Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/d-0uCBl8VcsU96mbV_w06tMs7uw.roa
File:                     d-0uCBl8VcsU96mbV_w06tMs7uw.roa (raw, json)
Hash identifier:          XkCOF8gWWcF+dMF1j6I2to7pG3iTH/vuXZ3+CqBOCNQ=
Subject key identifier:   77:ED:2E:08:19:7C:55:CB:14:F7:A9:9B:57:FC:34:EA:D3:2C:EE:EC
Certificate issuer:       /CN=9e090317adda08e323ebceed7d54565212742dba
Certificate serial:       0C1C727E
Authority key identifier: 9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/d-0uCBl8VcsU96mbV_w06tMs7uw.roa
Signing time:             Sat 01 Jan 2022 08:02:57 +0000
ROA not before:           Sat 01 Jan 2022 08:02:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50247
IP address blocks:        194.1.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203190910 (0xc1c727e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e090317adda08e323ebceed7d54565212742dba
        Validity
            Not Before: Jan  1 08:02:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77ed2e08197c55cb14f7a99b57fc34ead32ceeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:56:37:e2:22:a7:09:4b:47:02:6e:a5:32:
                    aa:de:18:c8:53:08:00:80:b3:75:6d:48:d0:db:41:
                    10:a3:f7:85:64:70:1f:a2:40:8b:45:05:fa:53:46:
                    29:22:b2:38:a3:74:94:3c:23:5e:75:48:f4:57:2d:
                    41:2f:c8:18:08:fe:91:6c:19:d2:d6:a4:fe:d6:04:
                    f6:75:d7:fa:95:a6:3f:4e:62:64:11:c6:5b:5e:c3:
                    9b:0e:97:65:da:fa:7c:48:31:be:6d:37:5a:52:32:
                    d2:82:84:e4:3f:ac:90:7f:2f:eb:39:23:a7:fe:96:
                    87:ff:4e:ce:f5:80:80:ba:be:9b:6d:14:4d:11:11:
                    91:93:8e:d0:04:77:c6:56:8c:25:24:77:7b:5c:06:
                    d2:04:1a:3b:03:98:32:24:4c:a5:f4:ba:c6:f1:9e:
                    0c:a7:f3:4e:dc:84:90:e7:b8:fa:7d:e6:20:2d:17:
                    1a:ac:6c:1b:72:0d:7d:98:4d:d0:16:c8:50:03:38:
                    fd:0d:fa:03:fb:e5:72:8c:f9:fb:99:43:e2:3f:6d:
                    f1:1c:4a:85:98:75:fc:16:c9:51:da:f3:89:cb:bd:
                    5a:62:44:4b:03:65:81:a0:ae:13:dd:0c:16:86:22:
                    ba:13:eb:b7:5f:71:05:1f:d8:58:d3:94:0a:da:df:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:2E:08:19:7C:55:CB:14:F7:A9:9B:57:FC:34:EA:D3:2C:EE:EC
            X509v3 Authority Key Identifier:
                keyid:9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/d-0uCBl8VcsU96mbV_w06tMs7uw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/ngkDF63aCOMj687tfVRWUhJ0Lbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:27:dd:02:06:a7:2b:00:b3:41:0f:ed:01:e9:0c:4c:b0:
         8d:0e:6d:f9:f9:8d:72:c2:97:d6:b3:41:06:93:53:71:33:e4:
         40:2d:bf:b6:1d:91:af:a6:09:ff:33:6e:ae:d1:4c:82:b7:28:
         38:37:fd:2c:2f:9d:8d:a9:53:8c:39:a5:3c:c2:31:a2:cf:a6:
         db:92:02:bb:b6:e7:8b:64:16:30:fd:1c:70:f8:01:86:1f:50:
         3f:b2:1d:87:a4:30:ab:51:8d:46:aa:d8:a8:fa:0e:37:b3:09:
         1c:9b:2a:07:2f:56:7f:5f:ee:fe:5f:46:3c:d6:ba:27:d4:96:
         9f:c5:9d:1a:81:69:80:df:f1:ba:1a:91:be:b6:e7:0d:85:60:
         3d:17:12:d7:9b:6d:a4:b8:d8:f1:07:e1:34:9a:84:ab:e6:e2:
         47:15:40:32:29:2d:ed:fc:60:6e:65:fe:3e:4d:2d:59:32:b7:
         48:a2:3d:97:d7:d1:24:e7:87:c0:17:06:ed:a9:c8:71:8b:36:
         e8:c7:3e:ec:03:f7:11:34:02:4e:45:87:e0:f8:af:34:67:f8:
         13:b1:43:fd:8c:3b:88:4b:53:a4:39:39:5d:4c:f7:ee:aa:8d:
         78:c9:03:e4:a9:6a:b5:c2:98:b4:3a:27:20:71:9e:7f:f7:81:
         da:b6:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:42 2024 by rpki-client on console-fra.rpki-client.org