Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa
File:                     2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa (raw, json)
Hash identifier:          SDOV78v0wFlip55s75tEvdWUCeW1KVVLl34zhSGpb1M=
Subject key identifier:   DA:9E:B6:03:6A:14:43:88:33:AF:93:ED:BB:EF:21:41:B3:09:33:09
Certificate issuer:       /CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Certificate serial:       017DFA5A
Authority key identifier: 36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa
Signing time:             Sat 01 Jan 2022 04:03:46 +0000
ROA not before:           Sat 01 Jan 2022 04:03:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42947
IP address blocks:        185.213.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25033306 (0x17dfa5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f557792aab8bbd9e6de4eec6d27857701f334d
        Validity
            Not Before: Jan  1 04:03:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da9eb6036a14438833af93edbbef2141b3093309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:b7:86:34:a2:cd:39:5b:ea:04:18:e2:8a:
                    81:3b:ae:4e:6d:26:22:43:c1:b0:7c:51:e1:6f:a1:
                    00:72:65:6e:4e:1d:dd:a5:d5:52:ca:83:9a:f0:d6:
                    0c:80:a6:7f:66:cd:82:59:58:e4:c4:af:4d:94:60:
                    e5:53:4d:07:d0:72:a5:c1:ee:2f:d7:23:34:18:fb:
                    2c:55:ee:e2:65:35:09:03:9a:86:84:e9:ff:f3:51:
                    6e:0d:f6:e5:b4:4d:9d:99:32:13:4b:1f:0f:b2:cf:
                    0c:2a:dc:3e:d0:c9:26:9f:36:01:f8:e1:b1:fe:20:
                    cd:d9:a5:67:83:51:b1:99:26:b0:e3:d8:5c:26:0a:
                    92:53:17:b5:16:41:bb:0e:ca:cd:30:90:ab:b1:7b:
                    08:f8:5b:05:0c:b3:f0:4f:d6:f5:9d:ea:20:a6:24:
                    91:64:be:b2:4a:25:fe:21:ee:a3:df:8c:ff:c1:52:
                    2e:68:1d:b8:8d:8d:9b:a6:06:29:0b:5c:1c:58:5a:
                    cc:8c:7b:64:5f:fe:a6:1f:4c:51:5c:70:c0:9c:45:
                    83:1a:eb:87:74:df:57:53:8e:8e:26:35:fb:0e:0c:
                    84:6b:c5:14:a3:36:30:db:74:5f:c9:49:8e:25:ef:
                    ae:05:56:ca:0d:11:98:4e:80:0e:db:2d:23:f4:0e:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:B6:03:6A:14:43:88:33:AF:93:ED:BB:EF:21:41:B3:09:33:09
            X509v3 Authority Key Identifier:
                keyid:36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:ca:b5:fb:85:e5:48:c1:cd:61:aa:9e:e0:72:39:98:d7:
         cb:85:ca:9b:67:8f:1c:b2:20:1a:66:38:12:e9:a8:bf:68:77:
         da:bd:4c:8e:c7:12:2b:4a:74:6d:ad:1d:fa:dd:1e:bb:a2:be:
         c0:85:90:ce:93:1f:aa:20:5e:3e:25:b3:10:37:7f:92:28:2e:
         f2:01:c6:a7:5b:b0:13:09:c8:60:f2:7a:6f:f7:a4:e7:8b:3d:
         39:f7:13:23:7d:99:7b:6c:8a:41:45:ba:41:38:76:6d:72:54:
         53:05:02:75:35:c6:98:35:78:75:31:36:b7:b2:7a:5b:00:8a:
         ec:14:b6:be:82:dd:fe:72:ba:0e:22:a1:66:c7:f6:8b:98:8a:
         d2:9f:a2:5b:af:d3:fc:46:ca:7a:77:c9:4c:af:0c:8d:cb:7d:
         8f:23:30:b1:08:1e:2a:62:6e:0c:8a:1f:8a:c3:00:98:82:a2:
         87:ba:27:25:6b:6d:df:77:f5:1b:7c:95:94:76:7a:ff:cc:53:
         7a:f0:f4:5c:67:23:9b:58:b3:5a:49:91:df:47:6e:ee:02:49:
         a6:b5:1e:d7:4b:b9:df:38:7d:5d:8d:f0:1b:d2:c8:ab:c3:5a:
         d2:e0:aa:97:a9:f8:c6:1a:26:32:47:5c:e7:31:72:b8:d7:35:
         63:8f:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:38 2024 by rpki-client on console-fra.rpki-client.org