Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/GBD41zhHygARlGbEZnw_Ca248IE.roa
File:                     GBD41zhHygARlGbEZnw_Ca248IE.roa (raw, json)
Hash identifier:          J+c8Pma7iDbvigcgJnpiEk227QjJ3NDX4V1OVYc/OP4=
Subject key identifier:   18:10:F8:D7:38:47:CA:00:11:94:66:C4:66:7C:3F:09:AD:B8:F0:81
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       0183928D2AB7DD3F85AD7D83A185492AE339
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/GBD41zhHygARlGbEZnw_Ca248IE.roa
Signing time:             Sat 01 Oct 2022 07:57:48 +0000
ROA not before:           Sat 01 Oct 2022 07:57:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49581
IP address blocks:        185.124.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:92:8d:2a:b7:dd:3f:85:ad:7d:83:a1:85:49:2a:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: Oct  1 07:57:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1810f8d73847ca00119466c4667c3f09adb8f081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:e2:b5:57:12:03:da:9f:b7:36:ae:49:c3:
                    ce:97:3c:c3:69:a9:95:50:3a:d1:f9:52:e7:e2:5d:
                    cc:4e:2c:e0:91:d9:c9:5a:37:12:71:a1:75:f0:19:
                    0c:0d:ea:7f:43:b6:86:75:81:1a:93:97:17:3d:3b:
                    8e:e3:31:68:c1:81:9c:7e:80:c8:19:ed:6a:0a:91:
                    19:e6:ed:f6:49:f3:c7:ee:44:21:7d:72:70:4a:85:
                    fc:ed:24:e9:1d:84:cc:b3:49:b8:30:f3:0a:c3:62:
                    9b:a8:cb:bc:db:65:59:b2:16:17:37:3f:f4:04:71:
                    1c:b2:d9:1a:3b:34:ea:00:24:9c:07:ba:97:6d:5c:
                    65:b3:e6:b7:15:5d:6c:fb:24:0b:3c:fb:c4:a5:04:
                    a5:5a:92:00:8e:64:7e:b6:87:19:2a:e7:b6:39:ae:
                    91:61:cf:24:ac:ed:b1:1c:18:26:8e:4b:00:b2:72:
                    4e:15:35:26:ea:15:cb:f5:60:f7:0e:90:cf:fb:7d:
                    4c:9a:9a:f6:c4:58:76:e4:9e:6f:a8:63:55:ef:b2:
                    35:e5:df:3d:b6:d5:e6:c8:26:c3:c3:62:bc:4f:ef:
                    4b:74:c0:70:98:1d:36:c4:3f:5e:2e:91:2f:b7:38:
                    4e:35:97:ad:f1:da:e6:5f:56:a8:28:82:d0:0a:50:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:F8:D7:38:47:CA:00:11:94:66:C4:66:7C:3F:09:AD:B8:F0:81
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/GBD41zhHygARlGbEZnw_Ca248IE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:5c:78:e8:b2:32:1f:b9:49:4f:08:96:b6:cf:a1:6b:c1:
         10:fa:7d:5d:6c:7b:e6:0b:4d:53:08:36:c2:07:4f:94:08:c3:
         cd:02:b5:70:6e:20:4f:68:5c:95:fb:a9:6d:de:08:42:eb:f3:
         a8:31:f9:ff:56:d9:9b:dc:16:a3:94:34:29:59:3e:53:94:68:
         d5:57:7d:13:ef:28:40:9d:52:a2:34:20:51:b9:3d:7a:91:35:
         69:dd:36:ca:b2:cb:79:b2:68:10:fa:cb:17:28:54:17:49:d1:
         cc:f4:0d:ae:8d:9a:a7:ec:c6:6b:3a:c3:9d:32:1c:ce:bc:8a:
         3c:bf:6a:d3:ca:90:88:90:49:3e:bb:a2:fc:42:4c:e3:61:9b:
         66:76:c5:0e:b3:17:be:cf:23:a5:77:8e:4a:0a:eb:cb:a7:31:
         3f:43:54:87:0f:06:6f:13:69:f2:0b:1b:8d:d5:fa:53:6f:29:
         30:27:c7:6e:df:95:ed:48:6e:5d:dd:b6:13:f5:98:c8:8b:c7:
         a1:5b:25:96:e9:dc:3e:7b:67:b7:2c:f9:e8:d2:4b:30:18:e5:
         74:68:00:f8:3f:97:d8:be:8d:b1:a6:6d:f9:3d:99:16:8a:5f:
         5b:1e:f5:7e:b8:08:b3:17:0b:b0:9c:a2:d7:22:8b:80:b7:c0:
         b6:73:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org