Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/dj4-jxaqa75u-rqzZr5KnV0Ywls.roa
File:                     dj4-jxaqa75u-rqzZr5KnV0Ywls.roa (raw, json)
Hash identifier:          MJ8M2jR94kx9fiRpgNa4bl+kezgizOEgwXFT63mTXV4=
Subject key identifier:   76:3E:3E:8F:16:AA:6B:BE:6E:FA:BA:B3:66:BE:4A:9D:5D:18:C2:5B
Certificate issuer:       /CN=231d9096ef96ec16cb0ae68aa39671051f4f285a
Certificate serial:       01856F0B82ED35F5A0CF2FCA91CFD108B88A
Authority key identifier: 23:1D:90:96:EF:96:EC:16:CB:0A:E6:8A:A3:96:71:05:1F:4F:28:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/dj4-jxaqa75u-rqzZr5KnV0Ywls.roa
Signing time:             Sun 01 Jan 2023 20:35:03 +0000
ROA not before:           Sun 01 Jan 2023 20:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48715
IP address blocks:        185.234.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:82:ed:35:f5:a0:cf:2f:ca:91:cf:d1:08:b8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231d9096ef96ec16cb0ae68aa39671051f4f285a
        Validity
            Not Before: Jan  1 20:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=763e3e8f16aa6bbe6efabab366be4a9d5d18c25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:5d:2c:c0:92:ad:ec:d1:ce:c1:ed:af:0c:
                    45:61:1f:50:81:e7:17:93:18:a6:b0:f3:c3:2f:aa:
                    92:33:14:c5:d0:fc:e5:eb:2d:0b:2c:5a:bf:82:7a:
                    c9:7c:e6:66:43:0e:f3:f4:9a:25:8b:ee:26:15:0c:
                    f0:1d:b8:ac:b3:f7:9e:9d:f6:8f:5c:18:86:82:f5:
                    88:75:1e:4c:70:66:3c:6f:dc:87:57:de:bd:d1:a8:
                    fc:6a:62:56:54:82:87:22:6e:20:79:2b:ca:8a:8b:
                    3e:d2:e3:23:d0:6b:c5:40:31:99:c3:2e:15:27:43:
                    e9:0c:64:59:56:d0:22:f6:d2:28:ae:51:31:f0:07:
                    fc:ea:bc:4e:38:98:0a:60:c2:30:c4:e3:ab:e5:db:
                    db:49:cb:22:2b:75:5d:e0:ba:a2:8b:8c:9b:a7:80:
                    d1:57:2b:f6:a3:89:13:c7:6d:71:c3:c5:0a:40:d5:
                    15:ae:f0:14:d8:39:94:26:61:2a:93:c0:69:c0:46:
                    84:e3:82:8d:0d:17:6e:d2:96:73:43:e7:b7:4b:29:
                    c5:c1:20:39:7d:a9:3f:c7:82:bd:92:92:ce:4f:99:
                    d4:44:2d:5a:43:b7:98:4c:61:81:92:3a:e6:8f:f8:
                    46:6e:db:d6:45:12:06:1c:d3:b3:6c:b2:42:4d:e0:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:3E:8F:16:AA:6B:BE:6E:FA:BA:B3:66:BE:4A:9D:5D:18:C2:5B
            X509v3 Authority Key Identifier:
                keyid:23:1D:90:96:EF:96:EC:16:CB:0A:E6:8A:A3:96:71:05:1F:4F:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/dj4-jxaqa75u-rqzZr5KnV0Ywls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:5e:e3:e6:dd:dd:43:43:82:e5:b4:5b:fd:e8:63:af:45:
         16:fa:bc:02:f2:0b:34:c8:b0:53:d1:1b:a1:46:16:57:b6:04:
         45:9a:21:e4:8c:48:73:14:1a:04:12:1e:9f:86:60:94:44:6c:
         e8:41:99:dc:8d:d7:70:89:f8:36:27:f0:c6:51:6b:63:18:0c:
         1d:e4:51:d4:1a:f3:e7:72:63:93:d8:17:14:f9:38:d5:4a:fe:
         40:14:46:7a:df:22:62:cb:be:5f:f0:4c:bf:cc:84:2a:75:ce:
         14:2b:da:a2:9a:11:96:a9:13:3a:6a:12:d5:aa:d3:6e:7f:4a:
         47:a4:12:5e:f6:87:85:ec:db:1e:3c:bc:00:5c:06:cf:0d:f7:
         0c:52:ca:1a:15:41:b7:90:0a:2a:1a:b1:59:36:1d:ed:06:e2:
         5e:c3:cb:3b:44:1b:52:39:f0:4f:7d:4f:92:3c:c6:a5:6c:49:
         1b:9e:34:a8:10:a0:f7:f1:b7:71:f0:d0:d1:6b:7b:c5:fc:49:
         50:b1:b4:48:0d:cf:d6:7e:da:d8:1a:0e:37:98:23:7b:f4:da:
         41:63:1d:95:b6:94:b3:88:d0:22:7e:3d:a4:e2:69:8b:06:00:
         64:aa:35:e4:b1:cc:c0:c3:52:6b:73:c5:5e:ed:c1:f3:78:98:
         78:4e:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:53 2024 by rpki-client on console-fra.rpki-client.org