Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa
File:                     yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa (raw, json)
Hash identifier:          /e+PXoCqY+D8cyDJy2DE1K8mcvxoXG+M+4mblh94oXQ=
Subject key identifier:   C9:30:A2:8A:37:71:07:1C:58:80:F7:21:E1:1E:46:6B:E8:D9:B4:B4
Certificate issuer:       /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial:       0184CA80AB8E866B5B80D537898515F9F223
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa
Signing time:             Wed 30 Nov 2022 21:45:40 +0000
ROA not before:           Wed 30 Nov 2022 21:45:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207279
IP address blocks:        185.94.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ca:80:ab:8e:86:6b:5b:80:d5:37:89:85:15:f9:f2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
        Validity
            Not Before: Nov 30 21:45:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c930a28a3771071c5880f721e11e466be8d9b4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:bc:fe:92:76:12:d2:86:20:c4:00:d7:36:
                    a3:ec:f6:f6:9d:d7:2f:a3:ea:03:9a:24:52:e6:7a:
                    a4:88:d4:02:72:a2:fa:76:12:f5:69:24:ba:0c:83:
                    4b:8a:09:47:b8:14:e8:7a:97:e5:76:c8:a5:b8:00:
                    93:da:41:32:4f:5a:3c:58:4b:79:db:37:ae:5c:fe:
                    d3:0b:fa:90:27:fd:69:21:b9:af:0d:81:7d:2a:c8:
                    6f:e2:e0:81:50:b2:eb:fc:0d:ab:7e:ed:aa:1d:fb:
                    df:b3:26:25:bc:2d:b2:94:82:fa:b3:2e:64:a4:b7:
                    46:31:6a:02:0f:76:61:c3:b4:9f:fd:d8:85:92:c8:
                    04:68:2e:12:4f:14:8d:86:22:03:3f:ae:6f:11:47:
                    3f:2d:68:9c:20:f5:97:88:af:ba:17:86:b3:9b:1d:
                    30:cc:d3:84:29:99:ae:ec:33:78:23:1c:a3:3b:1b:
                    16:84:ee:ad:89:2f:07:1f:9b:5c:22:e9:03:98:4b:
                    ee:d0:b9:56:6d:4f:97:6b:7f:d4:00:57:01:c8:9f:
                    db:b5:39:39:1d:ad:81:c3:70:b4:7b:9d:04:81:48:
                    25:ed:e0:47:79:57:2d:f7:5d:2b:07:2d:d4:53:e9:
                    0a:fb:62:46:f9:61:6f:5e:99:eb:d5:60:f9:d8:00:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:30:A2:8A:37:71:07:1C:58:80:F7:21:E1:1E:46:6B:E8:D9:B4:B4
            X509v3 Authority Key Identifier:
                keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:58:2c:76:69:27:20:fc:5d:fe:16:c4:67:ca:f2:c2:ee:
         a6:82:4a:36:9a:0d:3a:57:a5:2f:bc:af:f0:83:65:8a:b8:06:
         13:5a:5f:df:6d:2a:b2:77:5d:5b:cb:aa:2b:06:5a:8d:9d:93:
         a0:05:c2:93:9a:0e:34:99:63:03:fb:d9:6f:dd:64:80:bc:fe:
         34:62:25:04:f1:1c:fc:c1:37:b4:a8:f5:be:27:e1:ef:1c:f1:
         1c:cb:76:30:0c:fb:59:63:90:e8:0e:f1:d9:e7:92:8a:f5:94:
         06:7a:ed:ad:61:de:97:6b:2d:55:b3:e8:7a:ce:3a:d2:03:d3:
         08:d3:79:67:29:13:1a:bc:c9:1a:b8:7a:c6:d2:30:b6:77:c5:
         7b:bd:b1:51:7f:0b:86:4f:50:20:01:0f:84:41:f5:8a:b9:5b:
         a6:d9:9e:f1:a0:3b:d9:c0:7f:b1:c1:75:27:bf:1f:18:87:e4:
         7b:9d:6b:b2:e9:82:f9:37:0c:ad:64:95:c0:b0:ca:25:c0:0a:
         c5:98:2e:51:d6:85:c8:51:62:f8:27:f8:b6:ba:73:2f:14:7c:
         65:17:25:c4:35:54:83:95:fa:bf:6a:d1:52:77:51:2c:97:ce:
         cb:f5:36:62:02:35:f8:75:b0:2c:7c:a9:09:55:73:e6:e3:c6:
         fd:ea:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:14 2024 by rpki-client on console-ams.rpki-client.org