Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/RLTc9srzq3q-yGbLudK07j18gSE.roa
File:                     RLTc9srzq3q-yGbLudK07j18gSE.roa (raw, json)
Hash identifier:          8IM3Hqfkdkz3kKMcpjnp3TgjyDYwWmNSuEefXGi5j/U=
Subject key identifier:   44:B4:DC:F6:CA:F3:AB:7A:BE:C8:66:CB:B9:D2:B4:EE:3D:7C:81:21
Certificate issuer:       /CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Certificate serial:       03B10C20
Authority key identifier: 24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/RLTc9srzq3q-yGbLudK07j18gSE.roa
Signing time:             Sat 01 Jan 2022 12:00:43 +0000
ROA not before:           Sat 01 Jan 2022 12:00:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39744
IP address blocks:        185.216.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61934624 (0x3b10c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
        Validity
            Not Before: Jan  1 12:00:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44b4dcf6caf3ab7abec866cbb9d2b4ee3d7c8121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:68:83:5f:45:ff:91:a9:e7:a4:26:12:19:
                    ab:5e:9f:04:c0:4d:b8:7c:3d:99:5b:cd:7d:11:36:
                    3e:96:7b:90:9f:f0:d0:55:ea:9b:0d:73:3b:78:97:
                    e4:8d:01:42:50:b9:63:0f:dc:73:c2:c6:af:e6:fb:
                    59:46:8d:a7:e1:2b:b9:cb:6e:0e:fc:0f:e1:aa:d9:
                    37:96:f3:51:ad:bb:e7:70:ce:60:f5:04:a7:7c:c2:
                    45:89:7e:29:cb:54:ee:07:ab:b6:1a:a0:b6:2b:ef:
                    c0:b2:ed:ad:a2:ff:9b:c8:a7:18:aa:57:ac:da:c3:
                    cd:51:5f:3f:a8:a8:9e:f1:5f:4c:ac:33:fa:83:46:
                    36:dc:c9:df:c2:0c:02:34:d9:99:85:ef:8a:cd:c5:
                    a0:6e:c5:2f:6a:07:9a:27:c8:20:88:ad:dc:b6:7a:
                    cc:c8:21:98:b8:a1:db:1d:f4:53:96:d9:07:46:06:
                    ad:c1:76:ae:64:26:6d:fa:c0:07:af:e5:20:20:af:
                    b1:f1:d1:fc:27:07:ab:13:61:92:53:aa:06:3f:7f:
                    65:75:60:8c:89:f1:55:b2:58:8b:27:6d:fe:2e:8b:
                    03:03:7d:78:71:be:06:a9:f6:b5:d8:9e:67:a4:b1:
                    44:46:df:e7:1b:c0:e1:5b:e1:e8:ff:c7:6d:0e:b4:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:DC:F6:CA:F3:AB:7A:BE:C8:66:CB:B9:D2:B4:EE:3D:7C:81:21
            X509v3 Authority Key Identifier:
                keyid:24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/RLTc9srzq3q-yGbLudK07j18gSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:76:0d:65:ae:c5:23:92:3b:48:1a:55:9c:ca:a6:d8:54:1f:
         72:49:6d:36:a2:17:1f:11:4d:86:35:da:a4:fd:35:a5:e8:b1:
         d0:41:9c:6a:f7:c0:08:02:7b:8a:1d:0b:40:e8:46:7c:15:09:
         5d:1e:07:24:c0:c2:f2:dc:c9:8a:25:24:6c:da:c0:0a:30:a5:
         c7:3b:63:ef:36:cc:5a:ae:a8:c4:f8:db:77:5a:a8:11:90:bd:
         fe:94:f9:3f:57:90:2a:80:08:1d:07:f2:e6:5a:35:99:87:0e:
         59:f4:95:67:2a:b8:ae:b1:28:ea:3e:cc:ff:9c:39:53:32:eb:
         74:21:f5:3b:4f:19:53:bc:4c:13:05:c7:ae:7a:ea:fe:b0:de:
         3b:c2:40:f5:b4:91:7f:f5:24:dc:91:db:33:f1:f4:b4:a9:e7:
         f0:7e:cf:cc:3f:4e:81:d3:ff:a1:61:51:33:1d:21:96:b4:4f:
         46:10:84:cc:b8:b3:fa:18:72:67:2e:88:02:c8:1c:81:3a:0c:
         5a:7a:55:75:ff:c9:69:61:e9:e5:39:f1:5d:db:57:13:bc:0d:
         38:7c:08:2c:d2:0f:d6:1e:bd:4f:92:69:e3:a8:30:eb:00:fa:
         df:d0:9e:e3:ff:a9:70:db:6b:04:cc:ff:96:f3:02:06:c0:37:
         85:e6:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org