Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/UiCFjIDX75IA1KWUIS0Zi4H0VVU.roa
File:                     UiCFjIDX75IA1KWUIS0Zi4H0VVU.roa (raw, json)
Hash identifier:          JLHM4JUYVnqqJALcve7EXs1/yP43yuAw5ATIT1XktHY=
Subject key identifier:   52:20:85:8C:80:D7:EF:92:00:D4:A5:94:21:2D:19:8B:81:F4:55:55
Certificate issuer:       /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial:       0CDC2F42
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/UiCFjIDX75IA1KWUIS0Zi4H0VVU.roa
Signing time:             Fri 06 May 2022 14:59:00 +0000
ROA not before:           Fri 06 May 2022 14:59:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57882
IP address blocks:        185.153.92.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215756610 (0xcdc2f42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
        Validity
            Not Before: May  6 14:59:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5220858c80d7ef9200d4a594212d198b81f45555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:f7:38:06:ec:45:8b:0e:40:b8:fa:3b:9c:
                    ff:22:53:fe:3a:61:e0:31:69:f4:12:a4:08:c1:3e:
                    a5:43:a6:2c:37:16:63:3f:72:94:95:dc:f4:84:35:
                    51:20:09:eb:18:eb:b3:9d:93:76:ab:ea:c6:88:94:
                    28:e9:dd:c6:fc:a1:d0:c9:3f:55:69:0e:57:8b:8b:
                    b8:c7:06:9b:52:fc:22:1a:c8:80:fa:5b:65:de:bc:
                    a2:e2:b7:69:74:48:93:30:d4:74:14:93:73:de:05:
                    94:98:7b:36:b6:24:54:84:f0:b1:65:fb:27:91:da:
                    3c:ed:1b:f5:3c:c9:6b:3b:a6:ff:3a:38:bb:23:2c:
                    b7:61:45:e9:b0:20:2c:9e:14:33:3e:71:d5:52:c6:
                    b2:24:d5:8d:50:a8:94:80:e1:10:70:45:9b:88:6b:
                    e2:00:19:6e:18:45:7d:32:f1:87:70:6b:c7:30:83:
                    12:f5:3e:d7:e8:af:e3:f8:20:05:26:f0:0c:7c:f7:
                    b1:e6:56:d5:7c:bf:74:e3:1a:00:6d:70:24:be:8d:
                    18:36:8f:d7:58:f4:08:a4:05:2e:c1:a8:4f:ff:5e:
                    2f:69:b9:d6:d2:f0:63:bc:11:f7:ef:11:2f:00:c0:
                    e4:d9:64:da:ea:d7:0d:61:45:0b:21:c5:6d:68:e1:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:20:85:8C:80:D7:EF:92:00:D4:A5:94:21:2D:19:8B:81:F4:55:55
            X509v3 Authority Key Identifier:
                keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/UiCFjIDX75IA1KWUIS0Zi4H0VVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:e8:c9:72:2d:06:f8:88:ee:06:e1:9b:f4:81:82:94:c7:
         47:35:97:e7:29:59:52:b1:cb:95:92:f6:67:99:44:f3:68:47:
         93:e8:4f:5b:74:22:90:c2:99:73:d8:6a:5f:d5:a0:63:da:90:
         95:79:f3:57:63:48:8d:7d:40:72:7a:7a:f9:6a:6c:dc:24:14:
         be:65:07:1b:5c:4d:ad:38:8e:d3:93:32:5b:75:3e:2c:1f:cc:
         a8:81:eb:eb:cc:23:ff:26:84:30:d5:2d:21:bc:b3:c6:f4:65:
         9f:88:71:63:ff:32:5c:94:21:2e:87:81:1a:9d:e6:a2:d0:a0:
         dd:af:83:0a:bd:04:42:f2:74:9d:88:b9:01:cd:06:c1:7d:db:
         82:74:4c:fe:68:8d:8b:cb:77:3d:b3:32:86:ec:9c:5f:c8:d8:
         74:a1:f8:56:84:9e:2f:8c:6d:57:cb:f2:49:c1:1d:ee:35:a5:
         28:cd:a7:e0:ca:40:a1:79:9f:cb:95:69:4a:e2:89:ec:90:71:
         53:e5:3d:5c:cb:2e:8d:d0:d7:67:38:8f:1e:f5:f1:27:35:ec:
         bc:70:3b:7f:a8:6b:97:d3:d8:8c:8f:fe:43:eb:c6:2b:e5:5c:
         ce:32:e8:f6:eb:1d:13:46:8c:42:bf:a7:8d:c7:17:bf:eb:90:
         c3:39:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:10 2024 by rpki-client on console-fra.rpki-client.org