Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/alDpK4oeykSBN3ndQSyQO46UljM.roa
File:                     alDpK4oeykSBN3ndQSyQO46UljM.roa (raw, json)
Hash identifier:          Bo4kEiZIUqI6/dwtFaflFo+SMe53p6OacTFU6XPR9uM=
Subject key identifier:   6A:50:E9:2B:8A:1E:CA:44:81:37:79:DD:41:2C:90:3B:8E:94:96:33
Certificate issuer:       /CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Certificate serial:       0185CFB7A553911AFAFC919A1132DF561A1C
Authority key identifier: 62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/alDpK4oeykSBN3ndQSyQO46UljM.roa
Signing time:             Fri 20 Jan 2023 15:06:37 +0000
ROA not before:           Fri 20 Jan 2023 15:06:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47857
IP address blocks:        185.25.8.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:cf:b7:a5:53:91:1a:fa:fc:91:9a:11:32:df:56:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
        Validity
            Not Before: Jan 20 15:06:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a50e92b8a1eca44813779dd412c903b8e949633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:ba:ec:08:99:8f:0b:c0:4a:1b:9e:1d:ec:
                    44:e1:fa:e1:c9:9d:65:d0:a7:21:38:07:39:9d:6e:
                    6c:b4:8b:5d:22:12:f4:e1:51:49:0a:b3:1f:12:90:
                    6c:8d:0e:bc:e6:9f:cd:d6:bc:d0:5a:b9:79:06:4f:
                    62:08:39:a7:f4:10:1e:05:9f:d5:32:8a:5f:5e:d9:
                    12:c5:c5:a2:5b:9e:86:1b:13:be:80:11:c4:11:69:
                    0b:d7:07:2e:82:9a:f0:fc:34:0b:02:54:b5:cb:ad:
                    c8:a8:fc:ff:00:95:10:81:4f:4b:d0:78:f7:81:62:
                    9d:d1:ef:96:04:64:09:60:19:eb:21:89:a0:00:b3:
                    2e:fd:42:ad:37:1d:04:6f:76:df:c1:da:5c:1b:48:
                    4d:b0:43:b1:6f:80:86:2e:19:17:b2:22:be:4b:2e:
                    d0:dc:b4:77:65:91:6e:50:c9:cc:29:d9:8c:da:7a:
                    e0:fb:41:08:3a:4c:f6:df:05:17:5e:76:02:26:09:
                    cc:00:b4:b0:c8:eb:f3:a6:eb:53:13:95:e9:f3:20:
                    a6:12:73:83:81:ae:84:ef:3b:12:64:a7:9c:fa:92:
                    e1:1e:fe:c4:45:44:13:d6:18:1b:e2:2c:18:5e:6b:
                    1f:75:ef:ba:09:5a:57:fb:88:7a:f5:77:40:07:9b:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:50:E9:2B:8A:1E:CA:44:81:37:79:DD:41:2C:90:3B:8E:94:96:33
            X509v3 Authority Key Identifier:
                keyid:62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/alDpK4oeykSBN3ndQSyQO46UljM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/Yvwu1lV9DOgOgVBbH51YBpiIfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:b5:d5:3f:c9:c2:b6:19:f1:55:49:29:d7:a8:f4:26:c0:
         68:2b:d8:51:6c:7a:d8:67:a7:96:03:89:d9:05:a5:36:2d:36:
         18:1a:57:2f:72:63:30:fb:65:03:7a:91:f8:fb:f8:07:af:d3:
         b7:99:9f:d9:a4:3a:a6:5b:a7:5d:64:39:19:a5:3b:cc:ec:96:
         3b:cc:68:55:64:80:a1:66:f1:6e:d2:32:5f:b8:c1:22:11:2c:
         9a:c4:16:dc:43:23:e0:77:7b:af:8b:75:b4:ff:15:db:aa:77:
         51:87:7f:af:bc:59:90:d5:bd:ee:48:15:97:8d:ee:4d:f9:91:
         84:ba:da:74:d2:b6:a5:9b:b0:38:dd:66:29:b4:f8:ee:04:2b:
         9d:2a:d7:8d:c9:85:5e:c7:01:be:ce:40:8f:b1:ea:02:47:8b:
         63:e7:2e:b2:0a:7e:27:1d:df:7e:ae:6b:2e:a2:b1:03:a4:37:
         2a:5f:a1:ae:a6:60:39:27:2d:40:63:42:c4:fc:d8:e5:3d:45:
         5b:f3:b5:db:e9:21:12:a9:fb:90:6f:38:7e:67:fe:66:ae:91:
         3b:c0:19:ef:d5:bd:04:46:2e:ea:08:72:f8:ee:7b:bf:dc:70:
         5d:cc:7d:1a:9c:5b:f8:c0:da:7a:47:23:7e:66:93:f3:e7:67:
         60:09:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org