Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/EfCG091A98xrM4Dz0GbjCWrSCXk.roa
File:                     EfCG091A98xrM4Dz0GbjCWrSCXk.roa (raw, json)
Hash identifier:          Oe6kwNR28gJsUm+Kl9BW1Bb6TdgchBQ1TbX2ky6gnV8=
Subject key identifier:   11:F0:86:D3:DD:40:F7:CC:6B:33:80:F3:D0:66:E3:09:6A:D2:09:79
Certificate issuer:       /CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
Certificate serial:       01869D32FB3584B75CC8D1B60E2E4F8EA4FA
Authority key identifier: F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/EfCG091A98xrM4Dz0GbjCWrSCXk.roa
Signing time:             Wed 01 Mar 2023 12:43:29 +0000
ROA not before:           Wed 01 Mar 2023 12:43:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60707
IP address blocks:        185.248.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9d:32:fb:35:84:b7:5c:c8:d1:b6:0e:2e:4f:8e:a4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
        Validity
            Not Before: Mar  1 12:43:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11f086d3dd40f7cc6b3380f3d066e3096ad20979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a7:27:c8:04:18:95:71:4c:eb:1b:56:2f:fd:
                    1b:65:a7:44:f2:a8:2b:ae:fd:e4:28:a0:70:1b:3d:
                    16:26:3d:48:c6:cc:e3:76:0f:73:4e:38:b0:f4:cd:
                    85:0e:bc:cf:c1:1a:4f:e9:a9:8b:ce:3d:db:07:48:
                    be:08:48:34:36:15:f7:04:33:19:61:c9:44:9a:72:
                    d3:b9:e1:76:66:d6:e8:79:65:dc:09:d8:58:79:79:
                    3a:3c:23:03:d9:73:0c:8f:d0:5f:7b:ab:9b:f6:ce:
                    da:70:ce:7e:e2:25:58:d5:6e:27:2b:e4:19:68:50:
                    d8:1b:6a:e9:04:8c:0a:9e:83:b8:5d:b6:eb:0f:db:
                    f3:e4:21:be:3e:88:22:7b:02:8e:4b:62:41:fc:11:
                    b4:49:69:6e:11:4e:82:d8:98:e4:8a:8a:f6:b2:e0:
                    87:7d:28:eb:e1:fe:7a:26:84:34:da:5b:16:30:10:
                    db:6e:10:36:78:95:c2:4e:ec:6a:ba:89:13:46:44:
                    94:24:f5:df:f7:d7:c5:53:be:16:56:17:20:38:3b:
                    b0:ef:17:4c:d0:b8:19:07:94:1b:52:16:05:5d:6f:
                    23:8e:2e:a6:b5:75:11:59:ee:c8:8f:f7:29:1a:ef:
                    e8:5e:d4:18:70:50:48:94:00:b8:7e:da:52:f8:c0:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F0:86:D3:DD:40:F7:CC:6B:33:80:F3:D0:66:E3:09:6A:D2:09:79
            X509v3 Authority Key Identifier:
                keyid:F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/EfCG091A98xrM4Dz0GbjCWrSCXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:94:23:69:4b:12:b4:d7:9d:0c:18:4b:94:02:1b:8d:83:c8:
         30:b6:06:6c:f1:f4:b5:60:d1:22:4c:b4:ab:7d:6b:9a:6e:70:
         48:6f:44:34:d2:b8:a1:42:6a:e1:64:ba:95:0a:8f:53:0d:4e:
         f4:65:96:4b:5f:52:83:2b:f6:dd:68:06:ac:09:20:b2:8b:e0:
         c5:47:43:1e:93:0b:50:dd:8c:06:e3:3c:b0:11:c6:2b:68:fd:
         08:e5:a2:c5:6f:ad:37:3f:8e:32:a4:2c:94:af:3c:21:dc:f7:
         e6:c3:db:43:97:4f:4c:ba:bf:cc:c0:79:23:9f:c1:4a:29:73:
         38:94:12:16:fa:c8:1a:0c:23:e0:2b:17:d0:8d:27:60:64:53:
         29:4a:6e:7d:23:fc:05:56:98:f4:14:8a:03:6e:8b:4d:f1:f6:
         26:e5:17:15:a2:9b:4e:a0:80:23:5b:4f:48:5e:0a:c2:ce:ae:
         6f:ce:00:29:47:ec:9c:4f:5b:95:c0:aa:b2:0a:90:6d:50:1c:
         a2:7c:53:1b:c0:8c:32:ec:12:d3:ac:63:f8:a7:97:9a:18:ea:
         ca:5f:f9:86:e7:27:2d:70:ec:50:14:f6:70:51:39:a6:fe:ae:
         4d:10:3d:09:63:d5:4d:67:ad:50:4a:71:9b:27:60:4d:87:d0:
         30:86:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:53 2024 by rpki-client on console-ams.rpki-client.org