Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/gE5vSFxU_uUABZStTIaeQ4uVuGE.roa
File:                     gE5vSFxU_uUABZStTIaeQ4uVuGE.roa (raw, json)
Hash identifier:          HFg7zILso1Xm+q9/M4sK4s6mD3xSaRqpLI/Fky4HzYQ=
Subject key identifier:   80:4E:6F:48:5C:54:FE:E5:00:05:94:AD:4C:86:9E:43:8B:95:B8:61
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018573439932A441E9594E5896CCAA1CEE46
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/gE5vSFxU_uUABZStTIaeQ4uVuGE.roa
Signing time:             Mon 02 Jan 2023 16:14:47 +0000
ROA not before:           Mon 02 Jan 2023 16:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197882
IP address blocks:        185.212.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:43:99:32:a4:41:e9:59:4e:58:96:cc:aa:1c:ee:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Jan  2 16:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=804e6f485c54fee5000594ad4c869e438b95b861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:46:fc:0a:d3:f5:c5:a0:32:ca:b1:ce:bf:
                    36:bf:35:a7:83:38:6d:8f:9d:05:20:2f:9e:cb:a7:
                    4b:1f:27:19:79:c8:75:bc:bb:b2:af:24:35:77:fe:
                    9a:c5:68:9e:27:62:1d:88:26:8d:bb:3b:e5:fb:c0:
                    42:1e:e4:cf:69:4f:94:b5:c0:ad:f3:4a:4c:3f:e6:
                    16:de:85:e9:f6:44:d6:a9:fe:71:f0:c2:a7:34:82:
                    01:e3:50:d3:e5:77:39:01:b5:71:f6:87:84:7d:bc:
                    64:1d:b2:3c:80:35:70:bf:7d:87:ad:c5:fc:49:0c:
                    7a:bd:46:97:dc:c0:28:b9:e8:e8:5c:00:64:a5:64:
                    e0:4b:c1:ad:ce:0b:40:b4:53:b0:e2:e2:30:4b:38:
                    4b:b0:15:c4:23:ac:bd:7c:19:fc:80:de:5c:b2:17:
                    96:d3:ef:db:b4:a0:36:c2:f3:83:a6:5b:65:35:a0:
                    8c:f0:70:91:9d:9c:a9:f3:be:6e:3d:ee:88:df:df:
                    73:c7:52:c4:6c:08:32:c7:1f:70:48:c3:02:ef:f2:
                    59:95:f3:c6:5a:25:f2:44:ab:0f:4d:5f:8f:86:8e:
                    a8:d8:ef:66:d3:f7:24:0b:e2:0d:cd:0a:f8:dc:b6:
                    8a:3a:c3:bb:93:4a:52:88:ff:d7:bd:ad:8e:02:e4:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:6F:48:5C:54:FE:E5:00:05:94:AD:4C:86:9E:43:8B:95:B8:61
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/gE5vSFxU_uUABZStTIaeQ4uVuGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:43:53:19:dd:dd:7b:b5:3f:91:63:8a:54:19:c1:99:eb:2f:
         17:33:f8:4d:d2:72:89:ea:48:73:dd:fd:36:b3:ae:29:66:65:
         81:05:68:a1:08:f0:b4:87:60:4f:cc:bf:51:52:ac:3d:0a:78:
         6a:12:3f:1d:3f:86:74:69:df:5b:95:2c:9a:b7:1e:58:c9:cd:
         40:50:c0:6a:20:b6:77:30:76:45:0d:74:fe:02:07:1d:6d:fc:
         e3:79:b9:23:1f:57:31:30:66:49:2a:11:d2:b0:47:5e:bd:01:
         23:7a:65:7e:73:d6:1e:9d:51:48:32:7e:4b:fb:e9:b2:0b:64:
         45:73:c8:18:ab:26:a6:40:10:2c:69:43:51:9c:3d:db:62:76:
         34:7c:24:66:78:5c:35:3d:cc:00:78:bf:61:85:61:ff:79:10:
         fd:db:1e:72:6e:fd:92:da:0d:3f:ba:0a:23:ed:cd:a1:0e:97:
         fe:91:0c:eb:fc:c6:ee:cc:29:8b:ed:27:35:bc:ae:52:7e:68:
         9b:e0:a4:1a:76:29:ce:4f:5a:32:9c:0a:94:4c:f3:ab:7a:79:
         0c:cc:8c:b3:4e:41:4c:27:3e:53:fd:0a:b1:8e:33:95:36:20:
         16:56:3b:a9:80:21:a6:e3:a4:9e:38:28:6a:bf:20:6f:74:39:
         8c:95:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org