Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/RRP6YwsswUnXJEKhJayyRja9Vqo.roa
File:                     RRP6YwsswUnXJEKhJayyRja9Vqo.roa (raw, json)
Hash identifier:          N4sxkNryQ6wd2DI2WszcSzqEi+2B4RgwW8X3uecxlHI=
Subject key identifier:   45:13:FA:63:0B:2C:C1:49:D7:24:42:A1:25:AC:B2:46:36:BD:56:AA
Certificate issuer:       /CN=6fa29a11bb6e671f0985581ec073db92fce6b6a2
Certificate serial:       010A8976
Authority key identifier: 6F:A2:9A:11:BB:6E:67:1F:09:85:58:1E:C0:73:DB:92:FC:E6:B6:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6KaEbtuZx8JhVgewHPbkvzmtqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/RRP6YwsswUnXJEKhJayyRja9Vqo.roa
Signing time:             Sat 01 Jan 2022 02:55:15 +0000
ROA not before:           Sat 01 Jan 2022 02:55:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.212.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17467766 (0x10a8976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa29a11bb6e671f0985581ec073db92fce6b6a2
        Validity
            Not Before: Jan  1 02:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4513fa630b2cc149d72442a125acb24636bd56aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:e6:41:78:86:24:33:ef:16:ee:25:a5:9c:
                    9d:70:09:d2:43:d1:d7:c4:b8:ec:12:85:5f:38:fb:
                    44:d2:45:56:43:f8:93:60:f3:88:c2:8b:d2:ba:eb:
                    42:5f:76:bf:48:96:a1:c5:68:76:8a:46:9a:55:b6:
                    38:21:d1:a7:e2:8f:d7:6a:58:5d:9c:f1:61:6d:9f:
                    b9:db:32:13:c1:d5:b1:45:eb:b8:d1:02:3b:42:9e:
                    5f:74:21:b2:17:64:ba:3e:07:79:5f:43:4c:07:41:
                    43:c2:b9:0d:79:20:65:4d:c7:44:44:40:b1:3d:c1:
                    8a:29:60:a5:f8:2c:87:51:ba:21:b0:ec:07:ee:20:
                    b4:e2:f0:05:87:4b:30:0f:f4:a7:25:47:e5:01:38:
                    eb:69:36:53:c9:4a:ab:17:b5:02:af:62:c2:7d:dd:
                    fa:f3:a2:68:7f:a4:b6:7c:22:dd:65:f6:68:d4:dd:
                    c8:00:c1:f1:fc:22:c0:4b:cf:a6:31:ac:4e:c4:6b:
                    ab:4a:f3:95:4c:3d:40:5f:fb:6b:2c:dd:a9:bb:5e:
                    58:92:aa:f9:d5:9b:db:59:c3:4e:e6:b5:93:33:1d:
                    3f:ab:3b:41:7d:a7:76:e7:c8:25:ed:58:63:69:ee:
                    f7:bd:3c:58:a9:b4:af:49:56:9f:5e:53:97:09:4f:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:13:FA:63:0B:2C:C1:49:D7:24:42:A1:25:AC:B2:46:36:BD:56:AA
            X509v3 Authority Key Identifier:
                keyid:6F:A2:9A:11:BB:6E:67:1F:09:85:58:1E:C0:73:DB:92:FC:E6:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6KaEbtuZx8JhVgewHPbkvzmtqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/RRP6YwsswUnXJEKhJayyRja9Vqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/b6KaEbtuZx8JhVgewHPbkvzmtqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:d9:e0:23:1e:7d:d8:27:7e:85:0e:82:bb:7a:f0:e7:b9:
         b7:9a:24:cb:86:5e:78:bb:ff:7d:3a:4f:1a:b2:d4:29:45:83:
         a8:00:77:bd:00:89:4c:28:42:b2:ad:50:fb:12:d9:a5:c7:55:
         03:55:b2:a8:b4:6a:34:85:f2:f8:0d:f8:99:f5:c0:4c:75:ca:
         e5:8c:3a:5f:61:2c:42:60:fd:6a:5c:14:36:98:dc:b9:b2:56:
         63:a9:ba:b5:71:f7:3f:cc:83:32:61:35:50:fc:19:43:ae:92:
         34:85:04:5d:04:a7:b6:21:1d:14:c8:47:f6:57:30:28:58:82:
         62:28:29:ed:54:1c:4d:05:9e:ff:89:82:13:f6:62:9d:09:ae:
         17:f3:2a:03:48:cd:ef:5f:1c:cc:65:33:da:ac:03:8a:c5:a6:
         4f:a9:1a:f1:94:13:e6:e4:9e:0c:d7:2c:ed:61:db:90:c3:c7:
         8b:c1:9e:b9:bc:d8:0e:dc:fb:e5:71:d7:3f:3f:f8:39:2c:84:
         bb:38:ab:a8:a1:bd:68:ff:42:e4:2b:48:d2:d6:dc:95:69:3b:
         25:fe:f9:0a:b7:92:ef:0c:07:d6:60:3b:40:86:fa:bc:8f:de:
         d4:be:96:34:bd:4c:d2:67:4d:f5:8b:a4:73:d5:71:e1:2a:41:
         41:70:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org