qprXXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/omZ8fwv_NVCpTZ76nV12wIiOq1Y.roa
Signing time:             Sat 01 Jan 2022 00:57:20 +0000
ROA not before:           Sat 01 Jan 2022 00:57:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        213.232.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7683161 (0x753c59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f091d2d77461d9cbd94aa2112ff120f2aa6b5d74
        Validity
            Not Before: Jan  1 00:57:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2667c7f0bff3550a94d9efa9d5d76c0888eab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:a0:1a:6f:9a:68:d0:49:22:4b:67:02:ef:
                    3c:d6:e1:2a:fe:fc:02:0a:dc:b6:b2:b9:a4:05:11:
                    8f:0f:d9:5f:58:14:e5:30:dd:d7:84:1d:e2:99:cf:
                    83:a9:e1:2a:26:42:f8:84:8c:19:3e:45:90:16:83:
                    c4:59:87:f2:31:2b:69:17:4f:a6:03:91:af:88:e0:
                    c9:50:35:de:47:c2:cc:46:6c:2c:1b:c9:9b:67:36:
                    bc:49:9b:95:50:1c:95:39:82:c7:b9:2c:f4:f2:2c:
                    d0:3a:5d:16:b1:3e:44:d6:7c:22:76:ff:8e:54:8e:
                    22:f4:dc:d9:9d:30:46:38:18:9a:fe:bf:55:4f:d8:
                    80:01:3f:23:63:70:84:cc:2d:95:7b:b5:76:bb:bd:
                    2c:df:7c:c2:19:43:43:40:8e:b8:c1:dc:5c:6c:24:
                    7a:b2:da:f5:a8:8c:80:3e:e8:2b:a3:3d:aa:56:0f:
                    85:4a:25:b8:b2:35:de:bd:cf:f6:d9:32:34:ca:38:
                    41:ce:99:9e:dc:83:d9:70:b7:b8:51:a5:4f:0c:2e:
                    6b:ba:d5:2c:23:03:20:ff:e5:5f:b5:b6:8f:f8:97:
                    3a:26:9e:ef:22:1c:87:b3:bd:aa:e4:ad:16:ee:66:
                    d8:fc:81:94:01:79:d4:fb:fa:a7:b6:72:a3:7b:1e:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:7C:7F:0B:FF:35:50:A9:4D:9E:FA:9D:5D:76:C0:88:8E:AB:56
            X509v3 Authority Key Identifier:
                keyid:F0:91:D2:D7:74:61:D9:CB:D9:4A:A2:11:2F:F1:20:F2:AA:6B:5D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JHS13Rh2cvZSqIRL_Eg8qprXXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/omZ8fwv_NVCpTZ76nV12wIiOq1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/8JHS13Rh2cvZSqIRL_Eg8qprXXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:2b:4b:73:a1:3e:5d:2a:b8:b2:68:9f:22:45:e6:4a:77:
         c9:0f:2f:3a:f7:70:52:61:8c:92:be:e2:7a:6f:ff:fd:9b:dd:
         19:3e:4f:93:9c:33:ae:72:5a:fe:1e:ed:6d:23:92:ef:67:aa:
         d5:0b:1a:0d:50:00:af:08:eb:13:c6:88:09:05:ba:92:a0:38:
         93:58:ad:5e:09:e1:34:47:bc:5b:e0:2a:62:1f:94:20:b6:e8:
         6a:94:1f:9d:f4:67:0d:04:f8:17:4a:ea:d7:a6:86:22:2d:68:
         a7:83:d3:76:4d:51:58:85:ad:96:1e:28:49:a8:e4:af:bb:7f:
         8e:22:b9:07:6d:a3:bc:fc:f4:dd:96:b8:56:b0:1f:a4:1c:03:
         30:f1:db:8d:18:08:0c:e0:c4:a4:ca:5f:49:52:95:66:08:69:
         3f:bc:42:f3:ba:71:e4:5f:61:0a:9b:98:6e:94:bc:d2:c9:54:
         71:e9:eb:b0:e9:fa:bc:ac:7e:99:89:9e:58:8d:c3:9c:f0:30:
         72:0b:5f:55:49:aa:dd:17:47:bf:e6:2f:f3:55:3e:f4:55:c4:
         ee:ce:18:b8:4d:3c:f4:e4:e7:bd:04:75:8c:2c:53:fa:c3:f7:
         f8:55:6c:c6:b2:b8:9e:09:d5:15:09:8f:e0:f3:45:ef:90:16:
         1d:bc:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:04 2024 by rpki-client on console-ams.rpki-client.org