Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/tDhv_yjAr4p3-ad9z-EvRBPvGJU.roa
File:                     tDhv_yjAr4p3-ad9z-EvRBPvGJU.roa (raw, json)
Hash identifier:          p1cdVr0ViFTc5i8vt2qV94DTvYcJgWzrEq6M2+HmYTk=
Subject key identifier:   B4:38:6F:FF:28:C0:AF:8A:77:F9:A7:7D:CF:E1:2F:44:13:EF:18:95
Certificate issuer:       /CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Certificate serial:       018A0F4B8FEDEEDFE991336559CB34EC2A83
Authority key identifier: 4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/tDhv_yjAr4p3-ad9z-EvRBPvGJU.roa
Signing time:             Sat 19 Aug 2023 19:35:24 +0000
ROA not before:           Sat 19 Aug 2023 19:35:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209097
IP address blocks:        185.115.204.0/24 maxlen: 24
                          2a12:f284::/32 maxlen: 32
                          2a12:f282::/32 maxlen: 32
                          2a12:f286::/31 maxlen: 31
                          2a12:f285::/32 maxlen: 32
                          2a12:f283::/32 maxlen: 32
                          2a12:f281::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:0f:4b:8f:ed:ee:df:e9:91:33:65:59:cb:34:ec:2a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
        Validity
            Not Before: Aug 19 19:35:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b4386fff28c0af8a77f9a77dcfe12f4413ef1895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:76:6b:7c:3d:c9:81:80:c5:5a:ae:61:73:
                    a4:c1:e6:dc:37:38:36:0c:87:5e:16:78:3a:fc:fd:
                    30:38:2c:8c:7a:db:b4:4b:ec:cf:f3:01:24:c2:ca:
                    5c:9b:4d:26:db:19:20:2d:bf:d5:3b:78:bf:97:66:
                    04:cf:b7:bd:70:66:48:2c:a7:5f:dd:19:d5:d0:4a:
                    be:77:cd:83:a5:12:c1:b8:3a:03:82:7c:2d:5a:0f:
                    7e:90:f8:3e:eb:48:8a:c5:25:91:99:1c:54:6b:6e:
                    f6:6c:2f:36:9f:b5:2d:a0:84:ec:4e:14:1e:8f:7e:
                    85:4f:c2:18:c7:ba:9c:f1:6c:a2:12:6a:f3:ee:a4:
                    53:cc:3b:d4:b9:78:aa:3f:bc:8b:4a:e2:86:d0:55:
                    cc:d3:55:82:29:63:d2:0d:25:b0:44:d6:18:25:8b:
                    5f:4b:16:d0:60:50:ce:ef:43:61:ff:63:57:44:11:
                    61:ad:15:ec:3a:2a:a7:26:65:4c:69:a3:a5:5a:46:
                    fa:d6:9b:69:de:48:12:6d:dc:4a:99:b6:b1:e0:9e:
                    54:50:00:d5:5b:6d:6b:53:50:8b:84:29:dc:41:1c:
                    cd:8f:51:83:ce:1c:c1:d6:fd:f2:c4:01:bd:a3:d4:
                    53:e2:cc:6b:c5:e1:b1:fb:25:3f:f3:ec:5f:f0:97:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:6F:FF:28:C0:AF:8A:77:F9:A7:7D:CF:E1:2F:44:13:EF:18:95
            X509v3 Authority Key Identifier:
                keyid:4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/tDhv_yjAr4p3-ad9z-EvRBPvGJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/TA2tG_GCFaL6gIaRp7xfnnAvmeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.204.0/24
                IPv6:
                  2a12:f281::-2a12:f287:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:f3:c3:1a:d9:3f:65:70:2d:cb:44:d0:60:bc:17:7a:fd:
         1a:cb:e4:ae:67:46:f3:97:8f:4f:ce:ad:2d:27:d9:f4:51:6f:
         7b:0b:51:76:f5:31:d0:84:be:39:fc:8c:44:ed:ca:e8:25:49:
         73:9b:15:ca:b1:28:7b:c4:91:3f:91:ab:2e:80:1a:54:10:a9:
         f4:e3:3a:69:33:b1:5f:48:e1:13:81:9f:b5:55:62:ba:62:77:
         1b:18:d0:c8:1c:f8:4e:eb:69:e3:98:c3:af:1f:60:82:05:6c:
         09:4c:16:3a:20:74:2d:ea:00:e9:a7:95:34:fd:31:a5:d9:22:
         78:d4:3d:f5:8c:cb:af:df:b5:35:13:81:49:31:54:6e:33:d3:
         15:51:f6:a3:23:ae:1a:9b:f1:0d:64:61:f8:c5:2e:e1:d4:32:
         49:de:fa:94:49:a1:bc:e1:e8:7c:f3:ea:e6:f1:87:fc:57:73:
         7b:3c:09:79:d1:f3:71:c2:1c:19:c5:61:aa:fd:cf:9e:96:8d:
         3f:df:35:cc:4b:14:96:8e:04:93:80:11:dd:d6:80:49:e8:72:
         95:b2:9b:80:01:a7:3c:17:f7:01:5e:72:b7:26:c7:81:c4:0a:
         1f:7f:e7:18:97:89:2b:77:15:f8:6f:63:e8:2c:49:14:28:ad:
         a2:4f:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org