Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/cMEFoTLu6DDNjbzP8AfsaB09Nnk.roa
File:                     cMEFoTLu6DDNjbzP8AfsaB09Nnk.roa (raw, json)
Hash identifier:          ad2T4H7Mi3v8KPSL3bF4YoF40Vgjb8qDwoCGDu0Zm5U=
Subject key identifier:   70:C1:05:A1:32:EE:E8:30:CD:8D:BC:CF:F0:07:EC:68:1D:3D:36:79
Certificate issuer:       /CN=f9f8e49d35c47241abefd84e94c417d21795b1e1
Certificate serial:       018573561E8FF1BD89F62ED7B2E54E17C8DC
Authority key identifier: F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-fjknTXEckGr79hOlMQX0heVseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/cMEFoTLu6DDNjbzP8AfsaB09Nnk.roa
Signing time:             Mon 02 Jan 2023 16:35:01 +0000
ROA not before:           Mon 02 Jan 2023 16:35:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212036
IP address blocks:        185.226.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:56:1e:8f:f1:bd:89:f6:2e:d7:b2:e5:4e:17:c8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9f8e49d35c47241abefd84e94c417d21795b1e1
        Validity
            Not Before: Jan  2 16:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70c105a132eee830cd8dbccff007ec681d3d3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:23:99:74:ff:35:ae:b6:9c:06:00:e8:65:
                    73:b9:b3:8e:4c:62:41:8e:23:60:ab:e3:69:8b:c5:
                    33:4e:fb:d9:33:74:f1:b9:3e:f0:8f:aa:6a:2b:23:
                    ed:34:c3:1b:11:9a:3f:f4:aa:7f:78:97:7c:0d:f6:
                    a6:40:a5:8a:c1:24:22:bc:1d:62:12:1e:1c:cd:c2:
                    ad:68:22:c5:95:d2:84:a0:96:dd:c4:9a:14:3d:a1:
                    0d:9a:0a:a1:38:ba:d6:e4:34:2e:41:57:df:0e:19:
                    93:a9:53:51:4f:86:e8:7d:74:5b:89:7f:33:c1:dc:
                    a7:5f:53:2c:ff:f3:63:35:5a:92:ed:c3:5e:07:e1:
                    c4:bf:87:3b:e3:11:fc:11:a9:2b:3a:14:02:03:4e:
                    e1:f4:e2:31:ff:c5:1c:da:68:c4:ba:82:5d:34:95:
                    5d:ab:b7:22:cb:b7:97:6e:a8:eb:38:6b:7e:94:4a:
                    1f:a3:08:09:d8:e1:e9:a8:df:5e:f1:73:f2:7f:14:
                    16:ee:b5:10:da:27:51:2a:09:49:a1:95:1a:2c:74:
                    80:82:cc:e3:ae:21:50:cf:c0:e5:9a:b8:0d:02:65:
                    39:9b:fd:27:34:21:fa:1b:48:c7:f6:7a:5d:0a:06:
                    4c:67:bd:97:e7:ce:b0:20:52:71:25:6a:d9:4c:cf:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C1:05:A1:32:EE:E8:30:CD:8D:BC:CF:F0:07:EC:68:1D:3D:36:79
            X509v3 Authority Key Identifier:
                keyid:F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fjknTXEckGr79hOlMQX0heVseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/cMEFoTLu6DDNjbzP8AfsaB09Nnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/1-fjknTXEckGr79hOlMQX0heVseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:15:f0:29:96:b9:f1:1d:77:bf:04:34:b3:11:93:63:f7:05:
         83:8a:ce:64:63:44:82:ac:fc:44:b7:4a:3f:86:87:9c:be:22:
         7b:eb:b5:e8:b7:3e:2b:5e:72:be:81:c6:41:64:4b:c4:0f:18:
         45:2b:ef:ea:8d:c4:6d:ea:3d:9a:b9:9e:dc:cc:3b:cc:62:ea:
         b2:8c:55:8a:72:a7:f9:26:62:b5:7b:07:f9:d9:71:5a:6f:f3:
         f3:ad:c4:37:65:d0:3c:bb:a7:23:fb:9b:ea:53:e2:8c:a6:f9:
         21:c5:e5:35:37:0e:3d:e5:9e:83:39:7d:af:82:40:11:52:37:
         bb:bc:16:37:88:4b:77:aa:c7:bd:ea:f9:80:ae:43:05:73:a9:
         f0:87:b5:90:b2:4d:0b:ab:fd:91:0a:bb:ac:15:e3:30:0a:de:
         9e:a1:25:a6:8e:01:dc:9a:00:90:8a:33:b3:88:eb:fc:e5:a8:
         2d:d7:67:c3:ae:ad:e5:5a:d5:a5:d6:20:6e:33:aa:8c:db:8c:
         64:2b:0b:37:ef:c9:f4:fa:c3:c2:86:12:ef:24:80:a5:59:b6:
         09:67:11:cc:26:3e:2a:b5:d0:6d:4e:82:c5:c6:ca:c8:ca:3b:
         9e:bd:2e:9b:68:fb:96:d2:5e:42:3e:12:17:0e:54:04:a2:31:
         fc:e4:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:56 2024 by rpki-client on console-ams.rpki-client.org