Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Xx_H3BFJqZeNYaXL-nZCu0N6R_M.roa
File:                     Xx_H3BFJqZeNYaXL-nZCu0N6R_M.roa (raw, json)
Hash identifier:          SQL/oPq1yQvwRsA9wvAOluJM6z7Njhhyxcqs18D0C5s=
Subject key identifier:   5F:1F:C7:DC:11:49:A9:97:8D:61:A5:CB:FA:76:42:BB:43:7A:47:F3
Certificate issuer:       /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial:       0114A9
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Xx_H3BFJqZeNYaXL-nZCu0N6R_M.roa
Signing time:             Thu 03 Feb 2022 16:44:48 +0000
ROA not before:           Thu 03 Feb 2022 16:44:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.112.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70825 (0x114a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
        Validity
            Not Before: Feb  3 16:44:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f1fc7dc1149a9978d61a5cbfa7642bb437a47f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:2c:a7:58:3e:b7:ff:e3:a8:b8:6b:77:63:
                    d3:d7:bf:21:67:4e:c2:57:66:a9:d3:42:75:17:89:
                    ff:e3:be:53:c5:e2:98:4e:67:74:44:50:a7:1c:ac:
                    b7:c2:3c:09:0f:60:4e:dc:8b:8b:a7:05:1b:54:84:
                    7f:10:ec:24:1e:a6:88:72:02:3b:43:ef:29:7a:0b:
                    ec:bf:28:f5:b9:ae:bb:9f:9b:49:c0:02:03:ab:ae:
                    af:78:ba:fd:d5:69:15:5d:ae:74:3d:93:1f:1d:17:
                    16:f0:53:d5:38:c9:49:7c:57:e0:ef:3d:54:15:f8:
                    4e:43:9c:87:ac:db:a9:f1:98:d7:61:b7:e8:a7:7a:
                    3a:96:d6:96:d9:6f:3b:be:bc:92:6f:e6:f6:e4:a8:
                    22:52:14:c1:25:15:4f:60:fc:20:fb:99:39:89:2e:
                    29:ce:09:48:a3:92:90:d2:c9:16:6a:28:da:e8:a3:
                    88:49:ed:ce:78:56:e8:96:2c:34:88:b3:d2:fc:d8:
                    89:3a:3b:a4:7c:81:6a:ed:16:7b:56:1d:d3:f5:8f:
                    d0:8f:ab:7a:a3:e3:ca:49:00:06:ad:19:a8:f7:10:
                    a6:10:e2:03:6a:07:84:98:bb:bb:fa:97:54:c6:0b:
                    b9:64:ee:4b:17:72:86:31:ad:42:eb:00:e5:fd:81:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1F:C7:DC:11:49:A9:97:8D:61:A5:CB:FA:76:42:BB:43:7A:47:F3
            X509v3 Authority Key Identifier:
                keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Xx_H3BFJqZeNYaXL-nZCu0N6R_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:ee:be:91:46:e4:f9:11:77:0e:06:71:13:f0:95:69:5d:
         94:53:03:70:33:e9:dd:f4:b0:61:d9:e0:c2:f4:f6:4a:11:0f:
         61:79:5d:27:30:47:53:c1:b4:9b:e9:bf:8a:0c:00:48:1a:5c:
         bf:79:38:77:94:dd:61:92:4c:c6:43:fe:52:cc:9e:27:b9:4b:
         11:12:5f:db:b9:8d:d0:a5:2c:eb:b2:31:e2:9d:cb:53:e0:8b:
         a3:18:10:a6:75:29:c1:16:38:48:dd:c4:52:4b:8b:0e:9d:fb:
         3d:01:72:b5:bf:19:f2:5f:14:16:b2:34:73:8d:f8:03:47:c2:
         5b:62:97:39:1c:13:f1:8f:df:a6:e2:70:99:fb:c8:b4:a5:3c:
         c4:82:c6:bd:f4:c2:86:93:19:59:89:37:dd:0d:d4:c5:c1:01:
         84:0f:4b:f0:32:26:44:31:cb:3a:56:90:8d:92:88:7c:61:42:
         c3:76:89:dd:76:06:4a:1a:e3:af:54:1b:1d:6e:b9:cf:23:72:
         41:71:20:31:ed:85:71:29:c1:05:6b:e0:1d:18:7f:e4:40:6f:
         bf:7f:be:0b:08:a5:76:15:77:7f:c4:c2:e2:08:ba:ec:37:51:
         bb:ba:97:50:6e:a3:58:30:33:72:4a:cd:d1:e0:10:2a:ad:eb:
         4d:65:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org