Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/jYAQchg6Lh-pmq8R35FfAIBjSPs.roa
File:                     jYAQchg6Lh-pmq8R35FfAIBjSPs.roa (raw, json)
Hash identifier:          f9PxkzpARIZU6tMU18wuIarjNc37QjQDQAqFtchxdGs=
Subject key identifier:   8D:80:10:72:18:3A:2E:1F:A9:9A:AF:11:DF:91:5F:00:80:63:48:FB
Certificate issuer:       /CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Certificate serial:       09F038BC
Authority key identifier: 60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/jYAQchg6Lh-pmq8R35FfAIBjSPs.roa
Signing time:             Sat 01 Jan 2022 08:03:54 +0000
ROA not before:           Sat 01 Jan 2022 08:03:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29262
IP address blocks:        185.141.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166738108 (0x9f038bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
        Validity
            Not Before: Jan  1 08:03:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d801072183a2e1fa99aaf11df915f00806348fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:4d:c9:2c:5c:17:16:64:4e:11:de:a8:fd:
                    5e:13:b5:57:48:dc:bb:da:26:f9:c1:df:02:9f:28:
                    dc:5b:7c:ad:d1:38:11:c8:9c:4c:9f:64:d1:ee:50:
                    ed:ec:43:5c:05:da:0d:5e:df:74:f4:e7:65:1b:00:
                    39:96:97:ec:9a:d7:f3:d2:d1:b9:a4:7b:03:52:29:
                    4e:29:8f:ea:c6:88:3d:75:b4:25:85:a0:c9:fb:92:
                    7e:7f:53:bf:da:07:a5:61:38:c5:f7:a0:91:22:a9:
                    ae:26:93:1a:27:a5:bb:e2:02:24:68:62:37:4c:1f:
                    6e:d8:57:6b:60:51:9a:37:b2:17:9d:0b:ee:11:d6:
                    08:50:cd:dc:c9:2f:fe:69:d0:36:48:78:50:d0:0d:
                    25:07:93:53:1e:28:d7:24:9b:f0:9c:44:ac:5b:a9:
                    5a:5c:0b:8c:38:93:54:af:0d:7f:55:c4:5f:43:ae:
                    24:59:4f:8c:78:e9:d4:2c:81:fb:68:9d:6c:1e:d6:
                    05:eb:28:8d:18:e6:f1:76:03:cf:3c:a4:c0:0b:01:
                    ab:db:fb:12:3f:46:1e:3c:ee:3d:1d:c3:bb:83:4c:
                    fc:e8:c6:a5:cd:3a:60:d4:4e:0b:6b:75:83:61:b4:
                    5a:37:d0:ce:14:7c:28:72:d0:56:e1:4d:12:e8:49:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:10:72:18:3A:2E:1F:A9:9A:AF:11:DF:91:5F:00:80:63:48:FB
            X509v3 Authority Key Identifier:
                keyid:60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/jYAQchg6Lh-pmq8R35FfAIBjSPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:30:fb:2e:e7:ba:05:f9:2a:4a:fe:e4:d3:12:1c:a9:2e:
         e5:71:a4:3c:d7:8b:de:ea:f1:e3:ea:d0:d0:03:08:d3:e9:c3:
         b5:a9:0d:2e:36:64:c8:b2:6c:b1:b8:6d:f3:26:f4:c0:d4:74:
         71:cf:61:2a:55:df:9f:2b:30:65:7b:06:d1:d6:1d:14:e3:fb:
         6a:7c:35:ed:e5:16:be:e4:d2:2b:07:a9:b2:1f:4d:1e:21:91:
         2f:1f:43:7c:52:20:6f:70:72:bf:0b:c4:45:4f:38:44:27:5d:
         14:25:b7:56:2b:d5:d6:92:dd:50:7e:88:34:49:11:d0:4d:0f:
         8d:c5:b7:e2:ed:b4:49:ca:b3:29:1a:24:26:5b:5e:60:e4:a0:
         3e:69:51:75:23:bf:61:97:09:4a:58:87:18:41:12:c1:0e:f5:
         52:52:65:2d:bd:f1:b3:dc:86:55:64:e7:80:59:29:79:cd:fd:
         01:ee:22:58:f9:df:a0:08:08:81:ec:a8:cb:38:b5:8a:63:87:
         67:ca:15:4f:f5:3b:60:5f:b6:b0:7b:a6:5d:ad:c8:c7:30:aa:
         9b:ef:c6:68:35:d9:9f:37:49:8d:d3:e3:29:8f:8a:de:17:24:
         ab:25:a0:38:49:fd:0f:76:85:5f:23:23:ed:ff:40:63:39:88:
         90:c7:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:33 2024 by rpki-client on console-fra.rpki-client.org