Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/sw1CzOfUSZKQGhhhBhO3jUSHmZc.roa
File:                     sw1CzOfUSZKQGhhhBhO3jUSHmZc.roa (raw, json)
Hash identifier:          Lhcy/+1dzNYmmcDiZwyivRKHNgwq/UOH+kvCxeOWYdw=
Subject key identifier:   B3:0D:42:CC:E7:D4:49:92:90:1A:18:61:06:13:B7:8D:44:87:99:97
Certificate issuer:       /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial:       0185362BFEA305DBC05C0DFCA349D539A7F2
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/sw1CzOfUSZKQGhhhBhO3jUSHmZc.roa
Signing time:             Wed 21 Dec 2022 19:32:10 +0000
ROA not before:           Wed 21 Dec 2022 19:32:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60064
IP address blocks:        185.102.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:36:2b:fe:a3:05:db:c0:5c:0d:fc:a3:49:d5:39:a7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
        Validity
            Not Before: Dec 21 19:32:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b30d42cce7d44992901a18610613b78d44879997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:c9:df:20:28:50:12:b3:fb:50:17:b2:00:
                    cd:dc:f0:86:02:81:04:3b:ce:04:70:80:6f:fd:0b:
                    84:19:4a:18:23:1c:c9:7b:c6:13:25:4c:5a:7e:25:
                    4b:5a:a0:61:b5:69:25:5c:0c:d4:bb:77:9c:3d:47:
                    06:91:07:e1:53:32:ae:78:04:29:19:31:52:a9:77:
                    9a:39:f3:0f:61:8a:6b:76:7d:64:1b:bd:74:b1:ef:
                    1e:6f:9a:ce:9c:e9:de:d9:2f:01:08:75:22:c4:91:
                    9d:ba:57:07:f7:da:33:75:4c:6a:b5:45:08:7c:18:
                    c7:cb:7c:fd:c2:19:1d:2a:4a:01:53:8d:da:6c:34:
                    1e:f8:83:e2:9d:b8:a6:04:b9:de:10:46:99:33:b3:
                    17:f6:50:bc:01:6b:5f:cf:2b:94:5b:ec:28:3e:f7:
                    74:4d:54:ec:b8:86:c2:38:80:53:70:23:9c:c0:f7:
                    80:70:64:cf:e4:5a:aa:90:2a:78:50:aa:86:73:20:
                    82:40:91:9b:cf:6d:da:12:59:f3:83:81:cd:62:eb:
                    ee:c0:37:45:cd:8c:98:eb:11:6b:51:2d:1e:5f:cb:
                    d2:b4:82:3d:0b:4a:f9:00:db:a8:5b:1a:e3:cb:45:
                    2c:c0:b4:a6:26:6f:3f:28:5b:39:5f:44:a9:45:2d:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:42:CC:E7:D4:49:92:90:1A:18:61:06:13:B7:8D:44:87:99:97
            X509v3 Authority Key Identifier:
                keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/sw1CzOfUSZKQGhhhBhO3jUSHmZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:01:23:46:00:9a:67:ee:47:3c:4f:4c:fa:b0:4c:dd:ae:00:
         66:49:04:40:2b:f8:5d:c4:54:74:73:2a:d5:6d:4b:66:bd:05:
         34:0c:ee:68:2b:dc:2b:bc:93:36:f7:48:61:ce:80:27:85:0b:
         73:e6:3c:89:e4:d5:a6:17:34:61:74:f2:9a:1b:56:62:38:ef:
         67:f0:88:8a:55:91:f3:3e:58:6c:24:82:e5:38:25:84:07:37:
         da:4e:03:24:d5:03:5c:a0:8b:80:03:b9:38:13:8d:22:fa:7f:
         16:04:d3:6f:3f:08:66:b4:14:f8:f9:41:c5:f8:b2:a2:14:e1:
         7f:c5:0e:6e:9f:2e:b6:a3:b3:61:7a:61:06:63:bb:09:39:a7:
         60:e2:c5:a1:ec:8b:78:8a:52:12:e0:2f:f8:6f:52:97:99:b2:
         f3:ea:4a:b5:f8:02:d9:da:84:c7:3e:70:26:15:96:76:9d:2e:
         07:4a:3f:a3:27:32:4e:33:70:0d:e8:07:4c:40:d5:47:37:51:
         95:e2:03:8b:5a:9a:62:ae:8c:9e:a4:01:b0:2a:29:b7:4d:81:
         46:bb:f2:67:05:41:46:58:ff:56:d3:94:c3:0c:bc:0c:44:9d:
         df:94:10:1d:71:34:f6:53:93:4c:5a:61:d2:e6:de:40:3f:48:
         60:a4:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org