Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/GproRfpIs2A-A3q5pRHXS_bbJmU.roa
File:                     GproRfpIs2A-A3q5pRHXS_bbJmU.roa (raw, json)
Hash identifier:          W4FGHgs3RBDNnASdKyY8laxIZ2BgkD+3QgwoAYQZTzI=
Subject key identifier:   1A:9A:E8:45:FA:48:B3:60:3E:03:7A:B9:A5:11:D7:4B:F6:DB:26:65
Certificate issuer:       /CN=ed6b200c52be4469a36ecda2ac2e2f7c7c8a75a2
Certificate serial:       179AE354
Authority key identifier: ED:6B:20:0C:52:BE:44:69:A3:6E:CD:A2:AC:2E:2F:7C:7C:8A:75:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WsgDFK-RGmjbs2irC4vfHyKdaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/GproRfpIs2A-A3q5pRHXS_bbJmU.roa
Signing time:             Sat 01 Jan 2022 10:01:42 +0000
ROA not before:           Sat 01 Jan 2022 10:01:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44624
IP address blocks:        185.69.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396026708 (0x179ae354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b200c52be4469a36ecda2ac2e2f7c7c8a75a2
        Validity
            Not Before: Jan  1 10:01:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a9ae845fa48b3603e037ab9a511d74bf6db2665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:dd:26:43:2e:ef:d2:87:f9:8d:66:2a:dc:
                    e9:af:52:6a:ce:65:f6:06:7e:33:bd:3b:5a:82:23:
                    fb:11:c3:8a:0b:cb:9f:b6:3f:18:3d:31:be:14:8c:
                    60:69:ec:17:f6:a1:35:6c:82:a7:80:02:a4:90:19:
                    a4:8e:19:f6:1c:59:68:5a:8d:ae:eb:47:9e:04:1d:
                    f6:3f:14:65:5f:2b:6c:d1:39:fe:41:24:49:98:fb:
                    cd:1f:ed:13:ca:e2:9c:19:1d:dd:c3:09:f0:28:13:
                    4f:47:a0:bc:06:19:52:bc:29:32:fe:19:06:24:86:
                    6e:8a:25:b0:78:26:de:fb:45:ba:a5:2b:fc:fe:db:
                    88:6c:de:73:e1:0c:32:5f:a2:51:2a:99:04:34:41:
                    13:cd:79:68:05:4a:2a:ea:dd:63:90:a7:3a:41:0a:
                    27:63:b3:b5:29:53:6f:df:35:d9:7f:5b:2a:8c:c7:
                    9d:12:b5:14:f5:b1:13:65:ad:33:b1:66:93:8f:38:
                    3d:a6:09:9f:d6:a1:44:b1:f6:d8:45:30:65:f7:71:
                    16:94:cc:3e:03:19:18:de:9c:a5:51:0f:c4:64:cc:
                    55:34:2f:9f:4e:a9:07:20:d1:49:43:91:1a:1a:82:
                    79:96:a2:e2:5b:e2:e0:d5:e0:a8:a0:6c:33:1d:62:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9A:E8:45:FA:48:B3:60:3E:03:7A:B9:A5:11:D7:4B:F6:DB:26:65
            X509v3 Authority Key Identifier:
                keyid:ED:6B:20:0C:52:BE:44:69:A3:6E:CD:A2:AC:2E:2F:7C:7C:8A:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WsgDFK-RGmjbs2irC4vfHyKdaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/GproRfpIs2A-A3q5pRHXS_bbJmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/7WsgDFK-RGmjbs2irC4vfHyKdaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:cd:1f:90:49:44:51:1a:26:e7:f0:37:06:8e:fc:69:d9:72:
         58:30:a4:50:90:45:f8:44:fe:bc:b7:48:80:aa:a5:b2:1a:a9:
         07:16:9c:71:4c:54:5f:1f:aa:aa:c1:93:e4:3d:84:13:0d:39:
         1b:49:25:cc:89:a5:b6:1d:09:19:74:73:b7:fb:76:e9:f1:87:
         74:58:a8:da:70:26:e2:b1:03:c1:8c:a3:b4:a7:e9:2d:1d:3a:
         5d:fe:8a:a9:50:26:39:52:ee:b7:31:ba:76:a7:99:c1:30:76:
         db:48:e4:cd:e1:ce:1e:6c:a8:56:89:6c:87:9a:b9:d4:11:9d:
         ea:f7:d7:86:14:71:cd:a8:c7:68:bd:e1:aa:65:de:ea:65:0c:
         d3:9f:af:1c:8a:9a:4c:69:c9:e0:db:08:c3:e1:23:76:be:82:
         95:0a:e0:34:b5:59:2c:9b:34:9c:f1:31:24:b4:f3:10:7e:76:
         fd:36:50:f1:55:e4:60:58:43:b0:fe:a3:a5:54:91:6f:53:71:
         57:ff:3c:77:78:58:e5:40:94:e3:7f:94:a1:5d:49:02:87:77:
         e9:b2:80:80:9b:95:d2:90:6a:0a:b5:ed:6e:af:d8:49:9a:c8:
         b2:74:55:c8:fd:c9:97:6f:f9:cc:b3:98:1f:44:27:96:da:03:
         8a:47:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:54 2024 by rpki-client on console-ams.rpki-client.org