Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/x-kliemXvGkBoPELlrwO0lnaGV4.roa
File:                     x-kliemXvGkBoPELlrwO0lnaGV4.roa (raw, json)
Hash identifier:          mF1khZOeryluexH7loSnj6qDIDqyOKxMeOwomet63eE=
Subject key identifier:   C7:E9:25:89:E9:97:BC:69:01:A0:F1:0B:96:BC:0E:D2:59:DA:19:5E
Certificate issuer:       /CN=b14c73d37f47d87711b6c39c450d21356afc9a57
Certificate serial:       01851A75F15C2AC229CE5B041C3ADF94B746
Authority key identifier: B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/x-kliemXvGkBoPELlrwO0lnaGV4.roa
Signing time:             Fri 16 Dec 2022 10:23:35 +0000
ROA not before:           Fri 16 Dec 2022 10:23:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200924
IP address blocks:        185.6.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1a:75:f1:5c:2a:c2:29:ce:5b:04:1c:3a:df:94:b7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14c73d37f47d87711b6c39c450d21356afc9a57
        Validity
            Not Before: Dec 16 10:23:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7e92589e997bc6901a0f10b96bc0ed259da195e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:58:da:bd:47:66:e6:2a:e4:bd:85:cd:47:
                    22:a6:1a:37:cd:5a:2b:51:d3:aa:5d:c9:44:05:1b:
                    f9:10:30:5a:d4:17:78:25:dd:39:67:ba:f2:f8:a7:
                    d6:82:55:78:63:78:bf:cb:96:b2:af:c8:1f:cd:61:
                    78:61:3c:ea:3c:5e:5c:93:8f:f2:68:2d:68:38:d3:
                    68:a5:36:f3:04:36:9b:f5:fd:54:38:52:51:96:bd:
                    4d:00:ed:34:30:be:e6:54:f4:0f:7f:07:05:d7:33:
                    c4:59:99:9b:7d:8d:fe:2c:19:4d:45:d5:38:89:d2:
                    0e:8c:03:b9:7d:97:ce:d3:e0:c7:7c:03:1a:57:4e:
                    f9:80:4a:e7:d1:cd:61:41:08:1c:55:5d:4d:55:af:
                    dc:6c:41:c8:73:dc:36:9f:b9:2b:24:b1:5c:77:14:
                    3d:4a:a8:3b:f8:e4:24:ae:54:a4:0e:cf:c1:bc:09:
                    05:ba:ad:d1:7d:97:2a:1e:88:c6:66:e4:c8:c4:d2:
                    66:02:92:87:a5:40:7b:77:0d:05:8c:40:35:64:08:
                    93:f6:50:f8:c1:27:a0:65:d0:8a:b5:84:ce:2a:98:
                    da:12:3b:aa:bc:72:8e:51:23:8e:c0:15:96:f1:4e:
                    e2:f1:a7:91:1a:6a:98:42:b2:b7:d5:ce:8f:1c:56:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:25:89:E9:97:BC:69:01:A0:F1:0B:96:BC:0E:D2:59:DA:19:5E
            X509v3 Authority Key Identifier:
                keyid:B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/x-kliemXvGkBoPELlrwO0lnaGV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:f1:d2:cd:27:b3:2e:fd:3c:c3:1a:44:7d:92:3f:5f:56:
         6b:89:44:81:39:30:fc:8c:bd:22:c1:73:7b:cb:1e:97:95:3c:
         b5:63:da:16:31:12:29:93:20:d9:c6:d7:8a:87:85:25:60:25:
         a9:be:ba:a8:8c:ab:60:11:c4:d7:8b:02:15:19:97:d6:14:fc:
         29:91:1b:3d:cc:ac:ab:af:6c:fd:a1:3a:99:13:94:de:8f:19:
         c1:de:8a:e1:05:79:a2:33:6f:9c:6c:3b:41:51:c9:b2:71:e9:
         ce:24:60:da:f6:62:89:20:e9:f9:17:05:0b:c2:e3:51:83:0e:
         35:e1:87:d8:cb:48:80:82:5b:b8:7c:8b:9e:ed:0d:9d:b9:56:
         e0:29:d3:6f:3f:fa:bb:3a:60:86:12:bb:aa:08:14:fe:8a:b8:
         ff:ec:86:d5:bb:a2:58:ff:38:80:0d:ae:d6:cb:45:a3:37:94:
         40:01:f8:4b:7d:19:23:5f:2f:d1:8e:44:64:09:6f:81:60:c8:
         d1:37:18:34:e2:d2:2f:3a:9f:8d:b7:9a:57:4a:bd:ca:b9:cf:
         82:64:96:b7:be:49:3a:de:d8:ed:ed:e4:0b:47:45:7e:e1:04:
         e6:7c:4f:6a:bf:e9:f9:5d:77:79:4c:c8:a8:a1:9e:54:03:f7:
         29:5e:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:49 2024 by rpki-client on console-fra.rpki-client.org