Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/YaCtBaxeG6E6SW3lykbUS3VQJvA.roa
File:                     YaCtBaxeG6E6SW3lykbUS3VQJvA.roa (raw, json)
Hash identifier:          pOWg0Pxonf4XPiRFTv2TG+21i4KdlTAvGAOl3LyPeVM=
Subject key identifier:   61:A0:AD:05:AC:5E:1B:A1:3A:49:6D:E5:CA:46:D4:4B:75:50:26:F0
Certificate issuer:       /CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Certificate serial:       018331F95FE9571CD2CA1963FD08EA1A75D3
Authority key identifier: 25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/YaCtBaxeG6E6SW3lykbUS3VQJvA.roa
Signing time:             Mon 12 Sep 2022 13:52:50 +0000
ROA not before:           Mon 12 Sep 2022 13:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207990
IP address blocks:        185.5.145.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:31:f9:5f:e9:57:1c:d2:ca:19:63:fd:08:ea:1a:75:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
        Validity
            Not Before: Sep 12 13:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61a0ad05ac5e1ba13a496de5ca46d44b755026f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:99:f0:4a:2b:32:77:6e:bb:51:ed:82:27:
                    e0:56:1d:52:23:46:88:e4:5c:b0:41:ee:3e:65:56:
                    a3:f8:e4:9c:74:77:48:1b:a6:10:7a:d9:c4:1e:ee:
                    ff:7c:0b:59:e0:e5:8b:49:59:ba:4d:05:7e:7b:17:
                    bc:87:64:45:94:5b:e1:2e:58:cd:ea:0f:18:67:71:
                    26:21:63:9e:bc:cc:2b:7c:9e:a1:f0:d9:e1:d7:67:
                    9e:fa:a1:c9:3b:1e:2e:67:da:49:1e:0b:b6:d2:6c:
                    38:ca:08:a0:5c:5e:91:74:62:b0:4e:ab:24:7d:47:
                    26:f7:6c:8c:af:d3:35:6d:7f:e4:2a:e2:a2:ab:b2:
                    19:8d:96:c4:c1:9f:c7:3d:03:bc:35:5f:fa:7e:be:
                    f2:19:69:fd:97:ce:48:59:88:cb:08:e7:e2:d0:5f:
                    2a:9d:c0:c4:e4:08:5b:13:8f:25:86:df:20:cc:07:
                    e8:66:cc:81:28:6b:72:a6:25:b0:fc:56:6f:97:8c:
                    90:c0:77:9f:5e:bc:fd:ee:2a:32:72:3e:22:74:bd:
                    0d:d5:d9:a9:9e:db:ef:e7:51:4d:9c:19:7a:9b:37:
                    28:6f:4a:87:e5:36:22:95:7b:bd:04:01:5d:67:5a:
                    be:10:72:43:02:93:41:17:1f:87:74:14:3b:30:03:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:AD:05:AC:5E:1B:A1:3A:49:6D:E5:CA:46:D4:4B:75:50:26:F0
            X509v3 Authority Key Identifier:
                keyid:25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/YaCtBaxeG6E6SW3lykbUS3VQJvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:5d:1d:f5:09:8d:89:95:32:92:19:00:34:0c:bf:9c:dd:
         b7:62:7b:43:01:82:9c:d1:cc:e1:6a:ed:b8:f2:bb:89:5e:20:
         27:9d:8b:8c:46:88:95:0a:40:05:7e:34:97:da:27:ae:01:b9:
         4c:d6:17:6f:44:30:40:a9:39:72:e4:78:24:00:80:92:1e:62:
         08:4b:c6:1f:b1:a4:80:5e:80:68:fd:6f:7e:35:48:0b:3d:82:
         5f:31:5d:ef:f0:69:59:32:0c:da:7d:9c:46:a1:b1:8d:29:63:
         08:8f:94:95:db:c6:d1:83:ad:57:64:3a:66:26:c4:5d:02:9b:
         60:c9:e8:b1:6e:d6:77:2c:e3:c8:5a:bc:8e:37:a8:bb:2b:78:
         3d:cd:1b:c0:f3:bc:14:72:0d:af:59:96:f5:94:58:61:d6:1f:
         c0:40:e1:2b:06:47:54:84:db:5a:79:ef:1e:2d:11:89:9c:06:
         5a:03:1c:45:55:76:3d:6c:5f:ce:cc:b9:23:91:fc:3a:f1:3e:
         a7:7a:73:eb:44:23:ae:e9:e5:01:71:79:e2:4f:bd:8e:37:09:
         25:0f:73:42:4a:b7:f8:6c:5d:e3:59:11:4c:75:53:33:cc:84:
         20:a5:89:59:2b:fe:77:cc:75:29:2a:94:5b:42:9f:c3:83:b2:
         fe:5a:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org