Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/49RuUA3uRBvcsY3WLfFcfAH-VVE.roa
File:                     49RuUA3uRBvcsY3WLfFcfAH-VVE.roa (raw, json)
Hash identifier:          IZS3PDclOOXWF5oEnIzVJG2rfYKQperiK1kGG68flHk=
Subject key identifier:   E3:D4:6E:50:0D:EE:44:1B:DC:B1:8D:D6:2D:F1:5C:7C:01:FE:55:51
Certificate issuer:       /CN=7453130d8b7c5b0de0648feef255d3079041c02f
Certificate serial:       0265EEF1
Authority key identifier: 74:53:13:0D:8B:7C:5B:0D:E0:64:8F:EE:F2:55:D3:07:90:41:C0:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFMTDYt8Ww3gZI_u8lXTB5BBwC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/49RuUA3uRBvcsY3WLfFcfAH-VVE.roa
Signing time:             Sat 01 Jan 2022 02:53:02 +0000
ROA not before:           Sat 01 Jan 2022 02:53:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60458
IP address blocks:        185.217.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40234737 (0x265eef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7453130d8b7c5b0de0648feef255d3079041c02f
        Validity
            Not Before: Jan  1 02:53:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3d46e500dee441bdcb18dd62df15c7c01fe5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:6d:d5:b0:0b:1a:14:db:1e:66:b0:97:08:
                    2d:76:53:15:e3:74:62:be:cf:c9:fa:cd:31:67:1b:
                    db:3d:03:7a:7a:a7:95:15:5e:ae:c8:c1:fd:aa:f8:
                    67:fb:4a:9b:45:fd:7c:c4:9c:53:2e:cf:f0:be:14:
                    51:b8:42:f6:07:9a:54:b3:66:4e:84:71:40:38:4e:
                    0d:37:f0:f2:60:a8:a4:14:5e:72:d9:78:b5:29:ca:
                    d8:43:b7:8d:f1:17:d0:96:aa:d1:fe:35:3e:19:93:
                    59:91:b0:e3:78:a9:58:72:12:b2:ba:a0:07:78:70:
                    eb:60:b5:d2:5a:af:b7:fc:1e:44:9c:52:98:1b:f2:
                    dd:e4:ad:ad:de:a6:12:0b:b4:f5:26:f3:0d:04:2c:
                    83:b6:86:10:bb:9f:38:26:00:da:86:51:2f:49:78:
                    ee:60:40:2e:03:dc:58:50:d6:67:71:39:07:1e:bb:
                    2d:00:bf:a2:0d:84:c6:34:c5:eb:30:e4:e3:e6:9a:
                    68:6c:90:0e:08:38:b9:22:86:69:af:b4:39:92:4e:
                    5a:1d:20:a0:8b:eb:40:31:7c:71:17:71:29:ad:6e:
                    7b:da:93:7a:62:ad:42:de:f8:4d:f0:e6:4f:56:1e:
                    5f:bd:f0:9b:28:aa:9a:3f:cf:0d:cf:30:9a:31:e9:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D4:6E:50:0D:EE:44:1B:DC:B1:8D:D6:2D:F1:5C:7C:01:FE:55:51
            X509v3 Authority Key Identifier:
                keyid:74:53:13:0D:8B:7C:5B:0D:E0:64:8F:EE:F2:55:D3:07:90:41:C0:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFMTDYt8Ww3gZI_u8lXTB5BBwC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/49RuUA3uRBvcsY3WLfFcfAH-VVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/dFMTDYt8Ww3gZI_u8lXTB5BBwC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:89:f7:54:18:05:61:f0:44:18:d6:12:c8:c2:86:1d:3b:
         3e:69:d3:8b:36:0a:6a:0e:ef:ca:78:13:59:21:a6:62:78:53:
         27:13:0f:92:16:06:97:ee:d9:04:78:54:00:98:5d:65:9b:d9:
         c9:47:9d:46:d7:bb:83:dd:d9:bb:ae:3f:8b:cc:d3:6a:b3:58:
         89:0f:d4:0e:6c:70:a7:1b:0e:74:ad:e5:ab:da:40:08:9c:8e:
         d6:90:01:aa:b8:73:ab:da:0d:a7:86:a1:5f:52:1c:9a:10:1c:
         8f:45:98:7e:c4:e4:e3:be:1e:60:74:ea:c7:ab:ba:35:29:d0:
         73:df:6a:2f:6f:af:e5:68:0c:b8:49:e9:13:b7:66:75:d8:44:
         ad:4b:18:20:6d:a5:a5:55:37:17:2d:e3:a4:ec:e2:ec:a7:92:
         65:de:2d:48:65:2b:43:df:87:99:bb:7e:87:de:f9:bc:2f:b4:
         eb:35:93:b7:28:d2:fc:ea:24:d6:59:c0:18:1b:d1:d7:cb:0f:
         c7:01:3c:fe:d4:43:3b:e1:75:73:eb:2b:32:63:ff:3e:86:81:
         79:0d:93:ae:2c:42:70:fa:ba:2c:ea:ec:11:a7:f6:60:18:29:
         90:54:91:92:74:8b:19:b6:9e:81:71:ae:36:7f:70:88:69:b9:
         25:e5:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org