Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/OORSrA4J8KPJAJW1aYpzrwEeYiI.roa
File:                     OORSrA4J8KPJAJW1aYpzrwEeYiI.roa (raw, json)
Hash identifier:          xZPcWyDIhJa7XAZmFqxD+RrwymT33Su325n7sVxeEFk=
Subject key identifier:   38:E4:52:AC:0E:09:F0:A3:C9:00:95:B5:69:8A:73:AF:01:1E:62:22
Certificate issuer:       /CN=1f41ba8a1cefdb8948113701bfd1d076dea6767d
Certificate serial:       01D01A
Authority key identifier: 1F:41:BA:8A:1C:EF:DB:89:48:11:37:01:BF:D1:D0:76:DE:A6:76:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0G6ihzv24lIETcBv9HQdt6mdn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/OORSrA4J8KPJAJW1aYpzrwEeYiI.roa
Signing time:             Fri 25 Mar 2022 10:59:47 +0000
ROA not before:           Fri 25 Mar 2022 10:59:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.248.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118810 (0x1d01a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f41ba8a1cefdb8948113701bfd1d076dea6767d
        Validity
            Not Before: Mar 25 10:59:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38e452ac0e09f0a3c90095b5698a73af011e6222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:e7:45:88:dd:36:65:1b:0c:24:58:76:11:
                    1e:e9:38:51:74:80:30:96:99:1a:10:6e:e8:07:36:
                    a2:8d:f7:d1:3c:b4:2b:95:63:d4:8a:52:cd:a2:aa:
                    33:1d:eb:2b:ce:cf:80:a8:28:98:fc:02:1b:54:7c:
                    df:d7:0b:ce:8d:4d:5f:47:86:73:4b:37:f7:42:ae:
                    2b:0f:ac:78:e1:15:44:59:c5:55:2c:d6:53:ee:69:
                    2f:3e:b0:3b:3b:57:9d:59:1a:05:33:9f:f1:32:ed:
                    ee:e0:03:93:9f:cd:44:50:8b:f8:b9:db:09:43:fd:
                    12:26:eb:1b:62:70:ba:14:34:59:33:44:34:21:31:
                    26:f4:b1:59:2b:81:9c:64:4a:76:5c:4d:eb:05:68:
                    f6:b0:41:ab:f0:10:f5:66:ac:28:b8:c6:63:b1:11:
                    ab:d3:55:7b:73:a8:c2:fa:46:2d:01:19:1c:b9:31:
                    ee:71:f5:92:5d:4d:a5:b0:21:e2:93:4a:0d:4f:98:
                    76:16:81:fb:6e:31:5e:fd:d1:df:9d:9e:5b:3f:20:
                    73:4b:21:d0:3a:a8:24:02:39:08:13:82:8f:99:78:
                    25:c8:64:c4:69:d1:64:78:9e:75:cc:53:76:56:8c:
                    0e:be:fe:25:6d:af:a8:85:9d:0c:a2:10:8e:df:f1:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E4:52:AC:0E:09:F0:A3:C9:00:95:B5:69:8A:73:AF:01:1E:62:22
            X509v3 Authority Key Identifier:
                keyid:1F:41:BA:8A:1C:EF:DB:89:48:11:37:01:BF:D1:D0:76:DE:A6:76:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0G6ihzv24lIETcBv9HQdt6mdn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/OORSrA4J8KPJAJW1aYpzrwEeYiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/H0G6ihzv24lIETcBv9HQdt6mdn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:46:4d:27:6d:27:ab:c8:4c:e1:ec:aa:45:a8:fc:50:bd:38:
         e1:85:e0:74:65:4b:88:54:b1:9f:11:c7:0b:2f:89:8f:4a:7c:
         2f:88:31:b2:d6:b0:9d:35:df:ad:c7:c5:78:05:b9:8a:68:34:
         38:70:dd:4f:d3:45:ea:d1:67:11:ca:12:77:96:88:6f:4d:c6:
         71:3b:b4:a0:d0:e4:d2:7c:58:36:6f:60:1d:2e:6f:50:5a:3d:
         58:19:8e:30:23:82:8d:16:9e:13:b2:23:4d:56:1e:8a:ba:0c:
         fa:88:81:ba:20:1f:54:b4:07:9e:1f:b8:0f:cd:64:be:e2:04:
         72:05:e9:b7:16:c8:e7:e0:3e:27:a3:58:01:f5:74:25:e2:22:
         fb:ed:b5:52:df:f9:5e:3e:40:ef:a6:9f:53:79:b1:e0:a5:34:
         41:03:cb:7f:47:fb:ae:0d:8d:af:60:b5:50:c5:23:d6:2f:d4:
         50:45:9f:4a:bc:51:56:b8:5c:80:a2:9a:08:cf:33:22:c6:59:
         12:e5:9f:c1:19:cc:f9:7a:27:14:f0:46:7f:42:8e:bf:8e:41:
         d3:1e:08:f2:fd:20:94:d0:c4:89:75:08:85:24:2a:a6:42:e5:
         14:0f:a1:59:8d:f3:ab:20:f9:76:c5:b5:1e:c9:3e:ab:e0:29:
         c6:5d:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:30 2024 by rpki-client on console-fra.rpki-client.org