Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa
File:                     1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa (raw, json)
Hash identifier:          PStPHb4lTLJU09zEEQt3VITVX4/0ZCKXPP8T/MgjW6A=
Subject key identifier:   FA:61:C2:BD:D8:79:3C:8B:1B:41:4E:8F:F1:76:90:34:DC:87:1C:89
Certificate issuer:       /CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Certificate serial:       084C3DEA
Authority key identifier: F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa
Signing time:             Sat 01 Jan 2022 11:58:28 +0000
ROA not before:           Sat 01 Jan 2022 11:58:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        185.250.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139214314 (0x84c3dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
        Validity
            Not Before: Jan  1 11:58:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa61c2bdd8793c8b1b414e8ff1769034dc871c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:a1:43:32:cf:70:4a:64:ed:9d:25:65:c6:
                    79:e6:07:b9:95:69:77:5e:61:a7:8b:31:bd:e5:ae:
                    8f:ad:25:a9:1d:1f:79:42:16:35:a5:3f:f7:52:b1:
                    9e:f2:a9:ef:6c:fa:f2:0a:c6:cf:e1:47:2f:c8:50:
                    5e:d8:3b:e8:cf:e8:0d:40:50:9d:0b:ee:41:a5:fb:
                    b0:8c:72:c6:bf:4b:ef:be:fd:11:b1:9e:04:ab:52:
                    16:43:06:78:11:0b:b0:ed:17:3a:89:ac:3f:4a:94:
                    59:bd:30:c2:21:de:0a:08:07:a2:b6:68:ef:b1:4b:
                    8b:fb:1d:b1:9a:b0:0a:66:8a:ac:28:1e:6b:6b:90:
                    e2:de:e1:51:e3:d0:37:19:36:cf:0c:7d:d8:0e:0f:
                    85:b9:a9:aa:a9:15:fa:4a:22:cf:0f:bb:b9:8f:7d:
                    2b:40:13:a7:62:85:00:7a:3a:c7:e3:55:c9:4c:68:
                    fc:97:84:45:47:fd:e6:67:1e:64:ba:a3:1d:3d:69:
                    94:3d:5a:87:76:59:ed:33:65:ed:8a:b2:88:33:ed:
                    f4:68:07:72:35:bb:70:d6:57:42:3e:77:a9:88:d9:
                    74:b3:f0:6e:f7:de:a8:1c:e9:f0:c9:e9:4d:c9:68:
                    a3:de:d6:e5:41:b6:75:f0:46:5b:e7:ab:33:99:bf:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:61:C2:BD:D8:79:3C:8B:1B:41:4E:8F:F1:76:90:34:DC:87:1C:89
            X509v3 Authority Key Identifier:
                keyid:F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/8-MXmoohdiyp3D_6TC2EuDnw-zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:55:9f:73:ea:85:1e:a2:2d:f2:4e:e3:a6:d4:e9:1e:79:e4:
         6f:f8:4c:fd:88:a9:9f:48:ba:cb:c6:0a:da:b8:d5:70:16:90:
         39:1b:20:6a:f7:b4:f0:4e:5c:bf:47:88:5a:0a:04:8d:28:dc:
         51:ad:10:bf:66:97:0f:65:85:f7:be:06:be:4e:31:ec:81:fd:
         1f:1e:88:a7:df:1b:75:92:72:c8:27:c7:f7:61:25:09:8c:55:
         39:55:27:da:77:83:bb:78:37:a8:3c:88:19:70:d4:67:a2:c7:
         fa:48:60:02:d5:f0:e4:cf:30:4f:25:1e:b8:08:c6:7b:c8:56:
         9a:7d:1f:d3:ef:d5:7a:b8:0c:51:55:8f:4e:86:7d:7e:49:bf:
         cf:7f:f1:22:51:d8:ca:31:37:73:eb:2b:11:3c:e1:1a:d0:e4:
         50:ce:5f:8f:ff:fb:a9:93:2c:fd:ca:4a:60:19:a1:dd:23:0d:
         0d:6b:51:ce:61:ca:62:21:f2:05:2a:6f:e3:32:8f:b9:56:58:
         19:c2:25:82:9c:3a:0b:1c:47:e7:bb:2d:6d:6c:40:2a:32:1b:
         ed:a7:8f:ea:c7:fc:95:29:01:c5:8e:5c:d3:b0:d3:94:5f:98:
         18:1c:38:d9:19:14:23:74:77:ee:21:0f:06:70:08:cc:be:c5:
         e9:56:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org