Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/5Gb8wsTHjKjJ8WEm_jZ5mcAdHG0.roa
File:                     5Gb8wsTHjKjJ8WEm_jZ5mcAdHG0.roa (raw, json)
Hash identifier:          k6M+eaiGKJGvq9QTmE0s7vzpwjIe7SyLwZg5X5fPBS0=
Subject key identifier:   E4:66:FC:C2:C4:C7:8C:A8:C9:F1:61:26:FE:36:79:99:C0:1D:1C:6D
Certificate issuer:       /CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
Certificate serial:       01261709
Authority key identifier: 93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/5Gb8wsTHjKjJ8WEm_jZ5mcAdHG0.roa
Signing time:             Mon 16 May 2022 12:00:29 +0000
ROA not before:           Mon 16 May 2022 12:00:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209968
IP address blocks:        185.225.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19273481 (0x1261709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
        Validity
            Not Before: May 16 12:00:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e466fcc2c4c78ca8c9f16126fe367999c01d1c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:23:b2:60:e4:e1:c0:4d:8b:8e:78:27:95:
                    a1:96:08:31:8f:05:eb:f7:4d:87:7e:16:be:3f:d1:
                    be:3c:60:58:77:68:c9:b4:ad:52:ad:16:5b:63:ec:
                    96:32:5b:42:8c:d1:52:be:e3:1b:f1:5e:e8:d5:06:
                    7f:2e:5c:d5:5f:66:0b:9f:a3:fb:2d:8f:ca:f2:75:
                    76:61:d2:1e:dd:19:05:a3:43:bb:a0:d7:ff:91:93:
                    fd:69:97:47:b0:95:e4:d0:6d:1e:9e:ce:af:22:10:
                    ea:e3:24:75:de:b0:a0:07:63:33:13:e8:3a:31:be:
                    b0:77:f5:43:ce:1f:70:3e:20:58:47:09:b0:48:e1:
                    73:9a:82:b6:58:96:03:79:40:a3:2a:3e:5b:c3:34:
                    b9:1c:16:b1:60:65:91:e8:81:10:0f:c5:93:2c:24:
                    9c:12:6e:0e:74:5f:af:73:57:fe:bd:f3:7d:7c:c6:
                    e9:a9:5a:90:54:76:90:63:d1:37:b4:28:4d:b3:96:
                    dd:83:0d:c8:a3:d4:2e:f3:62:db:9b:90:f9:d1:43:
                    5a:cb:68:b4:3a:90:f9:fe:46:c7:24:93:56:f2:2a:
                    9d:27:e4:84:17:e4:3c:3f:2f:d9:39:54:c5:fe:a2:
                    72:25:48:87:63:b5:d5:56:85:42:54:28:40:2c:fb:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:FC:C2:C4:C7:8C:A8:C9:F1:61:26:FE:36:79:99:C0:1D:1C:6D
            X509v3 Authority Key Identifier:
                keyid:93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/5Gb8wsTHjKjJ8WEm_jZ5mcAdHG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:60:01:e9:e3:aa:98:14:03:3d:78:64:3f:6f:73:5c:8b:85:
         04:fc:9b:31:92:2e:40:4a:12:95:e9:d1:4c:7b:57:9c:cf:dc:
         49:78:e8:fb:7e:9d:8e:a5:66:cd:b0:46:b4:73:e1:1d:a8:eb:
         b5:69:4b:0c:c9:89:a5:c1:f2:96:7b:9e:6f:fb:98:12:a0:8b:
         80:47:d4:49:d0:20:8d:bc:93:99:77:f3:4e:6b:af:0a:83:8b:
         46:13:a7:c0:10:cd:84:72:9c:63:49:26:62:90:01:a7:23:fc:
         41:83:bb:ac:26:f4:ce:f8:40:06:19:66:25:b5:19:3b:3c:44:
         d4:2d:91:f4:10:97:c9:48:9d:84:f7:16:8c:97:2c:02:38:3b:
         51:cf:a9:c7:7e:4a:b7:b9:6d:97:7e:32:4d:34:20:5b:55:ba:
         aa:32:16:36:c8:f7:df:b3:08:fa:a3:5e:4d:d6:0a:b4:51:80:
         5d:81:0f:10:17:7e:12:4b:f8:c7:17:22:e0:98:3e:20:67:7b:
         0e:ca:42:e3:21:f3:67:59:34:67:55:77:b5:44:13:9e:5e:3d:
         0c:c0:d8:d5:56:12:96:46:c7:2f:43:1e:63:8c:6d:b7:72:6a:
         c2:7b:42:06:8a:b3:53:cd:54:34:72:d6:36:d1:31:42:2a:ed:
         be:94:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:03 2024 by rpki-client on console-ams.rpki-client.org