Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/WB2WN-y7Et7UOruiH8alEsv1vcI.roa
File:                     WB2WN-y7Et7UOruiH8alEsv1vcI.roa (raw, json)
Hash identifier:          qvolBcFFvs8QbjxL7s1vtllKei1mB012H9+dd8mV5rw=
Subject key identifier:   58:1D:96:37:EC:BB:12:DE:D4:3A:BB:A2:1F:C6:A5:12:CB:F5:BD:C2
Certificate issuer:       /CN=2325e7618ef963795cd3ffbb47a11ade64013905
Certificate serial:       E385EF
Authority key identifier: 23:25:E7:61:8E:F9:63:79:5C:D3:FF:BB:47:A1:1A:DE:64:01:39:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/WB2WN-y7Et7UOruiH8alEsv1vcI.roa
Signing time:             Sat 01 Jan 2022 03:55:13 +0000
ROA not before:           Sat 01 Jan 2022 03:55:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57844
IP address blocks:        185.234.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14910959 (0xe385ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2325e7618ef963795cd3ffbb47a11ade64013905
        Validity
            Not Before: Jan  1 03:55:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=581d9637ecbb12ded43abba21fc6a512cbf5bdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:90:45:31:cc:30:dc:e6:c6:82:bc:37:47:
                    32:25:98:6f:25:32:94:9a:14:ee:73:76:b3:4f:90:
                    c6:9a:74:63:93:ff:b3:8e:3b:49:33:ac:33:d6:94:
                    f1:74:b9:d5:75:5f:e2:c9:51:40:90:ec:3a:e0:5e:
                    7f:3f:54:18:aa:c6:a7:c2:ba:99:37:90:28:c3:4a:
                    95:4c:c6:71:6d:cf:48:00:cc:70:01:a6:d3:7f:37:
                    69:1a:3c:d5:f4:c7:66:3c:5a:f6:41:ba:b0:3b:46:
                    0e:36:a8:e3:52:00:3f:40:c9:f5:85:2f:aa:9e:46:
                    58:1d:88:21:e1:35:7d:9f:a4:99:86:70:55:3a:cd:
                    73:21:1b:c1:01:77:ad:08:1d:07:ea:7f:6e:cd:c1:
                    83:52:79:ee:6a:31:0c:d6:4b:9b:0e:1b:13:bf:c0:
                    63:42:08:ad:76:f2:55:1b:7e:51:68:39:13:60:6d:
                    c2:b5:a1:a1:ec:68:5b:90:a0:a3:e6:f7:03:5d:46:
                    79:1c:ef:f6:b7:8b:ae:aa:6f:c2:5a:90:d0:69:00:
                    3d:50:a0:38:cc:c3:a8:42:25:4b:8d:b4:c6:01:63:
                    3c:f3:a7:a5:fa:77:f3:d7:0f:de:a1:0b:86:50:b7:
                    d3:99:4b:68:25:04:b6:bf:66:ba:c5:93:fc:8e:b0:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:96:37:EC:BB:12:DE:D4:3A:BB:A2:1F:C6:A5:12:CB:F5:BD:C2
            X509v3 Authority Key Identifier:
                keyid:23:25:E7:61:8E:F9:63:79:5C:D3:FF:BB:47:A1:1A:DE:64:01:39:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/WB2WN-y7Et7UOruiH8alEsv1vcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:54:36:71:a7:26:25:70:28:8e:f8:bd:96:df:0b:7a:f0:
         f1:d9:26:c8:e0:74:d9:68:cf:08:e5:13:c6:af:1d:9d:6a:94:
         f3:a5:a9:4b:53:3d:33:b2:55:b5:b9:a4:1a:5f:f2:a1:32:64:
         90:55:69:4f:40:d3:97:82:d9:bb:b3:60:48:d0:0a:6d:32:ad:
         25:62:fd:39:26:83:e1:87:c4:cf:4d:2f:ba:e8:f5:a5:77:da:
         79:af:a1:48:c8:88:be:17:65:37:79:92:e6:2c:6d:39:1b:51:
         27:a0:03:3d:f8:9d:e4:08:10:bf:cc:f0:3e:09:82:d6:e8:f0:
         0b:12:93:28:c9:cc:b4:00:83:2b:7e:de:b1:f7:62:55:df:88:
         f4:3c:28:1a:9f:b4:ca:2d:c5:09:ce:3c:cc:13:a0:34:dc:30:
         cb:8a:5a:ec:b6:99:ae:80:c3:be:e7:f4:8a:b7:45:39:b5:55:
         b2:54:90:6b:2b:d3:7f:ff:61:34:20:cc:e8:06:3f:a9:f6:6d:
         02:09:08:6b:97:9a:1e:5a:82:a5:cf:c1:0e:f6:93:77:e1:7e:
         d6:bf:0c:71:9f:0f:a7:20:be:9a:39:f4:3e:7c:49:f0:eb:fd:
         6f:40:e2:e8:d5:5d:7c:cd:45:62:a9:25:ad:42:e0:0c:54:70:
         7f:15:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:31 2024 by rpki-client on console-ams.rpki-client.org