Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/Morsu8e0C2Dszoqli8qL93hL208.roa
File:                     Morsu8e0C2Dszoqli8qL93hL208.roa (raw, json)
Hash identifier:          cI2c6GCwYcoTBQDO+Houv1LOiKzapTYlCri2JXzxgxU=
Subject key identifier:   32:8A:EC:BB:C7:B4:0B:60:EC:CE:8A:A5:8B:CA:8B:F7:78:4B:DB:4F
Certificate issuer:       /CN=ea8155a3555358bb37357d6d9ed9ef683e978419
Certificate serial:       0181E2D9A539C83463A3B73CDDDDEB837D8C
Authority key identifier: EA:81:55:A3:55:53:58:BB:37:35:7D:6D:9E:D9:EF:68:3E:97:84:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oFVo1VTWLs3NX1tntnvaD6XhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/Morsu8e0C2Dszoqli8qL93hL208.roa
Signing time:             Sat 09 Jul 2022 12:05:23 +0000
ROA not before:           Sat 09 Jul 2022 12:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.40.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e2:d9:a5:39:c8:34:63:a3:b7:3c:dd:dd:eb:83:7d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8155a3555358bb37357d6d9ed9ef683e978419
        Validity
            Not Before: Jul  9 12:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=328aecbbc7b40b60ecce8aa58bca8bf7784bdb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:92:4d:f7:18:89:1f:bd:3e:4f:11:02:64:
                    5f:c3:4c:6c:f2:1a:d5:34:a2:7a:6f:8b:31:9a:71:
                    b9:60:d0:dd:76:1c:9a:46:5d:21:f5:a8:19:27:33:
                    a5:23:18:c7:b0:7b:58:10:2e:f8:a6:7c:d2:f0:1a:
                    7c:05:9d:4e:87:e8:7e:1b:24:6e:f2:37:f1:a9:10:
                    a3:e0:79:36:1b:ac:c4:85:8c:cd:53:27:5e:94:31:
                    3e:d1:0c:68:c1:53:94:6f:79:c3:5c:63:b8:a3:77:
                    bd:d7:b3:65:e1:e9:6c:11:c2:e0:9c:cc:03:8c:53:
                    6b:80:e3:a4:e4:fd:20:d5:4d:91:f2:08:80:67:33:
                    88:88:f9:15:51:b3:97:c9:85:6d:fc:83:21:81:f6:
                    60:6d:04:e0:b2:90:76:dd:a0:31:4d:0e:13:06:9f:
                    ff:22:66:30:9a:11:bb:29:e9:e3:67:3c:69:dd:0f:
                    ec:3b:8f:3b:33:8a:d7:ca:2b:76:d8:b2:45:1e:a0:
                    6c:a5:fd:c7:60:d5:42:0e:82:b3:29:44:27:f9:27:
                    de:64:ca:8b:6d:04:05:ef:32:fb:9d:97:61:93:10:
                    0f:c9:22:f7:59:2a:3e:9c:82:8a:67:d8:63:02:6c:
                    f4:2b:1b:be:2a:93:f2:35:51:90:cc:b5:7c:d8:4e:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8A:EC:BB:C7:B4:0B:60:EC:CE:8A:A5:8B:CA:8B:F7:78:4B:DB:4F
            X509v3 Authority Key Identifier:
                keyid:EA:81:55:A3:55:53:58:BB:37:35:7D:6D:9E:D9:EF:68:3E:97:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oFVo1VTWLs3NX1tntnvaD6XhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/Morsu8e0C2Dszoqli8qL93hL208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.40.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:ad:58:bb:e5:05:2d:b6:7a:9e:48:bc:78:a4:b6:a1:b1:
         b0:a4:e8:62:85:5f:ae:7e:ea:f5:ba:d8:d0:d1:50:b4:d4:2d:
         3a:33:27:87:77:57:a6:5b:fc:2d:92:6a:24:1a:ae:ac:37:84:
         55:d1:26:78:c9:83:37:60:48:cd:61:20:20:88:be:6e:fb:5d:
         ad:6e:f3:33:bf:b1:e8:ce:1b:34:a1:4f:74:ed:b2:3d:94:c1:
         1f:2f:b8:42:97:73:f0:1c:55:48:fd:e2:b5:95:c7:96:4e:90:
         35:5c:7d:b8:fb:49:e7:9d:f4:af:1d:3e:23:b5:e4:77:5b:02:
         2a:51:3e:c2:1a:e5:62:c0:92:08:55:9c:cd:57:26:12:16:dd:
         b4:7f:03:51:ff:74:05:f3:b7:d5:8c:c4:f1:65:06:60:98:d2:
         79:b3:94:04:00:2e:6d:13:20:3c:07:a8:1e:fd:f2:4f:7d:e3:
         70:87:e2:a3:4c:a6:34:fd:f8:a2:7c:10:6b:b4:34:89:c3:e7:
         ea:b7:01:be:f8:c4:e9:28:d3:23:da:bf:75:5b:88:2b:46:78:
         80:54:6a:77:7b:d3:c8:6e:d6:27:a5:64:1c:74:b7:f6:2c:2b:
         47:58:0d:f3:62:a7:29:56:15:12:27:09:b8:31:22:24:d3:e7:
         fb:b7:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:22 2024 by rpki-client on console-ams.rpki-client.org