Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa
File:                     fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa (raw, json)
Hash identifier:          zWgvClC8tpvL/R8i4pTe49kC8bXhhEA+XASyJf9qHm4=
Subject key identifier:   7C:36:C6:56:58:2D:B2:B0:AF:C1:80:A6:17:DB:51:CD:24:B5:3E:C2
Certificate issuer:       /CN=0d17fbb6604d94c2e99f46060ea7a7c0c7443451
Certificate serial:       0D0D78A4
Authority key identifier: 0D:17:FB:B6:60:4D:94:C2:E9:9F:46:06:0E:A7:A7:C0:C7:44:34:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRf7tmBNlMLpn0YGDqenwMdENFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa
Signing time:             Sat 01 Jan 2022 01:02:05 +0000
ROA not before:           Sat 01 Jan 2022 01:02:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211212
IP address blocks:        185.203.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218986660 (0xd0d78a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d17fbb6604d94c2e99f46060ea7a7c0c7443451
        Validity
            Not Before: Jan  1 01:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c36c656582db2b0afc180a617db51cd24b53ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:8a:86:65:c6:c8:d2:f7:30:30:f3:61:4e:
                    3c:c8:23:a7:f0:dd:38:57:d9:90:ef:5f:5b:77:29:
                    4c:4d:28:35:12:0e:5c:84:fd:61:0c:d4:d0:6f:52:
                    f3:c5:3e:de:c3:48:53:03:37:65:4a:73:7d:1e:b9:
                    5d:61:d7:fe:19:f7:e8:cb:42:e3:20:44:a4:87:68:
                    a5:a2:d0:a6:e4:36:0f:27:a0:0d:f2:30:fd:db:23:
                    b4:6a:e3:ed:93:28:66:e8:d2:04:c6:85:ca:50:2c:
                    b9:86:fc:61:e2:92:06:5d:e8:45:fa:16:9a:ae:22:
                    8d:a0:df:4d:8f:5a:5c:59:23:62:eb:f8:0a:77:52:
                    ef:fe:5c:e0:51:51:09:19:cf:a0:1c:08:1d:95:4d:
                    bf:d0:9d:5c:a3:19:f2:52:56:db:52:86:a2:c9:ed:
                    29:dc:3f:c5:34:62:25:04:59:50:7b:3d:b5:86:a1:
                    80:5f:7f:b5:4b:9a:7b:61:5d:9f:f4:e8:9b:95:d6:
                    14:be:60:9b:92:22:aa:5f:58:2a:37:e7:58:de:78:
                    cf:21:df:48:70:3f:f7:a2:52:ed:da:57:da:e5:8e:
                    c1:ab:58:b1:87:43:6f:4d:b6:d6:6a:b5:e2:1b:06:
                    1e:30:18:6e:e3:bd:d1:eb:e9:f7:26:b9:8e:06:c5:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:36:C6:56:58:2D:B2:B0:AF:C1:80:A6:17:DB:51:CD:24:B5:3E:C2
            X509v3 Authority Key Identifier:
                keyid:0D:17:FB:B6:60:4D:94:C2:E9:9F:46:06:0E:A7:A7:C0:C7:44:34:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRf7tmBNlMLpn0YGDqenwMdENFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/DRf7tmBNlMLpn0YGDqenwMdENFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:20:90:61:ff:7d:0b:f9:d7:ba:4e:54:f6:25:d5:ef:03:64:
         c6:67:1d:c9:f7:7e:f9:bc:9f:41:b3:93:f8:80:a8:c7:13:83:
         4e:77:86:d4:7a:59:1a:16:a0:e5:d3:fb:83:84:ae:ea:0b:71:
         6b:28:9a:88:02:6b:80:ee:55:7e:99:ca:1e:68:13:53:0a:47:
         ce:52:10:4b:7c:fe:6d:ae:86:ea:fa:77:ac:36:52:5a:07:c1:
         e6:48:15:b9:74:f8:07:f8:7d:ea:1d:ea:8a:2a:8b:81:7c:85:
         8c:05:2b:83:84:98:53:49:84:b0:e2:d8:83:8e:50:25:80:2d:
         60:a6:bb:f8:5c:69:d2:8f:dc:d6:bd:14:c6:b7:2a:f9:dd:36:
         cb:30:fe:c7:80:1f:df:61:ae:e8:a2:f4:c3:94:d8:1f:4e:f3:
         fd:0d:89:d5:57:d6:7c:a4:d6:17:89:f9:54:35:1e:7c:25:37:
         4c:90:b0:df:58:e5:a7:b1:f8:ed:1d:e2:9b:85:98:00:27:24:
         a0:58:59:c3:a8:24:04:0c:88:9b:95:1b:d2:4d:ee:c2:d4:4c:
         46:3e:e6:1b:fc:4e:79:3e:2f:d2:5c:13:1a:d0:88:0b:e2:f3:
         ee:25:74:b0:4f:2b:60:9d:36:7b:3c:fa:31:84:33:38:e5:e3:
         d7:8b:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:01 2024 by rpki-client on console-fra.rpki-client.org