Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/4nF2YRcU7a1tGR2bNrpE28CGFoM.roa
File:                     4nF2YRcU7a1tGR2bNrpE28CGFoM.roa (raw, json)
Hash identifier:          SYJ8PpjcwjfAh61AomgVhfyGDAAhAWyjEsMW9fw/Zxs=
Subject key identifier:   E2:71:76:61:17:14:ED:AD:6D:19:1D:9B:36:BA:44:DB:C0:86:16:83
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       01829BF948F5E34C7EE17BCD3148E8192C0D
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/4nF2YRcU7a1tGR2bNrpE28CGFoM.roa
Signing time:             Sun 14 Aug 2022 10:49:41 +0000
ROA not before:           Sun 14 Aug 2022 10:49:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207713
IP address blocks:        185.124.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:9b:f9:48:f5:e3:4c:7e:e1:7b:cd:31:48:e8:19:2c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: Aug 14 10:49:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e27176611714edad6d191d9b36ba44dbc0861683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:49:b3:6f:f2:c1:53:6c:e5:52:56:f3:22:
                    ca:fb:4c:b2:98:88:29:c8:ef:a7:e1:3d:7a:09:93:
                    1c:b5:8d:29:a8:a4:50:2f:da:83:f3:72:3b:3e:e9:
                    e4:c4:49:f5:12:c1:37:9c:08:2b:0d:fa:e0:d5:e3:
                    51:a5:ec:9b:61:e7:62:94:19:24:95:41:f3:e5:63:
                    55:b7:f6:89:db:44:a3:36:8e:a6:90:a6:6b:65:88:
                    9f:84:34:71:f6:1e:fd:15:ca:d2:10:53:b6:b3:60:
                    a3:a7:66:ff:ba:c9:2c:84:e3:6a:a1:4a:61:61:62:
                    6f:e5:6f:49:9f:65:cd:e8:24:e1:a6:cb:b8:82:5f:
                    66:e4:da:f5:bc:cb:a8:83:09:68:e2:d4:c9:23:4a:
                    c5:98:a3:6c:35:b7:25:94:f9:ab:47:cd:38:52:ce:
                    d3:13:d6:48:75:85:d5:fc:13:49:af:59:6b:82:31:
                    ba:57:8b:74:a1:59:5b:f4:d3:d8:30:91:d2:f2:93:
                    55:5d:f2:47:fe:bf:c3:99:1b:ef:89:15:8e:a8:74:
                    0e:7f:59:cc:17:1f:01:43:fe:86:75:0c:39:b9:4f:
                    f1:98:dd:3e:79:9a:59:87:af:c4:55:ba:73:39:e5:
                    75:fd:54:41:9c:8f:11:0a:8f:6e:fe:4d:dc:e2:08:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:76:61:17:14:ED:AD:6D:19:1D:9B:36:BA:44:DB:C0:86:16:83
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/4nF2YRcU7a1tGR2bNrpE28CGFoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:b1:b7:8b:16:94:49:af:95:6b:0a:2a:70:2b:75:83:a6:
         ee:1e:58:e0:21:1e:c9:25:91:96:45:a8:72:be:ed:4c:57:de:
         03:7b:f9:de:d5:46:59:ee:64:8a:62:bb:5f:a8:84:d5:15:ba:
         f1:d2:09:44:fe:d5:7c:c4:1c:c5:3c:e2:7f:76:0d:ab:3d:b5:
         df:64:6e:47:bb:43:fe:e4:1a:cb:c5:c3:7c:f7:1d:e3:80:b3:
         d6:29:47:79:e8:35:10:74:d0:35:06:b6:d3:47:c0:2f:38:c1:
         58:2b:0c:52:f7:0f:86:63:69:b7:cf:36:19:99:26:c2:16:19:
         5a:aa:7e:91:e7:98:b2:11:df:ce:36:d8:f4:fa:d4:69:6a:56:
         a5:35:d6:7f:0b:8f:11:4c:df:e1:82:a2:e8:d1:21:d0:5b:6d:
         3a:b1:bb:f0:e8:54:cf:54:d5:e8:92:bc:6c:50:f8:1c:04:5d:
         a0:53:69:0a:6d:5c:a0:90:39:c4:c3:dc:5a:df:7f:67:03:8a:
         f6:99:b4:c8:55:2c:61:4f:58:d4:0b:5d:e0:6e:96:77:2d:d2:
         fe:cc:bf:f6:c5:65:b9:d3:71:6d:d5:f4:94:a5:f5:5b:eb:2d:
         2b:87:1a:4f:51:a8:92:92:22:38:18:d6:d3:7e:90:32:32:3d:
         4b:38:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:02 2024 by rpki-client on console-fra.rpki-client.org