Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/MItyMtUfSq6m87irysutcgRJg_M.roa
File:                     MItyMtUfSq6m87irysutcgRJg_M.roa (raw, json)
Hash identifier:          aqtxEvZfgMvgU5OZJCQWOx5pdk/uBvrnrXLUrPSQJ4A=
Subject key identifier:   30:8B:72:32:D5:1F:4A:AE:A6:F3:B8:AB:CA:CB:AD:72:04:49:83:F3
Certificate issuer:       /CN=adebf7eca6c96e5bfda68d05427aafee33f2cec4
Certificate serial:       021C59F1
Authority key identifier: AD:EB:F7:EC:A6:C9:6E:5B:FD:A6:8D:05:42:7A:AF:EE:33:F2:CE:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev37KbJblv9po0FQnqv7jPyzsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/MItyMtUfSq6m87irysutcgRJg_M.roa
Signing time:             Sat 01 Jan 2022 08:59:39 +0000
ROA not before:           Sat 01 Jan 2022 08:59:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.231.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35412465 (0x21c59f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebf7eca6c96e5bfda68d05427aafee33f2cec4
        Validity
            Not Before: Jan  1 08:59:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=308b7232d51f4aaea6f3b8abcacbad72044983f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ab:43:a7:2b:c3:e7:53:4b:1f:78:b5:b4:20:
                    e5:2e:d4:88:d8:d3:21:b0:99:c7:d0:17:f0:bc:23:
                    48:6c:10:c3:a1:ec:a0:95:ed:ad:35:6f:86:57:f5:
                    ec:7c:ed:4c:37:25:12:17:65:10:04:3f:6d:7d:73:
                    12:fb:d7:db:f4:a6:fb:6f:34:aa:db:2f:44:3f:b6:
                    cc:46:32:9d:71:df:0a:33:84:28:e5:7e:60:f4:43:
                    12:fc:1b:44:7b:98:ea:48:a1:6e:06:0a:2a:83:3a:
                    bc:a2:c4:91:cc:5c:a8:c4:fc:bf:48:64:07:37:b9:
                    bf:a2:ac:35:95:6f:4c:13:d2:51:24:40:b3:47:9c:
                    8d:7f:61:77:49:f1:82:70:3b:88:9d:62:7c:65:00:
                    37:8b:53:90:da:d1:23:c7:12:5f:51:f6:42:b7:cd:
                    7d:25:e0:28:af:61:9e:15:de:56:e8:56:59:39:50:
                    56:92:0e:08:7a:ba:f8:ea:08:c3:71:ec:88:77:d4:
                    31:66:97:9f:b9:59:ee:7c:e2:05:91:66:0d:21:f1:
                    43:a1:90:fb:6f:15:0b:7d:52:33:5b:46:e4:e5:ee:
                    79:49:9a:01:f3:8b:f1:93:b6:0e:98:31:9b:35:7f:
                    ac:12:b5:57:2f:ac:3a:ed:aa:78:3f:ff:7f:f2:82:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8B:72:32:D5:1F:4A:AE:A6:F3:B8:AB:CA:CB:AD:72:04:49:83:F3
            X509v3 Authority Key Identifier:
                keyid:AD:EB:F7:EC:A6:C9:6E:5B:FD:A6:8D:05:42:7A:AF:EE:33:F2:CE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev37KbJblv9po0FQnqv7jPyzsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/MItyMtUfSq6m87irysutcgRJg_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/rev37KbJblv9po0FQnqv7jPyzsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:f7:ff:92:43:8d:d6:78:d5:f5:e2:39:6f:96:91:36:16:
         fd:d1:81:9b:4b:a0:4d:d2:53:c4:30:1e:5d:87:7c:2a:4e:f3:
         28:6c:2f:e9:06:8d:fc:44:13:1b:c1:61:bb:22:48:58:02:de:
         f2:61:25:29:2a:05:ef:af:1e:88:32:50:e6:f1:6c:42:66:2d:
         c9:c9:df:82:bd:2f:4a:c1:dc:50:18:7b:ef:ad:fe:73:79:f4:
         ba:88:80:06:13:cd:09:b4:c4:09:60:f7:a5:f5:89:81:78:8a:
         44:3a:88:e6:bb:4c:52:ca:f9:4c:40:d0:be:fc:ac:7c:12:62:
         f4:cc:d2:a2:3c:b8:55:57:f2:ef:e7:39:0a:cd:f8:cf:0b:af:
         d8:ad:87:3c:54:cf:ee:36:69:d3:91:46:16:8d:f2:23:a1:4e:
         f7:e1:96:89:c4:3d:c8:54:89:e2:22:c8:c0:aa:ee:5e:94:57:
         4b:92:42:7d:99:9a:4b:98:90:89:30:06:e7:3f:81:62:e6:29:
         0d:65:94:e6:79:b8:11:e2:5b:46:11:70:6f:77:0f:ab:b3:3c:
         69:0b:30:e9:24:99:be:f4:be:07:b3:63:91:d5:ee:39:db:74:
         61:39:95:85:a6:02:3e:27:f9:e1:7a:1a:7c:93:b5:bc:03:8a:
         44:5f:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org