Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecab88-11bd-467f-9d24-ce04675bad27/1/wX4vBOf3bWuMF3TeSHsSEbVElhM.roa
File:                     wX4vBOf3bWuMF3TeSHsSEbVElhM.roa (raw, json)
Hash identifier:          sl1zYLRYVHCldHQ/DYAu3qT1RW6mlve1tXoB9zSVJv4=
Subject key identifier:   C1:7E:2F:04:E7:F7:6D:6B:8C:17:74:DE:48:7B:12:11:B5:44:96:13
Certificate issuer:       /CN=107d5eceb8bb2bc784bbb99b56352ed6f5011ac8
Certificate serial:       017699B4
Authority key identifier: 10:7D:5E:CE:B8:BB:2B:C7:84:BB:B9:9B:56:35:2E:D6:F5:01:1A:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH1ezri7K8eEu7mbVjUu1vUBGsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ecab88-11bd-467f-9d24-ce04675bad27/1/wX4vBOf3bWuMF3TeSHsSEbVElhM.roa
Signing time:             Sat 01 Jan 2022 11:58:07 +0000
ROA not before:           Sat 01 Jan 2022 11:58:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57497
IP address blocks:        185.179.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24549812 (0x17699b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107d5eceb8bb2bc784bbb99b56352ed6f5011ac8
        Validity
            Not Before: Jan  1 11:58:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c17e2f04e7f76d6b8c1774de487b1211b5449613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:3f:3f:aa:80:55:9b:a9:4c:46:39:5a:c3:
                    ab:2d:36:07:48:3f:5e:30:5a:e0:83:9c:02:15:05:
                    9a:d6:58:bc:c7:01:b5:d2:de:12:77:5d:51:b3:2f:
                    e2:ef:e4:9f:f3:08:b2:de:b8:a6:31:1a:bf:e0:6b:
                    ad:de:16:1d:a5:28:8a:e5:f8:43:e5:98:81:78:79:
                    9c:ab:e2:ce:58:75:b3:1a:64:3f:39:07:de:2b:f2:
                    f7:2d:08:c1:e4:87:72:a7:5f:7c:f2:53:83:06:73:
                    6e:60:48:5e:0f:52:55:e5:f0:46:82:a0:f5:bf:f0:
                    b7:02:19:c5:10:3b:64:b3:c9:99:4b:30:12:6b:45:
                    25:be:6c:2c:70:ed:cc:93:40:c8:53:ea:21:62:da:
                    ec:e1:29:b7:8f:dd:0f:82:f6:51:12:e1:59:ea:0f:
                    1a:2c:90:b6:41:f6:10:e4:e8:8b:56:65:70:18:fa:
                    2b:08:44:d3:e8:a1:9d:f1:71:47:1f:f5:35:2d:1f:
                    05:d0:0a:bd:be:24:78:71:ab:b7:36:8c:47:7f:c8:
                    cd:a1:0e:a2:52:20:d4:59:f4:e6:f4:36:aa:9c:0d:
                    e5:4e:ba:6c:63:b3:4a:45:48:60:96:c3:bc:9e:a5:
                    33:3b:af:43:37:5a:02:9d:06:4d:64:43:62:53:fb:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:2F:04:E7:F7:6D:6B:8C:17:74:DE:48:7B:12:11:B5:44:96:13
            X509v3 Authority Key Identifier:
                keyid:10:7D:5E:CE:B8:BB:2B:C7:84:BB:B9:9B:56:35:2E:D6:F5:01:1A:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH1ezri7K8eEu7mbVjUu1vUBGsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecab88-11bd-467f-9d24-ce04675bad27/1/wX4vBOf3bWuMF3TeSHsSEbVElhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecab88-11bd-467f-9d24-ce04675bad27/1/EH1ezri7K8eEu7mbVjUu1vUBGsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:b1:ba:35:7a:0f:f8:97:8e:ab:ef:22:80:09:25:7c:2b:
         a8:7b:9c:1c:26:00:85:34:f6:6f:3e:a6:4a:49:32:fd:2d:ba:
         f7:92:64:a9:07:5d:2c:36:98:b8:27:4b:24:b9:d7:b2:9e:6c:
         51:59:18:2d:1c:8d:c8:a9:25:d5:c5:41:29:60:35:49:e6:ba:
         5f:f9:4d:63:f4:fa:51:d4:45:4b:62:9f:5c:fd:80:fd:96:bb:
         c2:49:20:59:8b:f6:69:cd:da:95:12:b7:31:6d:69:82:48:c5:
         bf:9a:12:69:d3:da:f1:ed:87:52:48:47:86:67:b2:f1:ce:27:
         75:d8:af:22:3b:44:ea:f3:4b:7e:a5:6e:9d:21:20:56:1a:19:
         96:31:ca:e9:22:32:4f:4c:05:b3:fb:a8:ba:30:10:17:f9:f4:
         a2:eb:33:fa:54:e8:6c:cc:3f:f4:0e:f5:4b:82:ae:4a:6d:bd:
         d3:1b:4b:70:16:ec:71:fb:8e:52:f8:a9:1a:f6:54:9b:f4:9e:
         47:80:2e:60:58:2d:5f:ec:34:22:83:7a:c2:fc:57:9f:87:0d:
         4a:24:c2:bf:c4:76:35:11:b4:52:45:a8:ca:01:2c:a8:a8:ea:
         61:8d:65:e9:54:d6:14:6f:94:60:17:eb:fb:e2:00:28:54:ac:
         97:f4:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org