Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/mgPKUdPJ6OoPvayH6eOsLG8IIrI.roa
File:                     mgPKUdPJ6OoPvayH6eOsLG8IIrI.roa (raw, json)
Hash identifier:          xYK0DXk93EWeIC+AE+yIxNaE63xPINJ/CYNJX/fDSgY=
Subject key identifier:   9A:03:CA:51:D3:C9:E8:EA:0F:BD:AC:87:E9:E3:AC:2C:6F:08:22:B2
Certificate issuer:       /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial:       DA6282
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/mgPKUdPJ6OoPvayH6eOsLG8IIrI.roa
Signing time:             Sat 01 Jan 2022 12:06:52 +0000
ROA not before:           Sat 01 Jan 2022 12:06:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        94.103.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14312066 (0xda6282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
        Validity
            Not Before: Jan  1 12:06:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a03ca51d3c9e8ea0fbdac87e9e3ac2c6f0822b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:50:9d:51:0b:8c:6f:4f:57:3b:9f:39:36:18:
                    11:07:19:7a:5f:73:16:a8:24:6f:69:07:25:85:56:
                    08:96:9a:db:b4:50:88:29:27:d0:51:b9:7c:4c:3d:
                    40:70:3e:1d:9a:6d:e7:d8:db:96:c2:74:ef:0e:41:
                    3c:a3:b7:5f:7f:62:b8:b7:a0:e9:21:6b:79:ca:9a:
                    4f:14:ca:12:91:5d:cf:a6:d0:f7:31:90:f5:6d:e3:
                    88:90:12:7c:3f:71:f3:76:22:e2:ab:e8:ce:a9:46:
                    55:3f:8d:8c:a6:88:fd:4b:6a:79:f3:97:7f:a7:16:
                    ba:36:e9:56:ac:53:37:04:da:97:97:79:fc:a6:95:
                    29:46:2f:15:78:c6:47:6d:48:1b:54:dd:10:73:26:
                    3c:92:e7:d6:1b:d1:94:fa:46:8f:bf:9f:be:33:52:
                    1b:c3:e1:27:d0:42:a5:3e:c9:0d:98:62:54:aa:25:
                    1b:3a:c2:01:ab:c9:2a:97:c9:28:d0:ec:ea:75:1c:
                    41:80:d0:34:e5:7a:56:c6:c1:76:10:b5:2d:a6:e3:
                    8f:1c:e7:69:bb:ea:03:5f:91:ce:9a:7d:7c:a8:c6:
                    45:0a:0c:3e:c2:1c:71:88:61:1b:44:15:28:90:b8:
                    2d:14:fd:c0:6c:05:0e:c9:cd:e5:31:62:3d:94:37:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:CA:51:D3:C9:E8:EA:0F:BD:AC:87:E9:E3:AC:2C:6F:08:22:B2
            X509v3 Authority Key Identifier:
                keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/mgPKUdPJ6OoPvayH6eOsLG8IIrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:ff:c7:a9:91:03:69:33:40:6e:df:68:eb:6a:4c:96:96:
         f8:71:9a:df:1c:29:76:9f:52:b1:d8:3a:6f:10:94:86:c0:aa:
         9d:2e:0f:3e:36:c8:fa:6f:77:d9:0b:b7:dd:bf:e7:4f:f0:1a:
         57:d8:15:4c:7f:4e:c1:08:9c:5e:8c:f3:0a:bb:60:75:02:cc:
         ad:16:ee:e6:8e:34:e1:c1:e1:1b:a6:c7:3c:40:82:04:c7:fd:
         d8:ea:a7:71:76:18:46:7b:25:1c:11:ed:ff:c6:2d:b8:05:90:
         8b:ad:5d:3b:e0:bb:f7:cd:ad:67:1b:03:69:20:cd:ed:4e:e0:
         68:64:65:91:c2:88:d7:6c:8f:b8:4c:7c:95:4e:37:46:ec:3a:
         bb:ee:23:1b:39:e6:05:91:f5:7a:46:9b:7a:db:d4:c0:a0:bf:
         1c:61:b5:a7:51:94:1e:4e:04:2e:09:a8:28:be:0b:4e:43:42:
         68:c1:4e:cd:53:67:db:fa:0c:04:ba:50:35:bb:b6:c7:32:9f:
         96:d0:bb:20:f8:dc:61:44:ec:b4:11:ad:f3:f4:48:a0:cc:92:
         bc:f9:be:b2:bf:32:6b:f2:18:da:7d:e5:4e:78:9c:57:31:72:
         b4:96:fb:3d:75:c1:e6:b7:02:48:31:89:a6:c0:cd:24:ee:ed:
         d8:bb:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:51 2024 by rpki-client on console-fra.rpki-client.org