Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/2g6zDI-wS4b1Zxv7K8n2yEuh_Ig.roa
File:                     2g6zDI-wS4b1Zxv7K8n2yEuh_Ig.roa (raw, json)
Hash identifier:          atfvR8F+srDbFV+DkrZCLQedKgcFyzW5wMczoaMhu2k=
Subject key identifier:   DA:0E:B3:0C:8F:B0:4B:86:F5:67:1B:FB:2B:C9:F6:C8:4B:A1:FC:88
Certificate issuer:       /CN=5182df5bb67b92546fdd4d730dd07d8cb7ab4030
Certificate serial:       0C677512
Authority key identifier: 51:82:DF:5B:B6:7B:92:54:6F:DD:4D:73:0D:D0:7D:8C:B7:AB:40:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYLfW7Z7klRv3U1zDdB9jLerQDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/2g6zDI-wS4b1Zxv7K8n2yEuh_Ig.roa
Signing time:             Sat 01 Jan 2022 10:59:50 +0000
ROA not before:           Sat 01 Jan 2022 10:59:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199652
IP address blocks:        185.249.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208106770 (0xc677512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5182df5bb67b92546fdd4d730dd07d8cb7ab4030
        Validity
            Not Before: Jan  1 10:59:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da0eb30c8fb04b86f5671bfb2bc9f6c84ba1fc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:98:9e:16:df:cf:e0:c4:d1:4a:39:9e:4c:
                    54:77:64:86:a6:76:51:49:d3:d1:56:a7:ad:f6:0b:
                    67:0e:f3:ab:ed:61:17:07:72:26:ca:f5:0c:c7:39:
                    5b:ce:18:70:45:85:4c:f9:d6:e5:75:7f:47:40:4e:
                    a5:85:d1:50:7f:08:cc:7e:af:6d:85:fb:b1:bb:8a:
                    4a:7d:dc:29:6b:46:d6:5e:71:a1:51:48:23:ad:32:
                    be:5c:33:26:98:5e:83:44:26:8f:7a:be:7a:d2:31:
                    00:3c:2a:d1:c1:66:09:48:65:66:28:2c:ad:03:e8:
                    0e:a8:8f:06:3a:cd:5f:b5:bc:29:c9:4f:d3:64:c4:
                    9f:62:92:71:19:f5:dc:2d:79:db:b8:dc:b2:b9:b8:
                    f6:05:88:b6:61:cd:5d:04:f6:4b:a1:1d:7f:b7:09:
                    a6:78:2a:06:c2:d6:96:3e:75:39:78:ce:10:b9:71:
                    3f:93:84:9a:09:99:94:d5:67:cc:f1:54:4d:2c:42:
                    6e:b9:45:e0:19:6f:b4:ad:93:df:55:b8:6a:28:62:
                    90:69:f8:bd:a8:da:55:87:74:46:4c:c7:a3:28:30:
                    aa:86:8a:39:35:2a:8d:c4:8a:1a:1e:69:38:2b:d8:
                    47:d7:64:4f:b7:e1:14:11:7f:07:83:d1:bc:ee:fd:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0E:B3:0C:8F:B0:4B:86:F5:67:1B:FB:2B:C9:F6:C8:4B:A1:FC:88
            X509v3 Authority Key Identifier:
                keyid:51:82:DF:5B:B6:7B:92:54:6F:DD:4D:73:0D:D0:7D:8C:B7:AB:40:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYLfW7Z7klRv3U1zDdB9jLerQDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/2g6zDI-wS4b1Zxv7K8n2yEuh_Ig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/UYLfW7Z7klRv3U1zDdB9jLerQDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:0d:d2:b0:de:66:57:21:9a:ca:97:4a:ed:dc:ca:96:a4:
         55:24:c1:38:15:03:bd:e6:65:82:b9:a9:77:21:e4:63:27:94:
         8c:57:da:d1:54:d4:7d:69:8b:e7:28:8a:73:5d:40:77:04:65:
         a1:48:f0:7f:06:f7:d1:fe:19:12:3a:ab:7e:f6:c8:1f:77:6e:
         00:b6:1f:40:08:3a:a3:f3:85:54:1e:a8:1b:03:48:50:43:5d:
         0e:82:76:3e:6e:ab:1f:62:5c:52:77:58:ee:c3:e9:33:ae:f1:
         29:9f:04:55:7c:c0:4c:bf:44:0a:3f:b6:c5:2d:e1:43:62:50:
         ae:4e:bc:a3:62:73:a6:59:3d:3e:10:67:11:eb:1c:ea:b0:85:
         6c:65:5f:36:07:38:c6:6b:ca:a6:c1:c3:b4:90:5d:fe:6d:31:
         88:d7:bc:08:16:bf:19:a1:31:ff:ad:16:de:bc:45:e9:02:c8:
         ca:26:bf:fc:12:5b:3f:ca:d7:be:d3:19:2b:d6:95:fa:62:85:
         bb:e9:d2:8b:f9:55:54:09:e4:0f:82:2c:bd:cb:16:20:43:f7:
         e7:44:9c:69:ec:5c:06:ba:03:6b:c9:2b:e0:a3:0d:68:81:4c:
         61:f2:3b:b6:4e:0f:c3:7d:47:84:9a:5a:55:a6:e1:c9:dd:7c:
         fe:28:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:11 2024 by rpki-client on console-fra.rpki-client.org