Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/oMDjBgS7XCdo81XRCBylqHfz_RE.roa
File:                     oMDjBgS7XCdo81XRCBylqHfz_RE.roa (raw, json)
Hash identifier:          qzbs3Gd9P5iYNy7Q4JTEhZs/zy/sNDHyOf72VDzgnQ0=
Subject key identifier:   A0:C0:E3:06:04:BB:5C:27:68:F3:55:D1:08:1C:A5:A8:77:F3:FD:11
Certificate issuer:       /CN=1c2cb185ed7470221c55cae51ede17b34fb16e69
Certificate serial:       F891
Authority key identifier: 1C:2C:B1:85:ED:74:70:22:1C:55:CA:E5:1E:DE:17:B3:4F:B1:6E:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCyxhe10cCIcVcrlHt4Xs0-xbmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/oMDjBgS7XCdo81XRCBylqHfz_RE.roa
Signing time:             Wed 18 May 2022 05:15:02 +0000
ROA not before:           Wed 18 May 2022 05:15:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31549
IP address blocks:        185.110.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63633 (0xf891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2cb185ed7470221c55cae51ede17b34fb16e69
        Validity
            Not Before: May 18 05:15:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0c0e30604bb5c2768f355d1081ca5a877f3fd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:7c:60:33:7e:87:9e:66:12:12:12:eb:55:
                    ad:03:18:d3:98:4b:67:37:d0:47:88:78:aa:e4:38:
                    c7:e1:c0:df:d3:74:2a:30:f4:43:39:b6:37:74:8e:
                    f0:42:b1:2a:67:1a:cb:40:eb:77:bd:5f:82:32:23:
                    33:f5:19:d8:ff:ba:a3:a8:ca:19:ff:ff:31:2b:1d:
                    21:5b:e3:67:8a:8b:17:dd:26:3e:1b:56:71:4c:c9:
                    de:d4:bf:f4:35:9a:25:f1:c9:4b:ce:d4:70:c1:75:
                    25:07:2a:4c:c1:a8:92:88:c8:43:2d:d5:37:a9:44:
                    21:67:cc:d8:44:1f:b2:57:7f:0f:5a:29:11:eb:25:
                    69:9a:11:60:17:a9:0f:a3:ef:21:e4:99:4d:bf:05:
                    c9:21:6c:60:6f:0e:fd:67:da:47:37:10:75:84:0a:
                    19:8c:b3:39:12:10:cd:b5:23:b7:ce:db:10:d1:3f:
                    24:37:13:a5:b2:1c:6a:33:c1:7d:ef:f9:2b:a7:ed:
                    0d:63:69:5d:70:2d:49:b7:d7:be:69:b9:1b:91:ed:
                    15:83:b9:47:b2:0a:5d:7f:f6:4c:87:39:a3:79:40:
                    dd:6b:30:0d:53:9d:03:17:ac:37:cc:64:93:5f:56:
                    b2:4c:96:c4:3f:f1:f0:c0:94:20:b2:84:a5:7f:2a:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C0:E3:06:04:BB:5C:27:68:F3:55:D1:08:1C:A5:A8:77:F3:FD:11
            X509v3 Authority Key Identifier:
                keyid:1C:2C:B1:85:ED:74:70:22:1C:55:CA:E5:1E:DE:17:B3:4F:B1:6E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCyxhe10cCIcVcrlHt4Xs0-xbmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/oMDjBgS7XCdo81XRCBylqHfz_RE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/HCyxhe10cCIcVcrlHt4Xs0-xbmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:24:e1:32:02:f2:f1:39:15:40:33:28:bc:53:b8:1b:d4:e5:
         33:9e:a9:b6:27:fb:65:12:7f:c6:7d:cd:90:e1:d2:cb:05:d1:
         a9:83:12:66:51:08:36:13:08:4d:3e:b2:c5:ef:0b:c0:87:a3:
         65:62:34:83:ba:a2:df:f5:43:ec:ca:e0:3f:19:84:25:cc:a7:
         1e:fb:20:6b:36:2f:44:9d:2d:a0:10:e6:b8:c9:87:af:d9:dd:
         da:82:32:47:57:7a:1a:1e:1b:91:3d:6a:a0:e2:d2:9b:72:21:
         c8:a3:3d:e5:35:23:07:1c:ed:a8:2c:cc:bf:9f:89:6b:31:5f:
         b1:57:8f:19:6e:ab:08:90:f2:31:b6:3b:32:13:9c:bc:d4:5d:
         f7:37:22:d0:30:51:ed:ed:64:ea:55:49:71:75:ca:6c:dd:30:
         f6:fc:b9:48:4c:81:0f:f7:b0:f7:92:b7:ae:5d:81:e5:fa:c2:
         57:fd:e4:0b:e9:ce:b6:8c:95:c8:82:cb:63:46:a5:c9:6f:9d:
         fa:9b:d4:db:7f:33:25:8f:ec:85:7d:c4:cf:be:16:f5:ce:c1:
         a1:33:c5:9b:57:5f:3c:47:0a:5b:a2:c9:f6:79:76:ed:40:2c:
         32:fc:db:f8:70:12:f5:7f:65:c8:35:81:ec:c4:35:41:6f:03:
         20:3d:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:59 2024 by rpki-client on console-ams.rpki-client.org