Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/z6bXe1znwNEWnaJv6A0kT_CnnU0.roa
File:                     z6bXe1znwNEWnaJv6A0kT_CnnU0.roa (raw, json)
Hash identifier:          shzMZgd8bsAbKNWvXAz4Wq+BCES6AvINqgBCbGkG7Kc=
Subject key identifier:   CF:A6:D7:7B:5C:E7:C0:D1:16:9D:A2:6F:E8:0D:24:4F:F0:A7:9D:4D
Certificate issuer:       /CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
Certificate serial:       018BF2E786C29B4323F665117D50DF86C8EA
Authority key identifier: C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/z6bXe1znwNEWnaJv6A0kT_CnnU0.roa
Signing time:             Tue 21 Nov 2023 17:22:21 +0000
ROA not before:           Tue 21 Nov 2023 17:22:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34177
IP address blocks:        185.4.44.0/22 maxlen: 22
                          194.213.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f2:e7:86:c2:9b:43:23:f6:65:11:7d:50:df:86:c8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
        Validity
            Not Before: Nov 21 17:22:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cfa6d77b5ce7c0d1169da26fe80d244ff0a79d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:1e:77:79:a8:08:bc:e0:98:2b:a3:99:d2:
                    db:43:0f:a2:3b:96:0d:6c:45:93:52:43:11:32:bd:
                    18:6a:34:27:87:b5:cb:18:0c:c8:c0:30:1d:25:52:
                    7d:75:40:ec:a1:92:c1:e4:54:64:fc:11:bb:86:d3:
                    f8:4f:0d:45:a2:e5:61:b2:02:67:2e:2a:98:6c:f3:
                    72:6e:4e:a2:a5:64:f7:9b:6a:15:4d:47:46:ec:2d:
                    64:a2:47:fd:2d:f9:6d:41:65:71:4d:ba:44:bf:79:
                    9b:a7:93:4b:ca:93:27:66:a6:2b:8f:fb:8f:ba:de:
                    99:ef:17:15:94:42:78:a7:da:a0:0c:5b:e0:23:01:
                    f2:7f:e3:5a:2f:e2:61:84:ab:df:76:62:5b:4a:6f:
                    b0:13:12:fd:f4:fe:d2:56:f0:40:b4:e6:bb:91:e0:
                    1a:9a:80:40:ae:57:90:83:65:f5:20:2b:03:e8:f7:
                    d0:02:db:e4:e4:5d:d6:79:f2:f6:56:c6:13:64:6c:
                    6b:f6:31:be:d0:e9:d9:b8:e8:9a:ce:ae:93:fd:a6:
                    d8:61:d4:65:10:f5:2d:b4:21:24:fc:c2:fb:5f:62:
                    ab:db:75:3d:ff:07:98:b3:41:e1:57:3c:75:83:67:
                    5d:d4:13:52:34:19:96:70:52:61:99:d8:b1:7f:45:
                    ac:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:D7:7B:5C:E7:C0:D1:16:9D:A2:6F:E8:0D:24:4F:F0:A7:9D:4D
            X509v3 Authority Key Identifier:
                keyid:C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/z6bXe1znwNEWnaJv6A0kT_CnnU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/wDrVyr_qxKRNM0bR9Kzm70galaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.44.0/22
                  194.213.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:79:5a:a0:59:d7:cb:5c:a9:56:c7:eb:1f:cb:8d:7d:ba:
         7f:6d:21:0c:ad:c5:89:86:ad:c1:19:e1:e0:c1:e5:9b:04:f7:
         fa:8d:a3:ca:0b:7c:f3:09:12:0f:13:18:e6:88:13:55:ac:31:
         48:a0:06:fe:42:a2:30:c6:21:05:9f:a2:fb:04:cf:ed:d5:d3:
         48:59:ba:e4:3a:f6:58:24:7b:1e:c6:12:3e:56:ea:d4:f1:07:
         5a:9f:a7:20:65:d8:b8:7d:2b:de:da:68:a7:a2:40:44:65:db:
         6a:10:16:c2:ea:e7:31:d0:e7:62:b0:8c:f9:c3:cf:26:fe:d4:
         f3:1c:d0:da:50:40:e9:8d:4a:d0:c9:d5:fe:a4:a3:cd:32:4b:
         d6:bb:9c:f3:09:8e:88:80:aa:38:30:0e:de:4b:b0:dc:69:77:
         30:12:ca:57:34:44:d4:f8:2c:9c:59:af:88:2e:23:96:50:1b:
         7a:c5:3b:49:5f:e5:be:1b:9e:a6:07:28:89:9d:bc:2a:b4:aa:
         40:ba:43:d6:4f:bd:f9:08:2f:f3:87:b1:72:a1:8e:af:7d:78:
         c2:ce:df:0d:49:92:7d:95:c6:f8:e2:c6:f3:11:e5:78:37:a3:
         f2:8c:40:65:58:75:a6:72:aa:04:e8:38:8d:d2:66:a5:05:06:
         76:75:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-fra.rpki-client.org