Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/bVy8JD8UVNXWRBnaBxr9n_EoXhI.roa
File:                     bVy8JD8UVNXWRBnaBxr9n_EoXhI.roa (raw, json)
Hash identifier:          /s08Thwk0uHAaz1vbWYLmlFVetvAVO5Dl50T9z2r2sM=
Subject key identifier:   6D:5C:BC:24:3F:14:54:D5:D6:44:19:DA:07:1A:FD:9F:F1:28:5E:12
Certificate issuer:       /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial:       01856C0116A4107FF5CCC0C954458D173C29
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/bVy8JD8UVNXWRBnaBxr9n_EoXhI.roa
Signing time:             Sun 01 Jan 2023 06:24:48 +0000
ROA not before:           Sun 01 Jan 2023 06:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60118
IP address blocks:        185.150.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:16:a4:10:7f:f5:cc:c0:c9:54:45:8d:17:3c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
        Validity
            Not Before: Jan  1 06:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6d5cbc243f1454d5d64419da071afd9ff1285e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:bc:e3:91:09:23:68:dd:4d:11:2d:d6:6e:
                    db:92:5e:fa:1e:95:36:18:85:10:6e:bf:76:9f:d3:
                    55:4e:67:82:73:ed:be:df:7c:67:27:fa:a0:ae:d0:
                    30:d9:49:7b:94:27:8d:ea:4e:6b:7a:a3:82:8c:68:
                    12:40:66:5e:0f:7b:21:50:db:9d:8c:4f:29:75:a3:
                    db:54:bf:aa:99:fb:52:bd:db:cb:63:5f:70:5e:cb:
                    8d:4e:42:a0:64:2f:ff:f0:98:7c:55:07:7d:8e:a8:
                    c5:fc:e2:9c:4b:36:16:0f:3d:e3:d3:65:f0:c1:8c:
                    ed:b4:78:4b:1d:c0:c2:2c:3f:6f:0f:f3:18:e4:75:
                    a6:59:9a:23:a0:71:d7:88:db:31:aa:97:09:46:52:
                    14:f7:f7:02:a9:09:19:89:90:3f:c0:9b:d7:dc:cf:
                    f3:75:a4:9d:75:13:14:d4:67:7b:a4:32:f3:57:17:
                    a5:f4:e8:03:68:9e:a6:d5:b9:c1:be:83:79:77:1c:
                    b5:50:e3:c2:44:12:8b:c0:1a:43:fc:ba:8f:12:12:
                    10:c3:42:c5:78:43:67:e1:c0:81:46:1e:c0:07:c7:
                    ae:86:c4:2e:fd:1c:8f:30:d1:60:d1:2d:57:77:33:
                    b6:43:f3:ea:30:f0:93:ad:0f:1f:25:6f:47:34:b1:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:BC:24:3F:14:54:D5:D6:44:19:DA:07:1A:FD:9F:F1:28:5E:12
            X509v3 Authority Key Identifier:
                keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/bVy8JD8UVNXWRBnaBxr9n_EoXhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:e1:bd:f1:2e:a4:17:d6:02:32:3d:98:c7:be:b3:e0:35:
         d0:84:8f:60:42:25:e7:dc:f0:f2:e9:0a:97:d5:a6:08:89:50:
         76:aa:a6:ae:8f:34:11:2e:76:a9:e7:14:a5:a0:3f:be:36:c1:
         51:c5:38:da:82:b7:05:5e:2a:70:50:43:65:f5:ea:f6:8f:10:
         07:00:de:c7:90:63:ba:0c:49:ff:e9:9c:d5:e9:68:aa:37:55:
         16:54:9c:74:d5:82:c4:56:04:82:50:4c:7d:16:e7:3f:9f:a1:
         32:41:4b:72:83:a7:e9:f5:52:6c:48:68:78:a9:ef:19:b1:f8:
         33:da:de:b6:03:4e:76:36:8a:fd:1d:63:54:6a:53:13:6d:0b:
         e0:5f:f2:71:03:16:65:13:9c:47:2c:4a:31:43:b0:41:8e:22:
         9f:ac:99:c7:b5:36:e9:be:f7:40:61:b7:7c:f1:3f:d3:21:46:
         c9:d8:9f:21:33:0b:3a:10:65:e7:f3:1d:2e:53:7b:29:55:20:
         78:d2:4f:37:40:65:a3:2c:cd:31:1e:be:ec:e1:ab:3d:a4:20:
         e9:ac:8a:f4:aa:cf:d8:d3:f2:2a:ea:38:20:c5:2d:e1:64:f1:
         43:57:cf:ff:92:e4:03:fd:c4:92:db:b0:20:ad:82:79:cf:d3:
         9c:9b:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org