Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/2I1lfE1WYydCEZHrktwGoWhhj3Y.roa
File:                     2I1lfE1WYydCEZHrktwGoWhhj3Y.roa (raw, json)
Hash identifier:          JxiMycTPOOHLkViqXSpBUPLYmzpnRhNNd7+lTjzw0SI=
Subject key identifier:   D8:8D:65:7C:4D:56:63:27:42:11:91:EB:92:DC:06:A1:68:61:8F:76
Certificate issuer:       /CN=bf7e3ac6d7288ed8946bca5389a5057919e971dc
Certificate serial:       0559289B
Authority key identifier: BF:7E:3A:C6:D7:28:8E:D8:94:6B:CA:53:89:A5:05:79:19:E9:71:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v346xtcojtiUa8pTiaUFeRnpcdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/2I1lfE1WYydCEZHrktwGoWhhj3Y.roa
Signing time:             Sat 01 Jan 2022 16:05:34 +0000
ROA not before:           Sat 01 Jan 2022 16:05:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206576
IP address blocks:        185.182.200.0/23 maxlen: 23
                          2a0a:f480::/48 maxlen: 48
                          2a0a:f480::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89729179 (0x559289b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7e3ac6d7288ed8946bca5389a5057919e971dc
        Validity
            Not Before: Jan  1 16:05:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d88d657c4d566327421191eb92dc06a168618f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:8b:d4:c6:2b:0c:f1:93:3d:b5:c4:7a:5b:
                    4d:86:9d:5c:0a:6d:87:a6:45:2b:66:06:bd:6b:20:
                    3f:ea:38:5f:9f:2a:69:67:8f:d6:61:02:43:eb:4f:
                    cb:52:65:e9:72:d7:66:46:02:2d:d6:10:46:92:6c:
                    7a:f9:fd:8f:4d:ce:cb:8e:26:1a:f2:65:d9:8e:30:
                    d6:d0:19:2a:3f:04:bb:b3:01:39:18:45:0a:48:57:
                    b9:6a:9b:46:cc:15:75:2f:bb:ed:a8:fe:e4:6b:72:
                    7a:d5:20:17:e8:a3:fb:2c:7f:85:42:4b:a2:e0:12:
                    f8:95:e8:b8:33:9d:16:aa:96:97:2b:b7:2b:b6:17:
                    1a:cc:29:66:68:8d:f4:35:b8:49:28:6e:bb:5c:5e:
                    35:31:99:8e:6b:bf:2d:fd:cc:65:f7:cb:98:c1:b5:
                    2c:00:89:51:22:32:3a:a3:9b:e8:ec:29:49:4e:58:
                    f0:4c:a4:62:cb:96:90:32:c8:31:e3:cc:05:7a:f6:
                    19:48:b2:13:5c:4b:e3:8c:36:7e:cf:dc:8f:e9:91:
                    19:a1:5f:8a:a4:79:e4:a3:52:3d:03:94:f5:5f:27:
                    dd:71:3f:08:a5:ed:93:2a:2a:58:a1:d8:6b:c3:3e:
                    44:55:06:7a:98:61:de:67:b4:17:4e:ea:e7:9a:c2:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8D:65:7C:4D:56:63:27:42:11:91:EB:92:DC:06:A1:68:61:8F:76
            X509v3 Authority Key Identifier:
                keyid:BF:7E:3A:C6:D7:28:8E:D8:94:6B:CA:53:89:A5:05:79:19:E9:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v346xtcojtiUa8pTiaUFeRnpcdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/2I1lfE1WYydCEZHrktwGoWhhj3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/v346xtcojtiUa8pTiaUFeRnpcdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.200.0/23
                IPv6:
                  2a0a:f480::/29

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:d1:01:e3:2e:b2:9b:93:43:96:2e:4d:25:3c:f1:95:12:
         40:73:9e:d9:6b:01:4a:18:65:2d:c8:72:10:00:96:e5:b9:39:
         e2:50:fa:72:db:36:d1:4e:64:73:d7:00:39:f4:79:ac:0f:90:
         4d:4c:02:4f:24:59:5d:97:d0:33:b6:c5:fc:a0:da:76:d9:76:
         df:99:c4:97:72:ad:01:8c:08:27:b2:e8:8c:76:c8:0b:53:2a:
         c6:83:3c:43:53:cc:40:fc:7b:c9:f2:51:da:99:32:81:ce:9e:
         89:f6:a0:ff:83:91:ac:86:f2:6c:0b:2c:64:05:e1:e2:32:3f:
         67:de:95:b1:70:5c:10:c5:70:2b:81:20:dc:e1:df:42:e3:49:
         38:00:2b:ce:89:91:8d:90:61:8f:ae:2d:ca:2b:98:41:0c:f0:
         93:5d:06:77:cb:59:54:ab:d1:fd:13:ca:82:e7:3b:29:60:2e:
         e6:85:e1:5c:7c:4b:b2:c9:d9:80:ff:fb:b4:68:d4:14:e9:51:
         2f:aa:8a:51:fc:0b:69:17:4f:ea:b9:5e:73:a4:44:a8:49:48:
         57:71:38:a0:a7:52:36:95:7b:89:87:4f:92:77:93:0e:8e:38:
         d3:6b:4e:16:d4:22:89:33:72:6f:1c:92:53:fe:8e:92:be:6c:
         8c:42:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:18 2024 by rpki-client on console-ams.rpki-client.org