Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/6EJvkPC7nXQ2mat09hOsU7na9lk.roa
File:                     6EJvkPC7nXQ2mat09hOsU7na9lk.roa (raw, json)
Hash identifier:          mMW+Cp8pEOk+FZ5ifY9ZBU8Kl+EZWXmCI1ypp4bKImA=
Subject key identifier:   E8:42:6F:90:F0:BB:9D:74:36:99:AB:74:F6:13:AC:53:B9:DA:F6:59
Certificate issuer:       /CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Certificate serial:       1863ABBE
Authority key identifier: 18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/6EJvkPC7nXQ2mat09hOsU7na9lk.roa
Signing time:             Sat 01 Jan 2022 14:54:52 +0000
ROA not before:           Sat 01 Jan 2022 14:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60620
IP address blocks:        185.14.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409185214 (0x1863abbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f2f0de77f27a9d98b844550431b6880cd7368c
        Validity
            Not Before: Jan  1 14:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8426f90f0bb9d743699ab74f613ac53b9daf659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:fb:65:ec:aa:26:45:24:c2:da:78:9f:f3:
                    f9:c2:a0:93:24:7f:e7:52:56:c8:1a:dd:85:a5:38:
                    d5:e1:58:23:e5:7f:42:c6:c7:ee:1c:19:14:24:3d:
                    3d:ee:63:71:28:6f:a2:40:bb:08:6e:7f:96:2e:ca:
                    40:ca:2c:23:4b:f6:28:35:37:b2:e2:0d:71:59:41:
                    5d:27:68:73:8c:33:bc:15:bb:ea:56:83:a2:f8:50:
                    9e:80:7f:fc:7b:77:72:66:b9:00:1c:04:a4:dd:0d:
                    db:b2:0f:58:50:bb:c9:5d:a3:3d:c1:a7:9c:d5:cd:
                    d0:8d:71:74:41:28:1f:73:41:88:12:50:38:d3:20:
                    31:9b:17:e2:c4:42:30:d0:d1:8c:8b:20:20:51:a5:
                    65:8e:68:cb:c4:03:f6:99:4c:08:0b:89:3d:27:7d:
                    cc:75:7c:54:8f:2e:37:65:6d:a2:73:75:77:db:39:
                    24:ab:e4:a2:de:14:67:50:31:65:d3:5a:61:f1:c6:
                    28:aa:bb:f8:61:81:77:21:2a:ec:c1:0f:06:1b:39:
                    29:7c:11:2d:d6:4e:99:e4:28:63:0f:2f:bc:8b:d8:
                    8a:2d:b8:75:ca:68:38:4e:63:7d:8f:b2:6f:9b:fe:
                    79:32:c8:77:84:05:8e:4c:3b:73:ea:07:56:29:a0:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:6F:90:F0:BB:9D:74:36:99:AB:74:F6:13:AC:53:B9:DA:F6:59
            X509v3 Authority Key Identifier:
                keyid:18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/6EJvkPC7nXQ2mat09hOsU7na9lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/GPLw3nfyep2YuERVBDG2iAzXNow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.14.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:59:51:d3:9b:55:97:35:75:74:93:40:f6:35:97:81:bb:
         fe:a0:19:3d:94:4c:7e:fc:5e:f2:dd:63:2b:6b:49:66:9a:eb:
         71:53:7d:a5:0f:62:6d:10:d4:c6:1c:d1:df:1a:6b:88:00:51:
         9f:c0:4c:11:cc:83:4e:f7:15:1a:02:dd:1f:56:74:bd:45:bd:
         8e:ef:da:ac:f8:fd:cb:2f:bd:e6:2a:0b:de:42:bf:64:33:d4:
         02:d6:b1:b3:1d:27:a3:e5:dd:e4:f6:4b:a2:0e:a2:11:4f:9a:
         20:90:46:a1:5d:25:74:ed:44:a4:51:fe:21:5b:72:bf:1c:eb:
         0b:c4:70:ec:df:49:26:fa:72:ea:23:26:54:c9:03:d4:76:12:
         ef:ae:fc:79:5a:2a:44:71:ea:1c:ce:28:30:c3:e9:e1:c3:32:
         11:9c:25:97:e6:3e:24:6b:b0:c5:b8:1d:ac:5d:14:d0:da:9b:
         e0:2f:0c:2b:ab:e7:a4:13:4c:24:6a:15:48:50:60:b0:d5:eb:
         db:8e:ec:77:38:83:bb:3e:a9:7c:0d:5e:17:95:83:97:f5:4e:
         2c:ff:ba:20:f7:2b:bc:27:a0:16:f9:84:1d:f1:48:67:62:ea:
         6f:19:8f:44:cc:8b:08:4b:ea:94:69:6b:99:96:06:40:c6:bb:
         c8:36:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org