Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/dXrisDh4bhsqb-OWCVRSw6HyIzo.roa
File:                     dXrisDh4bhsqb-OWCVRSw6HyIzo.roa (raw, json)
Hash identifier:          3OaQ5vvZYREw6PTgPZNHGJtSguIINWgjl8tZKK8RNvg=
Subject key identifier:   75:7A:E2:B0:38:78:6E:1B:2A:6F:E3:96:09:54:52:C3:A1:F2:23:3A
Certificate issuer:       /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial:       85F27D
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/dXrisDh4bhsqb-OWCVRSw6HyIzo.roa
Signing time:             Mon 14 Mar 2022 16:33:09 +0000
ROA not before:           Mon 14 Mar 2022 16:33:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        185.176.93.0/24 maxlen: 24
                          185.216.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8778365 (0x85f27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
        Validity
            Not Before: Mar 14 16:33:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=757ae2b038786e1b2a6fe396095452c3a1f2233a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:b6:b0:b5:2c:c2:4a:d6:a8:b5:8b:c3:8d:
                    8f:bb:0f:4b:e7:2e:2f:7e:3a:5c:bd:87:e2:3b:de:
                    d1:9f:06:c9:10:6a:69:7d:aa:c3:8f:0c:ce:94:14:
                    75:46:fd:43:6f:63:04:f9:24:21:e1:0c:98:68:32:
                    74:bd:23:48:c9:00:eb:ba:97:7e:ba:32:24:6b:99:
                    31:ad:c0:bf:77:ec:93:f0:8e:e2:24:16:d3:65:c6:
                    6f:de:61:17:60:f4:44:70:a4:9c:47:5f:23:7c:ac:
                    a6:66:84:7d:53:66:99:a4:47:e3:83:6a:54:81:4b:
                    68:40:46:d8:ed:41:ef:e7:b5:48:a5:ec:b5:9f:0f:
                    cd:b1:57:75:46:16:83:b7:97:49:b0:87:4e:31:f8:
                    d3:e7:24:c9:9a:f0:1d:dd:22:1d:5d:15:8f:93:80:
                    ee:c0:82:75:a2:05:ae:46:dc:c9:be:11:81:b3:e0:
                    8d:5d:30:20:11:8d:99:f1:81:f6:c0:ce:0c:ba:81:
                    17:40:47:e7:ff:9b:c9:84:d7:fe:7b:4a:de:25:b0:
                    be:4b:c0:09:1a:a4:3a:22:0e:fe:52:82:fe:44:26:
                    b6:cc:57:71:42:bb:06:7e:cc:9b:0b:74:34:06:39:
                    c5:d7:88:4f:60:de:5f:09:85:f1:90:08:61:07:0c:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7A:E2:B0:38:78:6E:1B:2A:6F:E3:96:09:54:52:C3:A1:F2:23:3A
            X509v3 Authority Key Identifier:
                keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/dXrisDh4bhsqb-OWCVRSw6HyIzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.93.0/24
                  185.216.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:08:39:a9:ff:1a:23:50:c9:5a:fc:39:58:fc:30:07:ef:
         ee:ae:a4:11:79:c1:dd:0c:72:f9:37:f7:8e:fc:41:31:72:fd:
         85:96:9d:79:57:68:0c:5b:90:1a:c1:3a:d2:16:5f:9d:9b:f8:
         93:1f:01:cd:98:dd:d8:be:77:2f:ed:2d:d6:7e:13:84:dc:f3:
         b9:df:a1:c2:8c:aa:7c:bb:21:3f:4d:e6:d1:56:15:b3:b7:fb:
         02:d7:f9:f6:bb:f3:c4:dc:08:a9:82:f4:b1:d4:e2:2f:50:bc:
         bc:a0:8e:4c:cf:7e:2b:5a:cd:04:3b:56:4f:f3:ea:08:9f:79:
         9a:77:a7:28:6d:7e:97:0e:3c:be:58:ea:fe:82:87:59:65:0c:
         10:bb:fd:87:23:c6:5d:50:53:30:53:8c:f8:fc:e1:ff:5b:a3:
         3a:6d:f4:9a:1b:ff:2e:a3:30:ed:c2:0b:0d:59:10:7f:8a:5d:
         a9:df:4d:c0:3a:6e:d1:6f:f1:fe:b2:0f:cd:f6:cd:e2:37:c9:
         e9:18:93:d5:fb:c5:6d:6d:89:33:c6:a9:1b:78:4b:ef:56:4b:
         6b:63:c6:40:3e:39:2b:80:71:14:0e:7e:56:ef:14:9f:ac:41:
         d9:c5:55:77:19:c0:e6:64:a4:14:77:ef:4b:f5:19:74:77:a4:
         65:a3:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org