Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/2lQ4Ds_gM0bGDnK3UcItA1feljg.roa
File:                     2lQ4Ds_gM0bGDnK3UcItA1feljg.roa (raw, json)
Hash identifier:          NIj8Kt+MBMljw7t5Tyrc92Op9rPuRIQcQa6X5V6Xl/A=
Subject key identifier:   DA:54:38:0E:CF:E0:33:46:C6:0E:72:B7:51:C2:2D:03:57:DE:96:38
Certificate issuer:       /CN=cc76201a5e51665e8057d26c456debb032730cb7
Certificate serial:       01B33A9A
Authority key identifier: CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/2lQ4Ds_gM0bGDnK3UcItA1feljg.roa
Signing time:             Sat 01 Jan 2022 13:07:42 +0000
ROA not before:           Sat 01 Jan 2022 13:07:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48715
IP address blocks:        185.173.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28523162 (0x1b33a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc76201a5e51665e8057d26c456debb032730cb7
        Validity
            Not Before: Jan  1 13:07:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da54380ecfe03346c60e72b751c22d0357de9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:c8:e8:35:c8:77:dd:ff:46:af:90:a2:a6:
                    c3:db:d3:9c:29:f8:fb:1d:f3:0e:03:43:30:c3:7e:
                    dc:c3:e6:a9:c1:50:6d:9d:82:e2:e8:60:97:e6:ec:
                    84:2b:81:99:aa:e7:92:16:aa:14:bb:be:e0:a6:0a:
                    62:96:c4:28:67:eb:b7:bd:c8:f9:e2:ee:a5:ae:c9:
                    26:0a:bd:2a:f3:8d:ee:97:61:fb:45:ed:81:ba:ac:
                    90:1b:49:51:9c:29:f1:e3:47:53:64:99:35:82:fb:
                    cd:bc:df:5c:47:47:7d:81:54:0b:25:c8:af:9d:3f:
                    7a:90:7c:74:c1:71:6f:f2:d5:a7:52:77:42:99:cf:
                    50:54:8b:e4:ad:28:27:3f:d3:c7:f7:d0:b7:a6:fb:
                    3f:56:e5:8a:8e:0e:30:3e:24:c9:c4:6a:72:4b:4b:
                    d3:02:b4:fd:3b:23:07:ea:2d:93:89:92:ba:65:0b:
                    cf:69:df:7c:30:ff:66:90:55:0a:ee:d5:fb:63:a5:
                    d5:0f:d7:bb:04:2b:ab:f3:a3:20:c3:b3:ec:73:e4:
                    2e:7c:e3:7a:34:90:fc:f7:43:9d:ab:0d:df:23:c8:
                    10:b1:1d:ec:ee:df:59:a7:58:26:61:8f:ee:9d:70:
                    5a:bd:b4:c1:fe:06:c0:ae:64:f5:a3:f0:94:e2:7c:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:54:38:0E:CF:E0:33:46:C6:0E:72:B7:51:C2:2D:03:57:DE:96:38
            X509v3 Authority Key Identifier:
                keyid:CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/2lQ4Ds_gM0bGDnK3UcItA1feljg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/zHYgGl5RZl6AV9JsRW3rsDJzDLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:62:26:d5:ff:fe:39:14:aa:7a:63:58:8c:98:1d:3a:b8:83:
         1c:5a:1b:01:ac:38:cc:8c:9b:f4:ef:5c:49:24:c6:14:a3:69:
         84:e6:d5:20:f0:e1:dd:c9:5b:0b:00:b7:09:df:8f:95:a7:da:
         08:f9:59:5e:1e:ea:86:5a:77:b0:59:eb:b7:94:7a:e8:13:ca:
         71:a5:57:59:66:4c:e4:33:8f:e7:43:94:ec:e7:30:33:11:00:
         a8:02:c9:02:5a:19:92:cb:e3:2c:71:37:5f:38:05:a2:b2:57:
         2a:97:ed:8f:21:37:6e:25:d8:15:ee:85:27:63:52:30:39:8e:
         a8:ce:46:ab:a0:fa:e1:84:e5:32:39:7c:16:03:bd:45:f5:28:
         9f:63:2a:bf:3e:8d:c6:82:57:84:eb:32:a7:72:21:86:ef:3d:
         d7:4b:1b:eb:bc:0e:96:85:10:f4:d8:ea:f6:e4:19:bc:ba:39:
         84:9a:9e:fe:36:12:b6:32:5c:3a:97:14:d6:86:9a:42:37:ae:
         2a:ec:83:e6:8e:9a:f6:d3:05:98:1a:8c:79:1b:1a:06:25:a0:
         86:09:7d:3b:04:5c:a3:64:87:78:06:fa:6d:64:3d:9f:9e:9f:
         c2:d8:f4:14:32:6f:2a:70:cc:73:08:dd:01:6f:c1:64:de:70:
         d6:54:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org