Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f03d8d-8bd7-497f-9166-da46c3a3f836/1/YXwqk0oo4MJ5V04_3R7-3SoMZ0Y.roa
File:                     YXwqk0oo4MJ5V04_3R7-3SoMZ0Y.roa (raw, json)
Hash identifier:          iKNw92ee/zJYVTsS3+wXfgeGYo4ciS+aWQ7V+hCQGD4=
Subject key identifier:   61:7C:2A:93:4A:28:E0:C2:79:57:4E:3F:DD:1E:FE:DD:2A:0C:67:46
Certificate issuer:       /CN=6deed43cbfea72014b4861cafa3f7ed548b0f542
Certificate serial:       01832223520D04E570C1B283A2EF74C1B237
Authority key identifier: 6D:EE:D4:3C:BF:EA:72:01:4B:48:61:CA:FA:3F:7E:D5:48:B0:F5:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/be7UPL_qcgFLSGHK-j9-1Uiw9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f03d8d-8bd7-497f-9166-da46c3a3f836/1/YXwqk0oo4MJ5V04_3R7-3SoMZ0Y.roa
Signing time:             Fri 09 Sep 2022 12:04:43 +0000
ROA not before:           Fri 09 Sep 2022 12:04:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202903
IP address blocks:        185.182.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:22:23:52:0d:04:e5:70:c1:b2:83:a2:ef:74:c1:b2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6deed43cbfea72014b4861cafa3f7ed548b0f542
        Validity
            Not Before: Sep  9 12:04:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=617c2a934a28e0c279574e3fdd1efedd2a0c6746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:b4:ba:e6:47:4e:d7:bb:fd:47:97:e4:a7:
                    88:97:66:7d:3e:d6:10:86:23:b2:f1:91:3e:b2:44:
                    59:23:34:97:ba:bd:7e:e6:88:3e:53:8c:86:a0:82:
                    5c:92:fd:2d:64:d3:52:0b:56:0a:50:9a:0b:92:49:
                    c9:a2:88:ce:51:76:d9:31:14:2b:74:6d:c0:6b:e1:
                    5e:12:3a:00:ae:18:02:f5:e9:55:c7:b6:14:45:35:
                    61:a7:a6:6f:87:e4:76:36:fd:31:95:be:cc:fc:f3:
                    aa:b7:78:85:65:15:f8:a0:bb:76:8e:f7:b6:85:60:
                    d7:ba:2e:99:59:a8:a3:0f:0b:d2:9f:5b:50:79:7e:
                    6d:4c:d9:b8:1a:f7:f2:e4:b4:72:2d:0c:72:d1:54:
                    2e:a5:5c:b4:84:f3:a1:32:19:b7:c1:bc:4e:fd:bc:
                    ad:6b:b4:99:8d:aa:05:eb:27:99:df:40:42:1f:95:
                    95:7a:ec:f3:a7:ba:5d:94:a9:9b:3f:74:4e:03:ca:
                    f6:89:6d:1b:ce:8e:19:e6:3d:36:7b:6d:d4:c6:a8:
                    dc:91:17:a5:7a:11:e8:11:13:5c:7a:72:cc:a4:ff:
                    ec:61:dc:10:70:4a:a5:3c:26:e3:32:1d:87:c4:6d:
                    e7:1b:cc:da:7b:53:d6:c8:9d:42:ff:d5:74:8e:e4:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:2A:93:4A:28:E0:C2:79:57:4E:3F:DD:1E:FE:DD:2A:0C:67:46
            X509v3 Authority Key Identifier:
                keyid:6D:EE:D4:3C:BF:EA:72:01:4B:48:61:CA:FA:3F:7E:D5:48:B0:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7UPL_qcgFLSGHK-j9-1Uiw9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f03d8d-8bd7-497f-9166-da46c3a3f836/1/YXwqk0oo4MJ5V04_3R7-3SoMZ0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f03d8d-8bd7-497f-9166-da46c3a3f836/1/be7UPL_qcgFLSGHK-j9-1Uiw9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:23:56:c1:cc:0b:75:f9:24:ea:7a:a8:6b:07:df:f7:f8:f8:
         ff:bb:67:fd:19:ee:f8:5b:ae:bb:3c:d0:9c:86:ff:27:78:60:
         a3:cf:4a:cb:61:84:49:49:ae:08:0c:ee:84:91:00:9b:f4:3c:
         51:cc:68:1e:71:29:cd:6c:e6:ed:03:32:33:e7:43:bc:a4:9b:
         19:30:9a:fb:96:e9:43:93:e2:62:c9:6b:3e:59:96:aa:aa:30:
         20:d1:b1:14:20:aa:f9:97:8e:92:f0:f6:31:a1:f6:91:59:14:
         99:44:0a:d5:e9:0c:75:63:67:47:31:ea:ba:2c:93:71:97:b3:
         d2:a8:f1:8f:c7:09:79:9b:61:24:e2:73:a2:d7:f5:82:bb:a2:
         7c:57:cd:87:22:95:cd:93:8d:ff:67:c7:ea:81:ec:82:f0:d3:
         59:77:a1:3a:ab:ba:2b:20:ef:80:a0:cf:f4:59:8f:a8:67:85:
         b0:4a:b1:bb:39:08:fe:b2:10:03:27:20:da:34:b0:1a:7f:80:
         89:96:d4:7a:e7:36:ac:fe:4f:67:7b:b8:12:39:76:19:d3:0f:
         ac:47:b5:a4:23:3a:4d:d5:97:4d:8b:4a:1d:98:a5:7d:2f:0f:
         f4:29:0d:96:ba:bc:9b:03:97:05:a7:ed:f1:1d:3b:9c:76:70:
         2e:b8:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:09 2024 by rpki-client on console-fra.rpki-client.org