Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/A-Etj5tjssNYCxIExiYDV1yShZo.roa
File:                     A-Etj5tjssNYCxIExiYDV1yShZo.roa (raw, json)
Hash identifier:          8SBgQa9jHqF7tHZpkCaQAGZuZxhPjEgVdVPPbU7nweI=
Subject key identifier:   03:E1:2D:8F:9B:63:B2:C3:58:0B:12:04:C6:26:03:57:5C:92:85:9A
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       0182ED74FE2CEBFB7E75528E25D21401F578
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/A-Etj5tjssNYCxIExiYDV1yShZo.roa
Signing time:             Tue 30 Aug 2022 06:34:03 +0000
ROA not before:           Tue 30 Aug 2022 06:34:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.124.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ed:74:fe:2c:eb:fb:7e:75:52:8e:25:d2:14:01:f5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: Aug 30 06:34:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03e12d8f9b63b2c3580b1204c62603575c92859a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:19:3b:6b:d3:da:c9:82:46:d6:c6:5f:bb:1b:
                    38:9e:0b:77:ca:4d:4e:ba:ab:29:ca:5c:6b:6c:d0:
                    ea:69:7d:dd:7f:47:f7:00:7f:cb:cb:52:4b:95:49:
                    5f:93:12:43:21:9d:a2:ab:cc:e3:3b:cc:1f:af:01:
                    e5:e1:42:53:79:61:70:8b:5b:c6:d5:ca:bc:67:48:
                    11:2f:9a:f0:d6:58:9a:13:34:b1:c1:93:ce:e9:b0:
                    44:62:ea:f5:cf:9d:6e:b5:3f:77:37:7f:bf:50:73:
                    05:b5:91:c8:58:12:39:47:97:e4:4c:02:fb:a4:61:
                    f5:65:dd:8a:2f:b3:59:8a:84:0c:81:a0:92:66:0d:
                    59:c8:ef:47:ae:44:f4:1b:ec:41:aa:a8:8c:e0:af:
                    e8:af:57:b9:8c:cc:d2:16:d2:ba:2f:f7:94:8b:fa:
                    9d:a1:84:4e:95:4e:7f:30:8f:47:1f:f4:b5:75:41:
                    10:45:0a:b9:c6:cb:02:73:a5:32:24:12:0c:30:51:
                    f4:2e:74:a2:50:b6:58:24:08:ed:9b:0e:93:cf:13:
                    95:05:02:91:86:c7:c0:dc:4b:72:2d:8c:27:c6:82:
                    e3:cd:4e:69:85:53:a7:42:6e:87:a7:7d:5c:69:42:
                    e4:71:dc:16:1b:e3:ed:cb:ac:57:1c:2d:5e:e6:af:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E1:2D:8F:9B:63:B2:C3:58:0B:12:04:C6:26:03:57:5C:92:85:9A
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/A-Etj5tjssNYCxIExiYDV1yShZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:9b:88:fe:1b:90:bd:3e:8d:cf:e8:7a:6d:f5:62:03:58:
         6a:0c:3b:1c:80:fd:25:a1:73:80:f9:aa:a1:07:26:ed:3f:00:
         a6:35:1f:f0:2b:b0:87:d5:c4:5a:ae:7e:09:72:99:7d:b7:47:
         c6:f8:8b:0b:a2:8e:e5:b4:a1:4c:3b:ce:00:bf:db:c3:32:24:
         23:c7:81:d1:0c:1b:b4:97:b5:6d:af:1c:08:41:19:3a:c0:9e:
         2f:6f:95:78:ef:3b:47:8e:98:2c:b1:40:26:92:74:93:ca:72:
         6b:55:99:0b:0d:66:7a:21:87:ae:43:57:b3:02:4f:98:8e:90:
         11:0e:cc:74:20:e3:9a:ca:c5:2b:3a:24:c0:b0:86:7d:e8:38:
         63:1a:3a:35:a2:ce:eb:a3:7b:e2:4e:e8:e3:bd:df:fc:d7:f0:
         c1:74:65:c6:77:88:ff:34:13:52:ee:cf:4c:0d:1c:a8:51:06:
         54:e0:bb:eb:6f:32:80:7a:ba:e9:c4:21:b9:f9:35:b7:b2:23:
         a0:e2:05:7e:41:bc:18:29:ca:84:e8:f0:3b:a0:3c:a7:cb:20:
         ad:12:f0:66:ad:8e:8c:a7:b3:a4:67:95:0c:d4:1d:77:55:88:
         ba:90:19:a5:44:08:68:9d:2c:ad:59:6e:cd:d2:e5:e5:0b:5f:
         44:ec:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:02 2024 by rpki-client on console-fra.rpki-client.org