Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Kq3UEJM98XC5q1th5UwBi99w5o8.roa
File:                     Kq3UEJM98XC5q1th5UwBi99w5o8.roa (raw, json)
Hash identifier:          Pb0qcktp2FsojopI7GTuejYyhcxKz7xCEM+Lc5V6Axs=
Subject key identifier:   2A:AD:D4:10:93:3D:F1:70:B9:AB:5B:61:E5:4C:01:8B:DF:70:E6:8F
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       0110C979
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Kq3UEJM98XC5q1th5UwBi99w5o8.roa
Signing time:             Sat 04 Jun 2022 20:42:17 +0000
ROA not before:           Sat 04 Jun 2022 20:42:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207967
IP address blocks:        185.124.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17877369 (0x110c979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: Jun  4 20:42:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2aadd410933df170b9ab5b61e54c018bdf70e68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:57:b0:04:46:37:13:af:72:99:fe:bf:c8:
                    cd:70:2e:f2:88:78:83:d6:b4:a8:33:39:cb:5b:19:
                    36:1d:3b:5b:78:b2:44:06:32:f3:63:5c:e8:32:85:
                    be:02:19:1d:37:dc:61:42:e7:6b:59:0e:f9:15:5d:
                    72:fa:0c:a2:6b:7b:92:21:43:2c:2e:98:bf:b1:e6:
                    45:be:75:ba:7c:be:96:86:c4:8b:43:4d:b5:6d:da:
                    29:96:ab:d1:da:34:c2:9c:17:97:85:e5:68:f6:74:
                    fd:93:be:48:db:e3:4a:65:bd:8b:b3:30:5d:e8:29:
                    21:82:54:75:70:42:ee:4d:65:7d:f4:04:bb:fb:ec:
                    8f:c6:ce:d6:0e:1b:1c:2f:36:2f:e0:63:36:5d:8e:
                    ce:9d:45:d6:79:dd:36:f5:65:e8:e5:a7:55:12:29:
                    bc:02:fb:b9:70:e5:e6:6e:20:af:35:5c:e6:13:1a:
                    03:5b:8c:5c:69:e6:ca:94:20:12:45:e2:a6:e7:ef:
                    d5:83:72:7f:bc:40:9d:3b:3a:07:84:63:41:de:13:
                    07:35:4c:9f:b2:81:b4:11:41:1a:0f:bd:32:ba:1b:
                    7d:8d:5a:10:5b:3b:ed:d4:4e:b9:70:03:0f:58:d2:
                    26:80:8c:ea:92:ba:d5:12:48:07:e2:7b:2d:3e:19:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:D4:10:93:3D:F1:70:B9:AB:5B:61:E5:4C:01:8B:DF:70:E6:8F
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Kq3UEJM98XC5q1th5UwBi99w5o8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:89:03:3f:70:34:7f:fe:ee:d6:83:1c:1b:33:7d:e1:3f:c5:
         de:9d:0a:cd:93:0a:64:39:c0:e7:f8:ec:71:ca:11:7a:7d:8b:
         5c:3e:c0:27:da:7c:27:0a:b9:7d:f8:f5:ea:60:3e:96:b1:02:
         22:02:9d:76:c1:d6:03:ae:8f:4e:b6:18:c3:b2:d5:2d:bb:e7:
         91:4e:4e:e6:e3:ca:87:1b:c3:d3:4d:96:ed:13:56:b0:a1:20:
         fa:bb:4a:86:ca:1b:af:d4:05:db:27:b0:0a:85:92:8a:f3:10:
         6d:c5:6d:91:b4:73:0b:70:81:ef:55:b9:21:a7:36:1e:6a:9e:
         98:c1:b7:56:52:40:b8:7c:07:8b:22:18:cd:a9:dc:13:9b:15:
         0e:19:8b:e4:90:05:65:8a:d3:d7:51:ba:20:13:a6:99:04:94:
         a8:e0:d8:49:a2:b3:5a:1f:82:b2:05:3d:23:c8:5e:2c:ba:bb:
         53:d3:8b:92:59:6f:92:4a:b9:50:06:22:0b:2d:19:dd:29:04:
         d3:d0:49:d7:f0:af:a3:15:4a:97:9d:d5:6a:aa:5d:59:3f:78:
         9d:f3:5c:8b:0f:b2:49:fc:3c:7a:e7:eb:95:b9:70:85:9e:c5:
         ab:a8:c3:f6:4f:31:d5:f3:0f:69:3b:7e:bb:60:9f:cc:d0:6f:
         ae:39:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org