Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/j4btjTf8OAqjnRgDsuBU4rUEd44.roa
File:                     j4btjTf8OAqjnRgDsuBU4rUEd44.roa (raw, json)
Hash identifier:          VLtPrn7z3Xh7GlXrwQB67Mofje1e+ZweaY6ybZK3ZRc=
Subject key identifier:   8F:86:ED:8D:37:FC:38:0A:A3:9D:18:03:B2:E0:54:E2:B5:04:77:8E
Certificate issuer:       /CN=ed6b200c52be4469a36ecda2ac2e2f7c7c8a75a2
Certificate serial:       179A76FF
Authority key identifier: ED:6B:20:0C:52:BE:44:69:A3:6E:CD:A2:AC:2E:2F:7C:7C:8A:75:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WsgDFK-RGmjbs2irC4vfHyKdaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/j4btjTf8OAqjnRgDsuBU4rUEd44.roa
Signing time:             Sat 01 Jan 2022 10:01:41 +0000
ROA not before:           Sat 01 Jan 2022 10:01:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16062
IP address blocks:        185.69.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395998975 (0x179a76ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b200c52be4469a36ecda2ac2e2f7c7c8a75a2
        Validity
            Not Before: Jan  1 10:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f86ed8d37fc380aa39d1803b2e054e2b504778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:81:4f:ad:95:14:09:36:af:a6:eb:a3:e3:
                    75:2b:c4:9d:c8:e4:e1:17:b9:18:9a:24:31:8b:08:
                    a9:4c:fc:70:93:1f:38:b6:ef:d9:44:ab:5c:0d:58:
                    9e:8a:e9:ba:c2:3f:a6:94:da:87:cb:3e:f8:5c:11:
                    86:fe:95:a0:43:1f:f8:7c:fe:63:a6:8b:66:c8:0b:
                    58:63:39:14:69:20:57:ba:b8:2a:f6:7d:c1:de:11:
                    51:9d:3d:e7:e0:b8:f9:e8:f9:e2:c2:1d:8b:2f:e8:
                    b1:fb:42:fc:a7:eb:fd:f4:d4:2a:7e:76:b7:b3:2c:
                    c7:1f:a9:7b:20:7c:61:0a:ca:5e:11:5e:87:96:52:
                    12:76:c6:e3:02:57:7d:c4:39:89:be:f2:48:90:f5:
                    85:c4:10:28:3f:3d:07:9a:34:d3:c8:2c:ae:26:9d:
                    7a:a9:8f:33:74:52:d2:89:e3:f4:26:ca:6f:5d:6e:
                    55:9f:01:09:b5:85:ff:2e:f2:5a:2b:8a:4c:dd:24:
                    7c:a5:4e:b3:05:93:ce:1f:90:bb:c3:7c:9a:99:6a:
                    f9:16:60:e9:18:02:ed:f0:40:41:dc:36:ec:cf:85:
                    28:50:04:91:8a:88:38:e3:8a:90:9d:b5:6a:3a:89:
                    c9:a2:dd:da:17:3a:10:64:f0:40:1c:8a:48:46:22:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:86:ED:8D:37:FC:38:0A:A3:9D:18:03:B2:E0:54:E2:B5:04:77:8E
            X509v3 Authority Key Identifier:
                keyid:ED:6B:20:0C:52:BE:44:69:A3:6E:CD:A2:AC:2E:2F:7C:7C:8A:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WsgDFK-RGmjbs2irC4vfHyKdaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/j4btjTf8OAqjnRgDsuBU4rUEd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/7WsgDFK-RGmjbs2irC4vfHyKdaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:84:25:4e:d0:6a:7c:cb:66:3f:59:22:2c:4c:45:b6:96:d5:
         33:01:38:98:55:d6:2d:8e:f6:fb:da:51:14:0e:ab:d9:5d:a5:
         e8:d9:db:50:de:99:d6:08:af:26:51:e8:90:36:4e:59:b0:70:
         25:6e:ad:6b:3f:9a:de:2f:1e:a4:c8:08:f3:62:92:8e:4b:15:
         d8:41:9d:13:6f:46:5b:81:5a:97:3d:f1:08:8e:4f:53:34:b3:
         2a:d9:11:5f:50:81:04:32:d9:59:02:0d:55:cd:c8:72:4b:88:
         ac:03:1a:8e:f5:37:a2:b9:41:39:1e:1d:ef:ba:68:9e:2e:44:
         b3:27:9c:52:f6:9f:85:f3:36:78:a2:c9:67:81:b6:63:39:2f:
         cb:be:b9:c3:ed:f8:10:54:3a:9f:a6:cd:25:96:5c:e4:95:54:
         97:84:f3:b4:fb:7d:ff:ce:6c:10:c9:0e:a0:1c:c8:be:89:39:
         7d:db:fc:8a:ed:6d:7f:0c:ff:75:39:9e:6c:af:40:87:55:e5:
         21:f8:51:ff:27:c4:1f:68:8e:b0:53:fd:60:5e:14:0d:e6:1a:
         2d:9e:c2:e1:b3:23:7a:65:b6:96:83:81:93:26:93:af:6a:b6:
         2e:19:2c:4f:df:ad:9d:3c:fc:f9:52:a1:0f:e3:cd:cb:0c:fb:
         a7:de:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:29 2023 by rpki-client on console-fra.rpki-client.org