Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/rMxbBoySY_rlasvwKSy-If80pmQ.roa
File:                     rMxbBoySY_rlasvwKSy-If80pmQ.roa (raw, json)
Hash identifier:          mkES/HiiVUzlk5uBT9vhmSwGpybgQy2zfID0TMli9lg=
Subject key identifier:   AC:CC:5B:06:8C:92:63:FA:E5:6A:CB:F0:29:2C:BE:21:FF:34:A6:64
Certificate issuer:       /CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
Certificate serial:       013716
Authority key identifier: 93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/rMxbBoySY_rlasvwKSy-If80pmQ.roa
Signing time:             Fri 07 Jan 2022 15:16:32 +0000
ROA not before:           Fri 07 Jan 2022 15:16:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210397
IP address blocks:        185.225.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79638 (0x13716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
        Validity
            Not Before: Jan  7 15:16:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=accc5b068c9263fae56acbf0292cbe21ff34a664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:d4:58:e3:b3:a5:ee:28:8f:f9:cb:bd:e8:
                    35:9f:9a:f9:83:4e:68:85:e0:5e:95:ed:ed:99:cf:
                    80:76:af:85:42:2d:c9:11:4a:6f:19:28:ca:ed:c7:
                    cf:aa:3b:8c:08:8b:9d:21:d5:24:cd:31:64:e1:2e:
                    24:67:58:31:4a:82:dc:da:f5:d8:e0:4a:92:43:58:
                    1e:34:ff:6c:c4:cf:de:55:5a:d0:02:ae:cc:ab:d9:
                    13:b8:38:ee:d2:80:5e:b9:c5:f8:16:ff:44:15:93:
                    d4:cb:ce:a3:b7:09:b7:e3:d6:ff:32:37:e1:00:e1:
                    fa:0e:2d:4c:16:86:d4:53:37:fa:6c:9a:67:e2:55:
                    b5:f9:6b:90:75:b3:d2:45:17:9e:02:cb:72:d6:a3:
                    07:06:06:91:44:af:7b:34:7a:60:a4:f9:16:ec:81:
                    3d:34:c1:6d:2a:ca:ba:c3:62:1a:0f:b0:3b:bb:79:
                    64:d7:42:9c:23:d0:54:31:8a:fd:f1:be:2e:af:85:
                    fe:91:94:90:85:27:d4:21:13:d6:2b:88:d1:98:89:
                    a8:7b:d0:7b:90:a9:98:af:91:ba:f4:2c:18:c2:a6:
                    d0:b3:87:ea:24:6c:34:48:00:0e:6f:8e:f6:09:20:
                    fb:7e:10:54:b2:7f:d4:77:40:a6:b9:35:9c:95:50:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:5B:06:8C:92:63:FA:E5:6A:CB:F0:29:2C:BE:21:FF:34:A6:64
            X509v3 Authority Key Identifier:
                keyid:93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/rMxbBoySY_rlasvwKSy-If80pmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:75:24:e8:35:04:e4:3c:dc:f9:48:ae:ba:29:3b:64:c6:
         26:4d:7e:61:cc:ee:80:ee:72:bc:6d:f2:d5:c8:38:55:e1:dc:
         79:24:01:b1:09:89:4b:bb:36:ce:1e:ac:6d:7b:05:31:98:59:
         5b:71:33:17:ab:e6:fb:fb:6a:da:ea:d7:01:a5:6b:5e:7a:8b:
         0f:d2:59:eb:31:8c:c9:7b:0b:05:6d:94:51:44:58:35:88:e2:
         ab:98:3c:03:34:da:b8:0e:35:32:20:16:2e:35:f5:e4:56:61:
         c7:aa:16:ed:a2:df:c4:60:d5:6d:a9:22:54:b5:81:e9:83:2d:
         6f:61:e6:64:39:96:3a:00:0f:97:bc:d2:c7:2a:ad:9d:c9:d4:
         9d:21:a2:d3:b3:4b:6d:96:36:f2:23:e1:fe:c1:6d:d9:ba:c0:
         72:8a:86:15:a4:83:36:3f:cf:56:93:76:b9:89:f7:ba:0e:fa:
         bc:27:44:86:af:39:78:72:73:e2:b4:fe:df:ea:a3:55:22:19:
         48:fa:2e:07:27:e8:f5:b7:f6:25:55:4a:91:fa:a3:5a:7a:d4:
         97:e5:9e:b8:21:7c:28:8c:d6:48:c2:10:92:3f:3d:b6:6b:7b:
         3c:7e:da:c2:3e:12:f1:dd:b4:e0:da:6e:93:c4:c5:27:85:90:
         1a:97:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:35 2024 by rpki-client on console-fra.rpki-client.org