Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/dwBVxZ0s6xdeNh1sBPtbF-qM8L0.roa
File:                     dwBVxZ0s6xdeNh1sBPtbF-qM8L0.roa (raw, json)
Hash identifier:          nUibzeu7rD7h6rV4IIKVuNEfbJqPTEp3C1nMSr4qx1U=
Subject key identifier:   77:00:55:C5:9D:2C:EB:17:5E:36:1D:6C:04:FB:5B:17:EA:8C:F0:BD
Certificate issuer:       /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial:       018DE5907D99404FF6BB144392C4B42DEBBD
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/dwBVxZ0s6xdeNh1sBPtbF-qM8L0.roa
Signing time:             Mon 26 Feb 2024 13:17:48 +0000
ROA not before:           Mon 26 Feb 2024 13:17:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35625
IP address blocks:        185.246.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e5:90:7d:99:40:4f:f6:bb:14:43:92:c4:b4:2d:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
        Validity
            Not Before: Feb 26 13:17:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=770055c59d2ceb175e361d6c04fb5b17ea8cf0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:0b:d5:6c:a5:b9:f5:12:ee:99:2a:81:25:
                    56:52:d8:3d:4e:ca:ce:10:f8:43:ab:be:f6:2e:2f:
                    f3:fa:75:84:29:80:de:7f:42:49:bc:ec:ff:98:3e:
                    6f:8a:fb:29:80:0d:d1:e3:95:75:19:8e:4b:b7:e7:
                    48:c6:dd:0f:a4:22:6e:43:7b:e4:06:86:60:81:75:
                    ff:11:17:21:fe:b1:c6:86:c1:d9:11:4a:1f:00:c8:
                    bd:9a:ab:78:3c:d9:65:b2:c3:7c:c0:36:90:97:ef:
                    60:63:c9:9a:84:a3:53:d8:73:cb:b5:cf:64:89:45:
                    9e:f1:44:cd:8e:e2:8d:70:20:c5:56:7b:27:55:da:
                    ba:8a:ec:8d:4a:1b:68:5f:89:8f:98:47:3c:95:97:
                    f7:2f:27:40:46:75:ff:ef:ae:08:a0:8c:4c:b5:bf:
                    1e:71:48:e6:82:ef:da:02:91:03:bb:75:4c:c0:03:
                    12:18:4c:13:44:c5:03:13:cc:1b:f1:81:62:d1:45:
                    fc:4f:ab:b1:8d:c2:e0:02:19:44:b6:c0:28:0f:c1:
                    1a:1e:61:7f:3e:17:fe:79:b3:b8:56:fa:e5:a9:db:
                    e4:0e:b2:da:d2:af:4e:7a:ed:63:d5:38:75:85:84:
                    04:5e:8f:82:9c:78:5b:52:ff:c6:0c:e7:7f:1e:75:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:00:55:C5:9D:2C:EB:17:5E:36:1D:6C:04:FB:5B:17:EA:8C:F0:BD
            X509v3 Authority Key Identifier:
                keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/dwBVxZ0s6xdeNh1sBPtbF-qM8L0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:67:60:00:ad:88:34:14:83:24:07:45:ce:ee:68:b7:a7:1f:
         14:b2:56:27:96:88:09:a8:fa:53:87:11:d6:76:0b:32:39:bc:
         78:57:03:6f:b0:ce:96:a6:35:18:81:35:4c:3d:41:40:0a:d1:
         88:d0:43:eb:54:8c:43:77:17:fe:d8:df:c1:1a:43:5a:93:cd:
         fc:3b:56:9b:99:33:66:94:63:94:61:05:95:e4:71:9a:33:ca:
         30:94:1a:6a:8f:09:02:e0:84:1a:9a:86:ea:2e:41:f3:8b:1e:
         01:b6:3b:e0:1d:b9:ca:7d:aa:62:7b:8e:8f:95:e6:dd:33:a5:
         6d:76:7f:b1:78:f5:9e:d6:5f:33:36:8d:3d:1f:93:8c:9f:9b:
         d3:f3:0a:83:3d:01:00:54:1e:84:7f:f7:29:c8:a5:7c:f2:4e:
         2a:c9:09:f0:2c:d6:fb:3e:bd:e2:d7:c6:bd:dc:ff:ac:87:b2:
         78:3f:2b:1e:8e:08:86:ce:f5:74:84:e1:7e:5a:65:b5:da:09:
         62:e9:a1:aa:83:e6:e3:3d:54:cd:f0:3d:94:5b:3c:7a:44:71:
         7f:83:d2:f1:69:54:75:76:88:3d:72:87:b2:9d:fe:fe:8f:d0:
         e3:94:ee:8e:f3:65:da:95:7c:99:3c:2d:ac:b4:87:05:07:88:
         73:3d:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:40 2024 by rpki-client on console-ams.rpki-client.org