Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/fs8zbgV9LBYY25n1towMiFWECmc.roa
File:                     fs8zbgV9LBYY25n1towMiFWECmc.roa (raw, json)
Hash identifier:          KdiXQd1gOwLtZ+nVE29EPkY/tv94v/xsl0qRJ+jv934=
Subject key identifier:   7E:CF:33:6E:05:7D:2C:16:18:DB:99:F5:B6:8C:0C:88:55:84:0A:67
Certificate issuer:       /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial:       11AECAF4
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/fs8zbgV9LBYY25n1towMiFWECmc.roa
Signing time:             Sat 01 Jan 2022 12:54:02 +0000
ROA not before:           Sat 01 Jan 2022 12:54:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.126.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296667892 (0x11aecaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
        Validity
            Not Before: Jan  1 12:54:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ecf336e057d2c1618db99f5b68c0c8855840a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:46:ba:d4:ec:5f:e2:fc:2b:ae:10:e0:fa:a9:
                    16:78:24:cb:83:b8:86:13:7e:20:6b:2a:99:09:77:
                    3d:e8:51:0a:65:a9:ae:65:bd:63:3e:a3:73:c3:2c:
                    4c:0a:f5:fa:66:7f:c1:5d:1f:32:85:64:73:a1:70:
                    0c:1d:df:61:c4:2d:dc:c2:d6:79:e5:e2:ab:e7:c1:
                    f5:8c:62:4a:1e:0e:bb:7e:b7:13:76:87:7e:69:db:
                    e4:6e:ec:3d:03:4e:af:c1:a5:5b:b3:87:8e:a8:36:
                    4e:f5:2f:2f:36:9d:36:f0:d8:c6:8f:e1:33:d1:16:
                    09:52:e9:82:5f:ec:37:02:35:a6:fa:12:6a:96:2b:
                    4f:25:d4:54:b4:d8:f3:59:36:8c:0d:69:26:57:41:
                    0a:26:db:b2:4d:56:8a:1b:57:61:b4:42:75:34:74:
                    d2:c9:df:76:8a:6f:92:16:8c:6e:53:5e:51:60:a7:
                    6b:c9:51:a4:69:22:00:3d:68:eb:43:29:2a:ed:31:
                    16:02:c7:bf:24:55:c0:8d:51:5f:0f:12:f8:7e:af:
                    ea:80:20:f7:ca:74:a9:97:c1:94:1b:07:67:fa:e5:
                    ef:5b:6d:42:87:5c:c1:bb:66:d4:62:8d:e0:55:29:
                    04:70:15:49:22:d7:5d:a5:13:dd:71:7d:e7:69:e4:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:33:6E:05:7D:2C:16:18:DB:99:F5:B6:8C:0C:88:55:84:0A:67
            X509v3 Authority Key Identifier:
                keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/fs8zbgV9LBYY25n1towMiFWECmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:6f:1d:89:c5:6a:fa:60:6f:9f:c7:1d:77:d2:43:b3:e5:
         d8:6b:f3:5a:01:58:7f:76:82:41:ab:f4:82:89:9e:3b:b5:25:
         22:4d:da:3e:16:3a:d5:3b:c9:f4:23:a8:90:23:78:f3:a1:99:
         4e:41:3f:1c:1f:03:6c:0b:c8:aa:05:89:09:f8:db:3a:0c:94:
         28:38:4a:a4:74:2b:25:f4:37:dc:d4:d3:86:40:ec:1e:96:e2:
         80:50:89:18:33:fa:08:5f:0e:63:6d:5d:64:d2:ad:f6:ba:9a:
         00:83:64:df:cb:d1:12:05:6c:cd:1d:83:77:78:1c:24:dd:63:
         38:55:cc:7a:98:60:84:15:65:ab:25:e5:a4:3b:d2:e7:fb:b3:
         53:d4:e7:6f:78:14:71:24:43:7e:73:4e:48:03:eb:aa:b7:9e:
         d4:31:a4:68:ed:e0:21:b1:80:86:f8:10:12:6c:3f:b1:1b:98:
         e5:4c:23:4c:a2:db:b6:a0:fd:3f:cf:19:50:c4:65:3e:75:dd:
         0d:68:f4:d0:d2:92:ab:32:1e:cc:1c:a1:ce:05:20:52:4a:69:
         46:54:cb:0b:3a:f3:6d:86:d1:07:bf:1f:b0:cb:06:a4:45:3f:
         2a:6a:1d:7b:f5:a3:09:58:02:98:a3:62:20:81:de:bc:8a:30:
         ea:87:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:42 2024 by rpki-client on console-ams.rpki-client.org