Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/lJWsjZ7b_salHH4RDH3vxOSsCxQ.roa
File:                     lJWsjZ7b_salHH4RDH3vxOSsCxQ.roa (raw, json)
Hash identifier:          kipvcxPhSWefqKVWnX2jDFvtBOp7b5ob3dmsdQOzAEU=
Subject key identifier:   94:95:AC:8D:9E:DB:FE:C6:A5:1C:7E:11:0C:7D:EF:C4:E4:AC:0B:14
Certificate issuer:       /CN=737f9e60b386f68dca02cd82076b7c0066d2d230
Certificate serial:       01558F4B
Authority key identifier: 73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/lJWsjZ7b_salHH4RDH3vxOSsCxQ.roa
Signing time:             Tue 21 Jun 2022 12:17:47 +0000
ROA not before:           Tue 21 Jun 2022 12:17:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208024
IP address blocks:        185.230.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22384459 (0x1558f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737f9e60b386f68dca02cd82076b7c0066d2d230
        Validity
            Not Before: Jun 21 12:17:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9495ac8d9edbfec6a51c7e110c7defc4e4ac0b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:cb:db:64:9b:09:d8:a9:0a:35:7b:f2:40:
                    b9:85:b0:0a:0d:f2:29:e7:33:0a:90:b0:33:15:b8:
                    a6:e2:d2:73:96:2c:29:8f:36:5f:72:b5:96:26:09:
                    c7:64:20:07:9e:49:f0:9e:6c:03:6c:3d:fb:41:da:
                    04:74:7d:38:b4:4d:af:03:a7:9c:a4:9b:ae:3a:83:
                    96:94:a4:29:05:92:74:60:84:ed:a4:09:9b:5a:06:
                    da:40:ec:f5:b4:5e:a8:3e:3c:8d:e9:92:6a:bb:31:
                    1a:01:11:e0:95:c7:78:4b:d4:13:2b:1b:d9:83:25:
                    90:c8:01:93:5d:73:28:d2:c5:69:f5:ec:7e:21:96:
                    54:3f:a6:eb:45:65:5e:e0:16:a0:5d:94:29:be:ab:
                    84:99:d1:bf:84:4b:c1:6c:65:73:2a:04:07:37:a5:
                    a7:80:dc:cf:6f:5c:e6:b3:9f:90:7a:93:48:ae:5b:
                    d1:8d:64:3a:b6:95:4c:5b:64:f7:be:1b:9f:83:27:
                    f9:c8:f2:7c:83:02:1a:15:40:ea:ff:00:fa:fe:b0:
                    19:d9:b5:3b:b6:69:53:e2:56:f2:ab:7a:ec:b2:39:
                    17:61:7a:a7:9c:30:ed:63:01:a6:5b:7f:ee:65:ff:
                    4c:97:1b:3d:40:9d:68:00:0c:8d:b7:c2:94:29:3b:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:AC:8D:9E:DB:FE:C6:A5:1C:7E:11:0C:7D:EF:C4:E4:AC:0B:14
            X509v3 Authority Key Identifier:
                keyid:73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/lJWsjZ7b_salHH4RDH3vxOSsCxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/c3-eYLOG9o3KAs2CB2t8AGbS0jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:aa:a6:de:40:84:30:3c:98:c9:8c:50:5d:d6:95:f2:06:
         da:4c:7e:13:94:2c:de:ac:0f:c4:7b:dc:bb:32:cd:b0:99:0f:
         35:6a:46:08:70:aa:f5:37:ac:d7:6b:bb:d6:df:94:c5:39:72:
         b3:1b:b5:d2:8d:d4:a1:78:c7:67:d5:fe:f8:7a:43:a1:42:fc:
         3d:00:e2:6a:fd:0a:a6:5f:fa:03:d8:c4:80:31:ef:29:9a:8a:
         fd:7e:0c:c1:7f:44:a8:16:59:90:c9:4d:5e:63:6e:81:88:a4:
         67:c5:1e:5d:f3:1c:e1:4c:ae:37:74:2a:2d:02:f9:8a:be:ed:
         e4:c4:23:d1:81:fe:07:cc:a5:0c:7e:45:d8:d8:7d:c9:a6:ae:
         3f:61:8b:98:f7:5d:23:ff:24:88:46:b7:53:b3:05:83:53:27:
         c1:50:3f:33:bd:f4:b8:9c:95:fc:92:84:9d:ff:55:fb:c0:c1:
         ee:06:0e:2b:68:21:aa:4d:4c:2f:f5:e3:bc:48:e4:f3:1d:55:
         73:53:0e:af:82:a4:ea:7a:a4:5b:3c:48:0a:b6:67:8a:25:e5:
         e0:2d:56:bf:f9:41:ba:e5:61:2f:ad:26:22:b3:a0:37:f9:92:
         30:ac:d3:a8:05:52:6c:00:f5:a9:ba:6f:56:f7:d9:e0:54:b7:
         f0:59:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:26 2024 by rpki-client on console-fra.rpki-client.org