Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/wkPtai3zyg-OUy2xskhyQIDNUYo.roa
File:                     wkPtai3zyg-OUy2xskhyQIDNUYo.roa (raw, json)
Hash identifier:          RYf0GVbGk0JkREocQL9BSLDBuDiUaa6802sPVwjEQfg=
Subject key identifier:   C2:43:ED:6A:2D:F3:CA:0F:8E:53:2D:B1:B2:48:72:40:80:CD:51:8A
Certificate issuer:       /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial:       045DD5D4
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/wkPtai3zyg-OUy2xskhyQIDNUYo.roa
Signing time:             Wed 01 Jun 2022 16:12:20 +0000
ROA not before:           Wed 01 Jun 2022 16:12:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.115.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73258452 (0x45dd5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
        Validity
            Not Before: Jun  1 16:12:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c243ed6a2df3ca0f8e532db1b248724080cd518a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:fc:68:75:cf:a9:3e:d3:33:fd:79:63:81:
                    b4:be:a0:ff:c9:0b:18:e2:8f:27:84:64:1c:35:88:
                    a4:50:de:30:58:6d:f3:a0:f5:a7:c8:ae:32:e7:3e:
                    b2:86:30:37:01:cc:a9:87:df:ee:9b:86:b4:06:b6:
                    e6:a5:2b:a1:d8:8f:9e:af:54:a1:ce:3f:28:d4:1a:
                    6c:a6:67:fb:16:c0:0a:dc:e1:83:8b:5f:af:91:6f:
                    5c:e2:d5:f5:33:ec:68:ca:4b:69:53:af:dc:6e:c6:
                    b5:68:54:d7:1e:bb:18:76:2a:c9:80:f4:24:ef:86:
                    68:1d:1f:31:6f:bb:c1:c6:7e:eb:17:f8:21:03:ba:
                    f9:67:7e:17:bb:20:df:89:f2:ca:12:d1:8b:68:eb:
                    a2:30:f6:29:4c:86:87:43:c1:e2:6a:15:fb:ba:54:
                    f2:d1:bc:24:28:70:58:e6:97:9a:10:a2:95:f9:dd:
                    26:42:00:b3:51:ef:b7:c3:99:0d:bf:92:d5:03:f5:
                    92:50:73:62:70:e9:48:9c:6d:b4:3f:74:b8:c6:76:
                    3c:2b:07:b7:33:01:29:84:6f:0f:90:aa:03:c7:bd:
                    8a:fe:c1:5e:8a:f3:c2:80:93:e9:36:69:8e:12:b2:
                    bf:ca:1a:19:3e:90:a3:69:69:db:dd:88:10:1f:e2:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:ED:6A:2D:F3:CA:0F:8E:53:2D:B1:B2:48:72:40:80:CD:51:8A
            X509v3 Authority Key Identifier:
                keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/wkPtai3zyg-OUy2xskhyQIDNUYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:da:3d:a6:ee:99:d4:b8:16:42:e7:4f:99:57:7b:ea:07:
         4a:51:43:92:43:f9:fc:44:fc:84:8f:43:67:c6:56:00:d7:4d:
         f2:92:0d:8c:c7:10:86:b6:8c:26:cf:e6:1f:98:da:61:be:00:
         8c:98:4e:47:7e:2c:e4:c4:47:83:47:5f:76:05:8d:be:0d:86:
         22:9a:91:7c:72:81:c3:46:b4:21:63:31:c7:e4:c8:2f:fd:f1:
         40:c5:ca:83:2f:c2:b0:4f:3f:c7:41:b8:ab:8d:8b:40:2f:74:
         19:57:5b:c3:9e:65:49:cf:b2:20:44:ab:45:64:de:13:bf:7c:
         02:02:b2:a7:2f:21:33:38:34:2c:ac:3c:a4:cc:32:60:47:96:
         00:c9:53:70:c5:7b:26:1d:27:4d:09:a6:3f:b2:94:a8:05:76:
         96:89:83:d4:5b:f7:cb:11:9a:af:fa:a6:bf:a1:d2:49:ef:b0:
         e4:78:3c:b3:79:24:21:c8:86:6b:43:43:60:d1:ff:95:df:fb:
         3d:ea:06:2a:85:80:09:d4:67:c2:51:ef:37:03:7b:e1:4c:f4:
         9f:d9:e5:ff:0b:f2:6d:ed:ec:33:19:bb:ac:8f:27:f9:71:bb:
         3d:31:15:14:18:23:eb:ef:c0:4d:79:64:8a:a4:d3:1a:c4:0c:
         1a:d5:a5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org