Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/Im4L9m70rG85MpwrlzzVIWReTBQ.roa
File:                     Im4L9m70rG85MpwrlzzVIWReTBQ.roa (raw, json)
Hash identifier:          i4wcjfvVGZoT6gMnlkbJ7jQjBlub+5uGI7L8C7bhgNE=
Subject key identifier:   22:6E:0B:F6:6E:F4:AC:6F:39:32:9C:2B:97:3C:D5:21:64:5E:4C:14
Certificate issuer:       /CN=7d9a0a5b6861e3eece6e56e18ca4ba605de656f1
Certificate serial:       034BDBF9
Authority key identifier: 7D:9A:0A:5B:68:61:E3:EE:CE:6E:56:E1:8C:A4:BA:60:5D:E6:56:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZoKW2hh4-7OblbhjKS6YF3mVvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/Im4L9m70rG85MpwrlzzVIWReTBQ.roa
Signing time:             Sat 01 Jan 2022 00:52:01 +0000
ROA not before:           Sat 01 Jan 2022 00:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212175
IP address blocks:        185.225.9.0/24 maxlen: 24
                          2a10:9e80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55303161 (0x34bdbf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9a0a5b6861e3eece6e56e18ca4ba605de656f1
        Validity
            Not Before: Jan  1 00:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=226e0bf66ef4ac6f39329c2b973cd521645e4c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:18:5b:98:fd:32:f7:c9:88:7b:42:10:22:
                    c1:72:79:0e:5e:ff:63:ba:8e:a6:31:54:08:67:b1:
                    54:f8:7a:ee:69:e6:10:e5:00:b6:8e:54:63:83:19:
                    09:b7:ec:ce:4f:35:2f:98:9b:7c:40:d2:0a:0b:29:
                    1f:39:7c:c6:8f:de:3b:33:80:6b:bc:84:8b:d3:24:
                    9b:41:01:88:1e:4e:42:78:48:f0:a2:a4:50:d1:57:
                    42:e0:f9:6f:10:c8:50:75:99:9d:9b:fd:8a:e4:98:
                    7b:9b:f8:e7:44:63:34:e1:03:da:54:47:5c:38:b7:
                    ed:50:12:bc:60:df:5d:b7:78:59:4a:37:1c:c3:82:
                    08:90:42:57:a5:db:62:33:c7:ca:2f:5b:c8:e2:fd:
                    a4:2c:4d:a5:4b:cd:f3:24:14:62:db:5c:64:10:51:
                    fc:39:82:72:d5:f2:51:ea:ac:02:30:05:25:04:af:
                    55:58:88:40:bc:1e:c6:cf:d0:a6:30:a1:85:a9:7f:
                    87:b3:a3:35:13:c1:c2:40:dd:79:e5:a6:ac:ad:b0:
                    a6:c8:d0:e1:5e:91:83:f0:14:b3:e0:98:77:fa:c1:
                    26:f8:40:21:38:ed:54:78:13:d2:65:ad:9a:e8:0b:
                    78:17:c4:60:a4:54:97:47:ba:3e:6b:1c:5b:90:e1:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:0B:F6:6E:F4:AC:6F:39:32:9C:2B:97:3C:D5:21:64:5E:4C:14
            X509v3 Authority Key Identifier:
                keyid:7D:9A:0A:5B:68:61:E3:EE:CE:6E:56:E1:8C:A4:BA:60:5D:E6:56:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZoKW2hh4-7OblbhjKS6YF3mVvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/Im4L9m70rG85MpwrlzzVIWReTBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/fZoKW2hh4-7OblbhjKS6YF3mVvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.9.0/24
                IPv6:
                  2a10:9e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:64:1f:f2:fc:1d:79:df:fd:fd:d4:02:60:06:11:65:d3:69:
         12:78:4c:f9:2b:49:42:ad:c7:9e:69:c9:4a:33:67:0d:62:0d:
         c9:e4:85:c4:0f:42:20:cf:f2:b7:4c:89:d2:5b:22:eb:4f:42:
         46:b0:14:df:de:1e:81:fb:49:09:62:00:cd:bb:4b:d1:d5:8f:
         a1:90:97:8d:ec:46:d9:cf:1f:89:9c:b6:16:17:e9:e2:86:8f:
         dc:48:6e:2d:69:88:bd:7c:1d:78:f0:ab:2a:3b:e7:fa:2c:6a:
         f8:e7:bc:23:fb:a8:95:08:73:f5:c7:c2:01:ba:5c:eb:f4:45:
         31:78:d8:9d:df:03:b5:c9:2f:93:5a:95:ce:5c:ca:d4:34:ba:
         c0:3d:94:d9:bd:31:9c:53:64:c2:d8:af:62:f1:cc:1d:ed:33:
         ff:c7:10:37:dc:eb:b1:90:32:44:1c:eb:72:7e:81:ba:6f:b5:
         d8:2d:68:83:70:45:24:b0:ab:20:93:54:87:b8:22:04:77:4b:
         56:b2:24:95:ea:31:34:32:f2:90:46:7a:97:ea:b0:52:c0:d1:
         21:7b:71:6d:d1:3a:fa:f7:7a:fd:de:8c:95:e0:b2:f3:96:a2:
         99:d9:a9:79:9a:56:9f:64:bb:84:53:c8:97:e8:03:a3:f8:6b:
         9d:e9:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:44 2024 by rpki-client on console-fra.rpki-client.org