Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/2Zttqtx5lmaShGLu2LymCuQ2i7M.roa
File:                     2Zttqtx5lmaShGLu2LymCuQ2i7M.roa (raw, json)
Hash identifier:          LG5pSSsgR+QtcKB4LDW/A+It9T1HyzwDqQtDZDN6qQs=
Subject key identifier:   D9:9B:6D:AA:DC:79:96:66:92:84:62:EE:D8:BC:A6:0A:E4:36:8B:B3
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       01DE52A7
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/2Zttqtx5lmaShGLu2LymCuQ2i7M.roa
Signing time:             Wed 20 Apr 2022 14:56:11 +0000
ROA not before:           Wed 20 Apr 2022 14:56:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        185.2.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31347367 (0x1de52a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Apr 20 14:56:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d99b6daadc799666928462eed8bca60ae4368bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:d0:35:ed:95:e1:14:ed:dc:b0:7b:da:ca:
                    93:da:de:55:e8:dc:c2:25:12:f1:db:74:8b:29:31:
                    5b:06:a8:75:b8:8f:97:10:18:35:73:d8:d3:67:44:
                    08:1a:94:40:9c:f7:b2:9a:d8:bb:d6:49:9a:d3:b0:
                    6d:3b:07:85:52:de:be:80:39:e8:1d:c4:0d:a0:4a:
                    98:54:27:36:9a:a7:b6:23:b3:17:08:4f:07:39:f8:
                    13:51:1d:ba:9f:e7:80:53:b6:ab:71:2d:4f:38:51:
                    c0:89:c5:20:a9:83:b6:91:d1:1f:7d:91:27:cf:8d:
                    59:b2:ef:8c:a8:73:43:96:08:28:27:34:4b:32:ef:
                    13:51:af:9f:7d:86:9d:46:32:c7:d1:a5:a1:13:e2:
                    29:93:a1:34:ef:e1:31:93:f1:41:7b:69:aa:41:d7:
                    27:88:e2:80:0f:16:7d:96:2a:3d:3f:9c:21:50:67:
                    8c:16:e6:48:27:7c:7b:01:7d:2b:e7:8d:3e:ec:c8:
                    24:5c:bd:f7:92:9a:88:e4:e3:22:91:5a:ed:09:68:
                    d1:e6:41:d9:0d:3e:fa:71:e6:65:99:73:01:51:bf:
                    4b:bf:be:f1:fb:0d:ed:03:86:ca:64:d5:b3:d7:64:
                    79:65:20:bd:37:71:fe:73:22:ad:21:e4:50:40:3a:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:6D:AA:DC:79:96:66:92:84:62:EE:D8:BC:A6:0A:E4:36:8B:B3
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/2Zttqtx5lmaShGLu2LymCuQ2i7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.2.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:5e:aa:96:40:5b:18:57:e3:6a:eb:00:98:98:64:e0:7f:
         69:65:57:6b:0d:cb:b1:3b:b0:f0:1a:0e:c4:23:c4:0b:48:41:
         4c:ab:92:39:46:8d:0e:b1:35:ef:c9:0b:b1:e9:ec:45:30:37:
         fa:07:69:9c:6f:7d:99:05:26:6a:5c:d5:26:e2:f8:0f:07:8b:
         4f:98:f0:b3:55:cd:5a:6a:db:9e:a1:e6:96:d6:80:98:fe:a0:
         65:5e:fe:40:db:54:f6:86:ac:a2:c3:ae:00:51:1a:96:69:22:
         b1:e7:4c:09:d2:26:0d:5e:b0:1f:50:3f:06:ab:66:f5:ad:f5:
         1c:34:1d:e6:38:72:72:b8:0b:2f:7c:65:b0:9b:e3:d7:8d:73:
         10:80:49:ce:45:1c:ba:a2:68:0a:04:18:5d:9f:8e:40:e8:56:
         dc:8b:5b:66:6d:c5:81:21:db:f7:0f:ea:33:88:ba:0a:76:1f:
         a0:e6:70:5e:3f:17:66:f3:b0:a7:56:30:48:75:ee:d7:ed:19:
         14:e9:d1:b8:c3:a2:a2:e7:ca:0f:34:b9:a3:62:f9:9f:c4:a2:
         dd:40:ee:39:0b:75:b1:7b:90:4e:12:32:85:67:d1:af:8d:de:
         86:83:46:3f:9f:62:6d:50:f7:06:ad:e9:54:b7:4f:f4:e3:7d:
         a1:56:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org