Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/sYg7VtgwPW28owOqIn7aZ5WeCpo.roa
File:                     sYg7VtgwPW28owOqIn7aZ5WeCpo.roa (raw, json)
Hash identifier:          v8HSo2gqjW0XviyYC5Ki1XVgyrC2+0J0IdaKTZihAxc=
Subject key identifier:   B1:88:3B:56:D8:30:3D:6D:BC:A3:03:AA:22:7E:DA:67:95:9E:0A:9A
Certificate issuer:       /CN=9d50eaae1731d233f74435709a7b1dbab8f861cd
Certificate serial:       0186062D
Authority key identifier: 9D:50:EA:AE:17:31:D2:33:F7:44:35:70:9A:7B:1D:BA:B8:F8:61:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVDqrhcx0jP3RDVwmnsdurj4Yc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/sYg7VtgwPW28owOqIn7aZ5WeCpo.roa
Signing time:             Sat 01 Jan 2022 06:01:23 +0000
ROA not before:           Sat 01 Jan 2022 06:01:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44285
IP address blocks:        185.235.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25560621 (0x186062d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d50eaae1731d233f74435709a7b1dbab8f861cd
        Validity
            Not Before: Jan  1 06:01:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b1883b56d8303d6dbca303aa227eda67959e0a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:bf:a9:5c:e7:18:ab:21:40:96:fa:71:89:
                    34:73:a8:0e:46:d6:8c:e7:cf:26:c9:90:60:25:75:
                    70:23:a4:62:58:f9:4e:cb:8e:ef:a8:14:e3:37:5e:
                    1c:13:24:f2:c0:eb:58:dc:0b:4e:9c:9e:a6:f2:8f:
                    c6:83:67:96:67:5c:bf:9c:8a:8b:51:f8:59:71:1d:
                    5c:2d:79:f1:ef:6b:be:ce:71:0c:8c:36:cf:4e:a7:
                    bb:24:1e:15:c2:71:0a:9a:06:35:f4:60:a7:ae:f8:
                    b0:5d:d3:8c:3c:38:7e:04:8a:0c:a1:4b:8b:b6:7d:
                    47:57:28:36:2f:e5:c6:3d:99:58:86:d2:17:a2:69:
                    2c:0a:d7:f2:34:62:d2:3a:3e:78:51:68:61:c2:e6:
                    c0:b2:8e:77:1f:16:ec:28:69:7e:ea:fd:fe:74:7b:
                    f3:6d:98:ed:d6:38:7a:02:e7:3f:43:af:9e:36:b5:
                    76:13:f5:9d:5c:99:ef:36:55:11:aa:11:19:fe:4c:
                    43:7b:83:9e:53:b5:c4:cb:d8:66:87:d0:9c:07:12:
                    e4:e8:64:c6:a2:99:fd:d7:1d:01:30:71:cf:1f:8e:
                    5e:c4:5d:c3:f9:31:b4:80:c6:6f:26:87:e2:ba:0b:
                    96:17:ba:6c:7e:53:47:d5:9c:0c:bb:0b:f9:16:23:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:88:3B:56:D8:30:3D:6D:BC:A3:03:AA:22:7E:DA:67:95:9E:0A:9A
            X509v3 Authority Key Identifier:
                keyid:9D:50:EA:AE:17:31:D2:33:F7:44:35:70:9A:7B:1D:BA:B8:F8:61:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVDqrhcx0jP3RDVwmnsdurj4Yc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/sYg7VtgwPW28owOqIn7aZ5WeCpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/nVDqrhcx0jP3RDVwmnsdurj4Yc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:89:4f:dd:26:5a:1a:96:cb:a7:67:37:cf:95:f6:8f:9f:
         c5:b7:7a:18:3b:3c:ca:09:24:96:10:d8:b1:88:32:e6:68:85:
         f6:27:57:1b:69:de:2f:5f:60:7d:2b:9e:26:b7:9a:9d:12:9d:
         3c:bc:cf:b3:7e:ad:f9:da:40:f5:1a:9a:91:6a:0b:e2:81:70:
         20:3b:01:9a:32:4e:ea:79:9b:5b:d2:31:0d:f1:10:b8:29:e3:
         86:df:fa:7a:77:47:e9:88:c8:03:4b:ef:69:fb:c3:7d:e8:fb:
         7b:01:64:c1:99:bb:8f:10:10:aa:b4:df:15:36:b1:99:66:db:
         e0:6a:55:b2:59:97:95:bd:c3:f9:1a:ff:80:0e:da:7a:37:04:
         22:61:80:85:85:08:94:9e:bd:5e:e2:ff:41:65:87:d5:f9:a6:
         14:1a:21:29:61:42:15:09:2b:36:d8:9b:3f:6e:7e:3f:5d:f1:
         07:a1:8f:02:2f:48:a1:4d:4a:c2:cd:38:e4:37:47:50:1b:83:
         f2:32:22:69:8f:5f:e1:2a:c8:9c:ac:38:85:41:d1:f3:ff:1d:
         16:50:6b:75:dc:ae:04:8d:b6:61:19:17:71:de:55:6b:e8:fb:
         93:0c:c8:bf:69:22:cd:7c:18:48:15:62:6f:99:3a:21:b2:73:
         42:ac:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:22 2024 by rpki-client on console-fra.rpki-client.org