Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/_9ZNLqfd5K4TyyU7h9WTwsA1upU.roa
File:                     _9ZNLqfd5K4TyyU7h9WTwsA1upU.roa (raw, json)
Hash identifier:          WLA96SGj8m3O73ACqzACDms6kEII3ry+MMJzRntxLAY=
Subject key identifier:   FF:D6:4D:2E:A7:DD:E4:AE:13:CB:25:3B:87:D5:93:C2:C0:35:BA:95
Certificate issuer:       /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial:       0184DCFA175C9663101FB19370E7AB61E9C4
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/_9ZNLqfd5K4TyyU7h9WTwsA1upU.roa
Signing time:             Sun 04 Dec 2022 11:51:28 +0000
ROA not before:           Sun 04 Dec 2022 11:51:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     36007
IP address blocks:        185.139.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:dc:fa:17:5c:96:63:10:1f:b1:93:70:e7:ab:61:e9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
        Validity
            Not Before: Dec  4 11:51:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffd64d2ea7dde4ae13cb253b87d593c2c035ba95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:e6:a8:fe:75:fb:ea:fc:71:2b:f4:61:b1:
                    51:3a:b1:87:91:90:d1:c9:f6:86:3f:78:a8:1b:73:
                    a3:da:bd:b1:a3:60:e5:1c:22:4d:d8:09:d9:bc:a6:
                    8a:f7:b6:f3:4c:11:4b:80:a5:c3:e4:b5:db:9b:2b:
                    51:cc:62:68:f1:9f:e1:77:a4:57:0f:59:50:20:fa:
                    98:ab:3f:ea:03:a5:bd:99:df:20:f3:06:79:cf:25:
                    c6:07:e7:e6:65:93:cf:c4:a7:78:5c:12:dd:9d:8e:
                    2e:74:aa:fb:a1:7e:9f:9d:13:f9:22:99:37:b9:c1:
                    68:91:9f:68:69:9f:c9:b2:1e:81:c9:1a:c1:33:b7:
                    fb:75:2b:02:4d:dd:f3:31:70:59:9f:45:a9:b3:70:
                    3b:14:6f:fb:7d:cb:e5:ef:08:e4:22:d4:df:a9:c7:
                    83:2b:8f:a7:8d:b3:da:69:27:ae:2c:59:cf:20:a3:
                    93:db:e3:91:02:65:04:34:75:ac:b4:9d:69:e5:b2:
                    05:c6:51:58:17:06:88:52:80:82:5c:42:5e:7f:0a:
                    70:92:e2:f1:b7:a4:78:f3:02:5c:ed:64:30:3c:9d:
                    7e:ba:96:25:7d:e7:2d:bb:1c:8c:5d:7b:82:13:b3:
                    65:c2:c7:01:64:8e:60:a9:54:98:39:21:ed:68:8c:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:4D:2E:A7:DD:E4:AE:13:CB:25:3B:87:D5:93:C2:C0:35:BA:95
            X509v3 Authority Key Identifier:
                keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/_9ZNLqfd5K4TyyU7h9WTwsA1upU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:22:52:08:56:5b:ab:32:6e:e9:25:f3:74:98:16:de:ff:
         e3:35:ac:65:00:68:96:1e:50:b1:89:fd:ed:04:03:99:11:33:
         b9:1c:f4:3b:25:e6:18:9b:70:04:f9:08:ce:ac:ca:7b:05:0d:
         32:c3:3f:29:59:70:a5:6f:92:6d:0e:8f:58:ac:8f:aa:62:b9:
         64:6b:a3:1d:01:a4:e1:83:23:a5:81:a0:84:58:da:d4:23:6e:
         15:68:ef:42:30:0b:19:1b:e2:96:05:04:81:73:dc:29:29:ff:
         b5:8a:2b:0e:77:a8:3b:78:2f:40:55:bb:40:c3:6e:ae:0a:ed:
         e0:66:99:a1:c7:a4:e9:7f:ee:3a:5b:9f:e1:ee:a6:33:c2:6c:
         b9:27:a5:29:a0:8b:4b:35:a7:76:31:43:f4:ac:80:28:9f:1d:
         d1:c4:94:f2:ae:c7:12:0a:78:a1:4e:64:2b:53:5d:c0:9a:d2:
         80:36:d7:bc:8b:05:30:81:b9:dc:21:f1:90:06:c4:1b:de:0a:
         35:19:3a:f1:09:23:b4:93:86:ce:fb:86:0e:e6:04:e7:9b:e7:
         24:4f:7d:38:58:d4:b0:78:e4:fe:cc:52:69:55:85:ad:b5:50:
         30:ef:99:af:75:cc:8f:19:e2:a8:21:56:5a:26:31:fb:a9:3f:
         bf:9d:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org