Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/mCgN11UCbtwvADBtQiVJRCsVGjs.roa
File:                     mCgN11UCbtwvADBtQiVJRCsVGjs.roa (raw, json)
Hash identifier:          OoMZng2huq+WSnaZVtsiFHutqhsqnCAJHv60SxWgZ7M=
Subject key identifier:   98:28:0D:D7:55:02:6E:DC:2F:00:30:6D:42:25:49:44:2B:15:1A:3B
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       03EA90D1
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/mCgN11UCbtwvADBtQiVJRCsVGjs.roa
Signing time:             Sat 01 Jan 2022 02:54:31 +0000
ROA not before:           Sat 01 Jan 2022 02:54:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136038
IP address blocks:        185.202.103.0/24 maxlen: 24
                          185.202.100.0/24 maxlen: 24
                          185.202.102.0/24 maxlen: 24
                          185.202.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65704145 (0x3ea90d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Jan  1 02:54:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98280dd755026edc2f00306d422549442b151a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:2a:54:fc:b6:29:d3:4e:a9:ca:e9:0f:90:
                    3b:8a:ae:3a:58:d0:45:f7:70:20:4f:70:12:84:d3:
                    14:de:c9:7d:7d:53:4f:b8:74:24:89:2c:6b:24:29:
                    3a:d3:e0:dc:91:38:a8:f5:61:84:a2:88:34:40:ac:
                    d3:3d:c0:da:65:6d:99:a4:f3:7f:ed:39:2d:8f:01:
                    f6:d7:12:6d:e4:5c:f6:0e:ac:f6:0b:b6:b0:05:f0:
                    d8:3f:b4:27:1f:63:d9:5c:ed:60:02:25:7d:4e:0b:
                    95:0a:8b:44:c0:ab:65:63:2e:3f:a8:fb:a0:67:e1:
                    31:01:36:e9:f2:35:a9:fd:f7:fe:dc:8a:51:ed:0e:
                    0a:29:1f:63:36:6e:75:4e:f2:90:c6:4c:34:65:15:
                    f5:bf:e2:fb:6a:35:f6:2b:d6:27:80:aa:d9:d4:37:
                    8a:8b:73:3d:c8:df:04:12:50:25:fc:9f:9e:4a:a3:
                    06:5d:66:3c:62:e4:ed:55:64:c6:96:15:2e:88:24:
                    27:19:5b:55:d3:f2:e1:82:ea:8e:4e:29:a1:c5:a0:
                    37:25:6e:19:35:aa:2b:44:4a:81:88:47:50:2a:07:
                    bb:b3:46:cd:47:19:fe:15:5f:58:49:01:7a:64:7f:
                    b3:68:03:a7:b7:1f:ff:df:5b:18:52:5f:67:2c:16:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:0D:D7:55:02:6E:DC:2F:00:30:6D:42:25:49:44:2B:15:1A:3B
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/mCgN11UCbtwvADBtQiVJRCsVGjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:06:22:74:2d:3d:8b:0a:f4:34:9a:5c:ed:8d:16:e0:2b:b6:
         d7:fc:e4:86:7f:7c:fd:0b:de:b5:e0:3d:5f:7e:7f:e0:de:f9:
         97:70:ba:50:9f:9a:c6:f9:4d:af:7f:75:ae:60:67:fe:dc:d6:
         21:7a:46:04:8c:ff:73:03:e3:97:ea:6e:ae:bf:9c:b4:25:d9:
         49:14:5f:75:66:74:d4:95:2e:58:72:49:81:40:3d:38:bd:69:
         a9:d8:86:db:cb:bd:d3:65:2c:e8:c7:b5:cd:f4:98:5b:fd:82:
         b3:b9:e0:2d:7a:64:26:08:c0:b2:c6:4c:0a:74:86:ec:0a:dd:
         39:45:3a:b2:08:d6:8b:38:06:ba:c4:f3:f9:b3:b4:a9:1d:32:
         98:e5:84:b7:07:a1:87:81:35:87:09:77:e8:64:6e:a0:e9:2b:
         59:30:86:64:d2:a6:49:6c:75:0f:c4:2e:10:6d:1b:39:be:24:
         a4:db:aa:55:c4:bb:5a:95:c7:dc:93:5b:58:01:a1:70:c8:51:
         5c:20:fe:45:af:e9:10:e6:fa:db:98:40:cc:6b:6d:77:46:9d:
         df:94:37:ee:24:35:87:ba:44:54:ee:61:b9:ee:b2:ff:e2:58:
         41:b5:c4:55:cf:e1:a4:be:d4:55:55:61:09:40:f1:b3:24:d4:
         15:9a:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org