Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/yabqcS7Ek7nBlKOMv0yjAi2JTXU.roa
File:                     yabqcS7Ek7nBlKOMv0yjAi2JTXU.roa (raw, json)
Hash identifier:          vRJJqOqNJW7KN7ralhceyPYZbNVWH4m9/QzMe3ZmMy8=
Subject key identifier:   C9:A6:EA:71:2E:C4:93:B9:C1:94:A3:8C:BF:4C:A3:02:2D:89:4D:75
Certificate issuer:       /CN=469ff2033362b8bd4a4c1d1084657e90a2501a13
Certificate serial:       086704E7
Authority key identifier: 46:9F:F2:03:33:62:B8:BD:4A:4C:1D:10:84:65:7E:90:A2:50:1A:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rp_yAzNiuL1KTB0QhGV-kKJQGhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/yabqcS7Ek7nBlKOMv0yjAi2JTXU.roa
Signing time:             Sat 01 Jan 2022 07:56:44 +0000
ROA not before:           Sat 01 Jan 2022 07:56:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18254
IP address blocks:        185.243.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140969191 (0x86704e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469ff2033362b8bd4a4c1d1084657e90a2501a13
        Validity
            Not Before: Jan  1 07:56:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9a6ea712ec493b9c194a38cbf4ca3022d894d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:cd:55:98:70:fe:75:18:6a:1e:fe:77:33:
                    02:6d:2a:34:bd:6a:b5:29:7a:8c:f1:2a:15:6d:49:
                    f1:96:73:2e:3a:45:47:f9:7c:29:44:f2:cc:10:1a:
                    3c:eb:a5:4a:f4:c8:3c:0e:4a:01:11:49:5f:a9:d5:
                    fd:a3:54:6b:bd:5f:6e:91:0a:ce:29:f8:82:15:df:
                    5a:c8:0a:61:b9:66:ea:80:79:17:6c:ca:b9:23:8c:
                    90:f9:1b:27:70:92:07:0a:7b:4e:78:8f:ac:dd:52:
                    51:7a:15:c1:0d:8d:7a:5b:a6:89:6d:38:5e:08:e3:
                    2f:ee:fb:fe:18:93:75:3a:b2:8e:51:3e:27:96:80:
                    0f:ed:31:db:77:50:2c:56:1a:51:fc:cb:f9:63:71:
                    53:89:f3:a0:21:f1:f0:9f:80:ae:1e:25:03:d7:6f:
                    53:79:ba:ca:20:36:af:f1:15:35:50:60:f4:2e:90:
                    02:23:b4:80:04:ee:4c:fd:4f:ad:10:cf:37:94:0c:
                    37:c0:85:54:05:ab:e2:7c:24:79:18:9a:f0:92:d8:
                    32:46:5b:95:4c:6e:5b:8f:9b:9a:d5:61:28:5e:9e:
                    a8:76:1e:fa:6e:44:18:c2:76:0a:2f:b0:0f:17:bc:
                    a4:ed:ed:62:40:45:c6:ed:4e:31:e2:bb:d5:16:db:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:EA:71:2E:C4:93:B9:C1:94:A3:8C:BF:4C:A3:02:2D:89:4D:75
            X509v3 Authority Key Identifier:
                keyid:46:9F:F2:03:33:62:B8:BD:4A:4C:1D:10:84:65:7E:90:A2:50:1A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rp_yAzNiuL1KTB0QhGV-kKJQGhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/yabqcS7Ek7nBlKOMv0yjAi2JTXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/Rp_yAzNiuL1KTB0QhGV-kKJQGhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:e0:bd:39:29:f0:67:53:2d:69:cd:77:c0:d2:48:94:7b:
         db:97:34:96:7d:9c:19:94:ee:2d:f1:e0:65:64:2b:16:65:4d:
         30:cc:65:cb:52:66:e5:e2:aa:1a:5e:49:0d:ac:f0:30:3e:df:
         07:68:61:8a:38:9f:67:c9:24:70:02:7e:fb:01:4c:17:e4:8c:
         7b:8a:fa:e5:15:a8:9e:f0:1e:18:d6:96:3c:71:6a:bd:76:c8:
         48:a8:43:a5:43:f1:a6:1d:c6:2f:86:3c:c6:fe:8a:88:5b:25:
         34:48:36:ee:8c:06:b2:79:f8:31:d5:ba:bb:a6:cb:7c:2c:e9:
         c9:2e:15:ab:3d:16:52:f3:d9:37:2d:d1:31:ab:ba:6b:27:3c:
         e7:6f:ef:aa:90:07:ce:31:7b:05:51:a5:f0:94:29:7b:fb:96:
         60:c8:fe:d8:e5:82:5f:b8:a1:e5:93:2c:7e:5e:41:12:43:86:
         ea:9d:aa:08:35:a7:e4:2a:27:2a:ba:ee:0f:71:1f:0a:26:05:
         d3:e7:bd:a6:13:d3:7f:b4:06:0a:c4:51:83:d6:a8:93:23:88:
         30:5e:a1:f4:6c:09:4f:48:5d:05:a0:89:cb:61:98:a5:31:74:
         a5:53:e5:10:d0:c3:94:ca:94:4c:39:ce:26:23:15:78:07:88:
         ba:82:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:40 2024 by rpki-client on console-ams.rpki-client.org