Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/i0onS2YYCo1zPV4el58FhnrFtX0.roa
File:                     i0onS2YYCo1zPV4el58FhnrFtX0.roa (raw, json)
Hash identifier:          49hZxyKwfkEgoJGd7ZwRY+T8ycVriPCEZrUcG0KlQrA=
Subject key identifier:   8B:4A:27:4B:66:18:0A:8D:73:3D:5E:1E:97:9F:05:86:7A:C5:B5:7D
Certificate issuer:       /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial:       0710E5D7
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/i0onS2YYCo1zPV4el58FhnrFtX0.roa
Signing time:             Sat 01 Jan 2022 11:59:35 +0000
ROA not before:           Sat 01 Jan 2022 11:59:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203061
IP address blocks:        185.239.244.0/24 maxlen: 24
                          185.239.246.0/23 maxlen: 24
                          185.254.17.0/24 maxlen: 24
                          185.254.16.0/24 maxlen: 24
                          185.246.236.0/22 maxlen: 24
                          185.244.104.0/24 maxlen: 24
                          185.244.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118547927 (0x710e5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
        Validity
            Not Before: Jan  1 11:59:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b4a274b66180a8d733d5e1e979f05867ac5b57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:75:5c:85:01:c4:42:53:84:37:88:ff:0f:
                    d0:b2:65:9a:af:b6:ef:b3:6f:9f:95:7a:a4:86:9b:
                    f3:df:96:18:ed:80:9f:44:99:67:07:d2:ea:92:e1:
                    e4:25:51:6d:b9:1e:e3:2f:e7:ad:5e:35:da:1f:7e:
                    55:5f:e0:29:c7:62:d0:6e:a7:b3:24:45:1f:e1:0d:
                    4c:1f:1e:bc:19:66:8e:b3:f4:e8:1e:1f:da:1a:61:
                    df:f0:af:12:7b:b9:f2:f5:cc:87:e5:70:bd:9f:e7:
                    6a:4c:ac:9e:37:f2:1a:08:29:ac:73:96:fa:27:93:
                    39:4c:9c:b3:43:b7:e3:91:3f:3a:07:1c:53:c1:5e:
                    f3:43:4e:07:5e:ff:85:9e:2f:7e:6c:a5:8a:40:bb:
                    47:c4:b5:fc:d4:0f:07:da:1d:ac:82:0e:46:f5:c0:
                    7a:b3:ac:e5:89:44:e0:d8:93:79:c3:56:cb:26:10:
                    29:a1:fa:46:ae:c0:43:45:b2:00:e7:85:3e:f2:53:
                    06:b2:db:bc:6e:a5:af:f4:7f:80:29:c5:ea:d2:c3:
                    27:d7:d8:16:c4:39:5c:26:4a:d2:e7:85:e8:db:19:
                    ba:55:17:71:b5:5e:ac:c7:31:03:5d:16:d1:fb:1b:
                    1c:3e:77:3f:f9:4d:dd:40:bd:34:3b:a8:96:00:7c:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:27:4B:66:18:0A:8D:73:3D:5E:1E:97:9F:05:86:7A:C5:B5:7D
            X509v3 Authority Key Identifier:
                keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/i0onS2YYCo1zPV4el58FhnrFtX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.244.0/24
                  185.239.246.0/23
                  185.244.104.0/23
                  185.246.236.0/22
                  185.254.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:ea:04:d9:7d:2e:a3:9f:1b:5d:08:b9:29:ec:59:58:6f:
         43:37:80:c4:d9:6d:ea:92:c4:c9:f2:90:ce:e8:39:16:30:bf:
         ac:f1:a8:6d:97:cf:62:7c:88:32:81:d4:a6:79:f9:ff:dd:02:
         9d:28:db:3c:4e:8b:97:95:e2:b9:08:12:b7:6a:a1:c4:f2:61:
         13:e6:ab:db:95:26:03:43:e3:17:af:71:4d:92:04:9e:e4:9c:
         ff:45:c9:59:d9:7c:36:2c:a2:06:b7:27:ad:e3:f9:f1:44:a4:
         00:bb:05:4c:ee:1d:a7:fb:70:51:66:f9:e9:84:2a:85:a5:20:
         e9:82:11:b9:2b:6c:21:12:4a:b7:c0:d6:e0:08:27:a7:f3:aa:
         15:fc:b2:e1:cd:a1:49:a5:19:a4:79:32:c6:57:ca:b3:46:1c:
         35:9e:46:87:76:20:0e:1b:c0:a2:ed:66:62:42:79:9f:c6:cf:
         95:0a:bb:20:c2:d8:1c:4b:7e:42:97:b5:7b:ff:43:5c:28:0f:
         d6:94:a4:20:8b:4f:be:ff:51:f3:7f:02:c5:f1:76:26:f8:d1:
         66:36:53:c5:87:f1:fc:c9:8b:a6:91:fd:3b:75:c8:73:0a:ea:
         2f:e2:a6:09:fd:91:3e:78:61:6b:e2:65:bf:70:0e:65:6c:2b:
         41:bf:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:12 2024 by rpki-client on console-ams.rpki-client.org