Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/OKwdcyyyMQqrth90Yk7M3_bWMw8.roa
File:                     OKwdcyyyMQqrth90Yk7M3_bWMw8.roa (raw, json)
Hash identifier:          TSSxuusCGWbvxJVNyXKkoPFVhgoWEEl+oG7g5vFQ29s=
Subject key identifier:   38:AC:1D:73:2C:B2:31:0A:AB:B6:1F:74:62:4E:CC:DF:F6:D6:33:0F
Certificate issuer:       /CN=737f9e60b386f68dca02cd82076b7c0066d2d230
Certificate serial:       0237ED
Authority key identifier: 73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/OKwdcyyyMQqrth90Yk7M3_bWMw8.roa
Signing time:             Thu 27 Jan 2022 12:30:19 +0000
ROA not before:           Thu 27 Jan 2022 12:30:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208024
IP address blocks:        185.230.222.0/24 maxlen: 24
                          2a0c:2f07:72::/48 maxlen: 48
                          2a0c:2f07:73::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145389 (0x237ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737f9e60b386f68dca02cd82076b7c0066d2d230
        Validity
            Not Before: Jan 27 12:30:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38ac1d732cb2310aabb61f74624eccdff6d6330f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:4d:8c:a4:83:7f:c4:b0:b9:26:02:27:0b:
                    c4:56:cb:53:ef:68:3c:c3:65:de:9c:5d:64:d7:ed:
                    e0:97:08:17:14:0a:d9:f3:05:ac:a5:39:32:d4:8f:
                    18:06:f6:3d:52:93:e4:e9:69:c2:e8:bb:f6:7e:92:
                    08:9c:fa:7a:be:87:b1:f2:86:01:97:2c:90:fd:aa:
                    09:5f:f6:7a:56:a7:57:37:75:9b:b0:9f:08:a2:05:
                    c0:19:bd:7f:7a:fe:18:97:bb:a1:cb:a3:d0:a3:d1:
                    47:b8:33:ae:4d:c0:83:68:98:12:46:10:2a:78:c6:
                    46:0a:5d:e5:5e:5f:66:72:3f:c9:24:84:d0:a1:2b:
                    a2:c0:01:98:e8:6c:fb:7b:36:a5:08:27:cf:1b:30:
                    c9:00:40:54:cf:07:11:4b:4d:9e:f8:7b:07:57:64:
                    83:95:81:16:fd:6e:38:13:f9:fb:22:ce:9a:86:1a:
                    14:34:5e:98:ff:39:7c:d5:98:bd:5e:04:e5:32:c0:
                    c0:e6:38:fb:f9:90:02:f1:a4:f6:a5:3a:55:50:5d:
                    08:4f:ef:36:5f:82:9f:e4:76:c7:f0:35:32:de:1d:
                    0b:f1:99:16:fc:c5:60:37:61:39:03:50:9d:a9:6f:
                    77:fe:85:53:21:ac:2c:84:b5:3a:0d:18:0d:cc:3b:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:1D:73:2C:B2:31:0A:AB:B6:1F:74:62:4E:CC:DF:F6:D6:33:0F
            X509v3 Authority Key Identifier:
                keyid:73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/OKwdcyyyMQqrth90Yk7M3_bWMw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/c3-eYLOG9o3KAs2CB2t8AGbS0jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.222.0/24
                IPv6:
                  2a0c:2f07:72::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:fc:9e:8d:e6:c9:e1:67:e5:c8:f2:cc:c2:ee:18:1f:c1:96:
         c8:46:92:58:b3:14:e0:6a:52:4e:66:78:1b:fa:07:a8:a5:d8:
         8e:ce:a8:a3:3e:5a:9c:2e:50:52:f2:7f:cd:ac:92:f4:ac:bf:
         e7:ce:d9:f2:65:8c:7e:07:c8:cf:40:12:42:82:58:74:3b:58:
         ed:60:56:bb:de:5c:ba:56:79:05:8b:05:3f:93:6b:16:f1:0d:
         9c:22:c4:c8:c1:4b:c3:8a:5a:4c:09:71:9c:6b:20:b8:85:c4:
         d0:6f:5f:13:4e:40:d4:24:7a:5e:9e:cc:42:d8:bd:ab:1e:84:
         45:8e:fa:88:c3:78:84:2b:fc:e4:90:d6:ab:a3:60:04:e3:84:
         27:f6:db:a8:9c:8b:cd:6c:c7:bf:aa:69:d3:c4:24:72:21:90:
         58:6a:d7:73:a5:79:80:40:2e:cc:e6:33:7b:3d:26:d7:18:9c:
         48:a9:3f:82:a5:63:c0:a8:42:ee:f7:e3:77:c8:2d:50:b3:a0:
         ef:23:2d:0e:bb:a8:37:64:0a:22:9f:b1:12:eb:e1:00:3b:ad:
         92:9c:d9:d4:4f:d3:95:6d:26:8e:b8:fd:3c:37:d7:2a:c4:96:
         b8:4b:cb:d6:26:97:be:c9:f6:c4:ce:5d:42:cd:f7:0f:12:7f:
         e1:69:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:26 2024 by rpki-client on console-fra.rpki-client.org