Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/ET7uN4hjlymTkXuFOi4TjAEN0MU.roa
File:                     ET7uN4hjlymTkXuFOi4TjAEN0MU.roa (raw, json)
Hash identifier:          Ei+7PKrVEczdynPZAQ9Fq0kewkPZrqeZqb3S/nXB8ts=
Subject key identifier:   11:3E:EE:37:88:63:97:29:93:91:7B:85:3A:2E:13:8C:01:0D:D0:C5
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       0186EC462B8AEDBAAE8872D75D08C4200F79
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/ET7uN4hjlymTkXuFOi4TjAEN0MU.roa
Signing time:             Thu 16 Mar 2023 21:14:27 +0000
ROA not before:           Thu 16 Mar 2023 21:14:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9123
IP address blocks:        185.124.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ec:46:2b:8a:ed:ba:ae:88:72:d7:5d:08:c4:20:0f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: Mar 16 21:14:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=113eee378863972993917b853a2e138c010dd0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:c2:b4:90:9e:58:cf:23:18:6e:53:56:fe:
                    fd:5a:f7:a6:70:d2:24:07:91:b4:ee:2f:a1:13:21:
                    61:85:08:21:09:34:32:ef:92:de:7f:38:e6:27:f3:
                    c0:94:7c:8f:dc:f6:79:20:de:ba:60:42:9a:85:ef:
                    7a:8e:71:1e:02:e5:69:03:8e:7e:bb:9d:4d:00:90:
                    56:fa:9b:b8:14:4e:97:00:e9:02:1d:23:ff:90:26:
                    97:fc:1c:e9:dd:2e:9c:85:60:a2:1e:9f:56:22:cd:
                    c8:3a:61:23:be:c3:40:4b:45:ed:34:79:5f:90:cb:
                    77:14:27:83:2d:7c:b2:f8:36:3c:5b:0a:31:72:b3:
                    ae:ff:7c:10:10:27:1e:1b:df:90:c2:19:29:d0:83:
                    61:85:60:7c:ea:82:8c:d8:b3:87:db:f6:ab:6a:ab:
                    e9:f0:3e:ff:90:f9:3c:b5:04:bc:a6:6d:6a:2e:f5:
                    c4:6c:e5:e8:29:78:c3:ca:7a:ed:fe:e5:53:fb:48:
                    7e:00:8a:b8:3a:90:eb:7e:24:68:87:71:ef:92:31:
                    d2:0f:d5:b0:83:7d:9e:c8:15:4b:50:a5:cd:6a:e5:
                    d4:10:4f:e8:9e:54:43:15:f3:2a:94:6b:ea:28:6e:
                    1f:d7:33:6f:da:8a:51:b1:c2:cf:2d:94:20:68:f7:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3E:EE:37:88:63:97:29:93:91:7B:85:3A:2E:13:8C:01:0D:D0:C5
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/ET7uN4hjlymTkXuFOi4TjAEN0MU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:45:0c:f2:d3:3e:06:fa:24:81:cd:93:0d:f2:d8:bd:aa:9d:
         a3:ba:f7:d6:8e:c4:f1:4e:52:0c:9a:af:86:ea:4a:98:c7:bd:
         65:5c:c5:12:40:59:d3:01:c9:11:e5:ca:f0:0b:0f:4d:db:95:
         91:04:a7:f6:6d:5d:e6:29:09:c2:c4:e5:f1:52:bf:03:88:3c:
         a0:c5:bc:0f:79:fd:aa:5c:77:18:4d:3a:60:f0:20:76:18:75:
         95:1f:18:bf:96:1a:65:82:92:07:33:02:91:ed:df:4f:9c:73:
         de:21:d2:d4:4d:00:88:fe:9d:18:df:88:09:f1:b7:3f:3e:5f:
         12:40:58:46:f1:de:f0:91:2f:51:2f:7a:bc:1c:d6:41:07:02:
         3b:37:fe:63:9f:aa:f1:71:d2:98:22:3c:07:e3:98:32:df:16:
         e0:ec:b0:c7:df:35:04:11:cc:d9:c7:97:40:b5:66:29:40:0f:
         ff:d4:ed:f7:b8:48:ab:cb:6e:a8:ec:8a:c3:5e:a9:20:8c:fc:
         d0:40:dd:b7:56:d2:3c:fd:60:e9:9d:35:69:77:d0:1d:b5:a7:
         1c:d7:62:25:69:b1:36:df:ff:78:42:9a:d2:7e:a1:7c:a2:41:
         8a:6d:fb:6b:bb:6f:f7:26:73:cd:3e:fc:9e:39:ed:52:8f:74:
         30:0e:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org