Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/__zGw9pj8DVxHaWh1vJK7yhCAbY.roa
File:                     __zGw9pj8DVxHaWh1vJK7yhCAbY.roa (raw, json)
Hash identifier:          o+RSnG5GQm9ZA6iv0VJYGAG9uyBf1zMTU8W8tBp+sus=
Subject key identifier:   FF:FC:C6:C3:DA:63:F0:35:71:1D:A5:A1:D6:F2:4A:EF:28:42:01:B6
Certificate issuer:       /CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
Certificate serial:       16C0E874
Authority key identifier: C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/__zGw9pj8DVxHaWh1vJK7yhCAbY.roa
Signing time:             Sat 01 Jan 2022 12:04:13 +0000
ROA not before:           Sat 01 Jan 2022 12:04:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51335
IP address blocks:        185.4.44.0/22 maxlen: 24
                          185.4.46.0/24 maxlen: 24
                          194.213.124.0/23 maxlen: 23
                          2a02:68c0::/32 maxlen: 32
                          2001:67c:10f0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381741172 (0x16c0e874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
        Validity
            Not Before: Jan  1 12:04:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fffcc6c3da63f035711da5a1d6f24aef284201b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:0c:92:f6:20:e2:22:71:c5:1b:60:a5:57:
                    b6:25:ac:e7:99:d2:98:d8:d1:be:1d:dd:43:a2:55:
                    08:b7:6f:f5:69:32:99:9d:46:7b:c0:cb:35:1f:41:
                    56:fa:de:a2:c4:43:21:ce:9f:35:ed:0c:4a:49:d0:
                    4a:25:8d:d9:7f:ac:96:a0:d8:0c:93:71:3c:ed:11:
                    7a:39:d0:3e:67:e9:97:9e:29:43:18:df:05:60:56:
                    b7:e0:aa:c7:b0:05:3b:d9:b7:ab:fe:14:5b:54:c4:
                    5a:d4:4c:5d:6b:12:1e:04:b9:fe:b0:27:72:32:c9:
                    9b:da:f6:62:3e:07:a0:e5:eb:9a:7a:8a:17:bc:06:
                    9b:3f:96:54:a2:49:1d:26:3c:a0:f9:81:c1:fa:db:
                    e3:0f:a3:a8:78:cf:c7:40:35:b9:99:57:cc:bd:1b:
                    63:34:e3:22:87:37:08:7e:a9:c0:9d:ae:9f:61:f3:
                    26:1b:8a:2a:ad:aa:0d:ab:c4:eb:95:87:c2:21:bf:
                    aa:96:8c:51:ad:98:70:c7:7d:02:8e:58:f3:2c:7e:
                    fa:5c:43:94:00:af:27:35:60:c9:b7:20:20:a9:fb:
                    de:a5:a0:84:bc:68:8e:f6:69:14:8c:a4:fa:7c:c1:
                    f4:d0:38:78:1d:a8:9a:20:ed:ba:2a:c5:30:c2:06:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:C6:C3:DA:63:F0:35:71:1D:A5:A1:D6:F2:4A:EF:28:42:01:B6
            X509v3 Authority Key Identifier:
                keyid:C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/__zGw9pj8DVxHaWh1vJK7yhCAbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/wDrVyr_qxKRNM0bR9Kzm70galaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.44.0/22
                  194.213.124.0/23
                IPv6:
                  2001:67c:10f0::/48
                  2a02:68c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:a1:70:03:8b:98:e1:2b:0c:17:51:cf:b1:d4:9d:60:c2:
         ca:78:c6:69:61:c4:82:5b:dd:05:df:28:02:a1:a1:1a:3e:34:
         f9:73:7a:28:01:da:b3:be:41:21:23:12:31:df:13:a1:57:73:
         e1:be:f5:98:fa:26:06:79:3d:61:36:24:dd:bb:e2:46:39:92:
         b8:5c:69:2a:cb:ac:b1:d3:4a:2d:8e:58:c3:a7:16:ed:17:00:
         f3:09:bf:9a:47:78:c5:61:06:7b:49:cf:cc:0f:93:cb:de:01:
         5a:6f:22:38:b7:c4:5d:0b:cb:73:8d:78:00:97:18:6b:75:b2:
         5b:a8:8a:d9:56:ed:a9:e6:a0:14:e2:cb:d5:2a:25:24:8f:39:
         8c:b7:82:51:92:c9:22:12:8c:e4:ee:13:95:a6:51:01:ab:bc:
         cc:2d:b5:05:f0:d7:76:42:fe:51:37:e5:e8:96:f4:0a:fd:84:
         df:10:32:78:9f:e0:be:97:1a:13:3c:d2:35:db:a8:58:93:55:
         b2:f5:19:d4:f1:6d:62:90:27:a9:fb:13:91:8b:d3:c5:e4:34:
         3b:cd:c5:73:9b:a8:74:f6:7e:cd:ab:7e:7a:28:98:4b:f6:92:
         24:04:56:b9:1b:e3:74:5e:84:40:b0:27:e0:85:18:f4:d8:43:
         62:5c:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-fra.rpki-client.org