Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/cTdBZB2TrDW01JQUe7tVO-k8Aj8.roa
File:                     cTdBZB2TrDW01JQUe7tVO-k8Aj8.roa (raw, json)
Hash identifier:          GQQNguDB4ga0CWmotZ99YBk/ptXDpGBJKVtlpA8Is9k=
Subject key identifier:   71:37:41:64:1D:93:AC:35:B4:D4:94:14:7B:BB:55:3B:E9:3C:02:3F
Certificate issuer:       /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial:       01856FC268E5ABA6E68EC1A08BE5E40BB877
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/cTdBZB2TrDW01JQUe7tVO-k8Aj8.roa
Signing time:             Sun 01 Jan 2023 23:54:49 +0000
ROA not before:           Sun 01 Jan 2023 23:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42487
IP address blocks:        185.55.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:68:e5:ab:a6:e6:8e:c1:a0:8b:e5:e4:0b:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
        Validity
            Not Before: Jan  1 23:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=713741641d93ac35b4d494147bbb553be93c023f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:45:71:65:91:c0:9a:77:8d:15:46:df:b6:
                    58:6e:d4:20:df:b7:88:bd:0c:71:33:2c:45:0d:d1:
                    ab:9d:e1:c4:cf:2e:50:8f:2d:13:96:e4:21:7a:a2:
                    ac:45:de:e1:b9:3c:83:68:76:84:95:b3:5a:bd:d2:
                    11:fb:c3:de:72:f1:b9:d8:38:db:17:f1:36:ca:2c:
                    a0:ea:cb:46:d0:25:13:ad:10:8e:82:cd:6d:ac:d1:
                    1d:cf:d8:ab:39:60:a2:6d:ce:29:43:62:ed:c7:5d:
                    08:e4:4d:e5:cf:f8:03:ae:ff:93:64:c3:16:59:7e:
                    1d:9b:92:16:75:9a:a0:96:a6:cf:73:f3:3c:45:9e:
                    61:f3:12:84:5f:5b:4f:3f:60:1d:ad:76:24:54:53:
                    c6:93:7c:6e:cd:b9:1a:9d:b0:60:db:aa:35:89:69:
                    c1:f8:54:3f:b4:fb:78:40:fa:e2:a9:30:99:55:fd:
                    33:8d:6c:80:1a:a8:fe:8d:8d:c3:e8:44:33:16:d2:
                    57:43:ce:d1:da:bc:ca:f2:00:6f:d2:04:a4:7b:a3:
                    e3:50:32:fa:87:c9:57:cb:5c:66:0d:5e:4a:4d:76:
                    f1:99:9c:4d:52:89:60:32:68:5d:16:eb:e5:76:18:
                    d7:15:a3:3d:2d:bf:01:e5:af:b1:4c:c6:c2:f4:32:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:37:41:64:1D:93:AC:35:B4:D4:94:14:7B:BB:55:3B:E9:3C:02:3F
            X509v3 Authority Key Identifier:
                keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/cTdBZB2TrDW01JQUe7tVO-k8Aj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:10:92:94:cb:5f:6f:ff:5e:a9:8b:25:e5:b9:b5:97:c7:
         77:5c:d9:e4:6c:4a:af:26:4b:4c:fd:7d:fa:0a:a6:44:d3:a5:
         e7:11:01:42:32:e4:67:a3:f4:07:5c:7d:26:77:54:bf:6d:89:
         b7:76:b7:d5:18:02:91:34:56:86:24:ea:54:d1:0e:3c:c1:13:
         a7:23:29:50:86:35:ac:da:8f:2b:8d:df:2a:60:32:7e:9b:68:
         58:0c:67:b3:90:d0:5e:53:f3:54:4b:89:d2:1f:1b:76:90:a4:
         13:15:5c:63:c0:ba:1b:38:71:e0:7f:cc:27:27:b4:05:9e:fb:
         a0:b9:e2:c8:b8:87:65:29:1d:90:10:fa:71:7e:dd:83:d0:dd:
         b4:0c:d1:fe:80:5f:97:7f:7a:46:46:9d:bf:97:2b:9b:8a:f5:
         1d:b2:16:90:3d:62:18:59:68:fe:ed:2a:26:10:10:6e:e7:d8:
         fa:d1:91:a4:3a:c9:ce:78:39:a8:a5:96:f1:83:33:2e:92:c4:
         a5:ff:3a:ba:d0:ef:7e:46:db:6d:b6:80:b9:bb:ff:4c:e4:f5:
         63:05:bb:ed:7a:ec:8b:55:38:2b:27:b4:0f:c1:a5:9b:66:d5:
         e4:97:1f:90:36:5a:72:5c:04:8b:13:7b:a3:fd:ae:c6:41:bf:
         1c:6a:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:14 2024 by rpki-client on console-ams.rpki-client.org