Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/XBZpC8x6m0hAOBDJg6lANclU584.roa
File:                     XBZpC8x6m0hAOBDJg6lANclU584.roa (raw, json)
Hash identifier:          xbk4fRvlUKfoI/SxhYKVBKBzE1zdyg0HOQawyev1SUw=
Subject key identifier:   5C:16:69:0B:CC:7A:9B:48:40:38:10:C9:83:A9:40:35:C9:54:E7:CE
Certificate issuer:       /CN=9a04cdcdc1159c31eedb24cc7ac8b262b756227c
Certificate serial:       02F1E51F
Authority key identifier: 9A:04:CD:CD:C1:15:9C:31:EE:DB:24:CC:7A:C8:B2:62:B7:56:22:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgTNzcEVnDHu2yTMesiyYrdWInw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/XBZpC8x6m0hAOBDJg6lANclU584.roa
Signing time:             Sat 01 Jan 2022 00:53:42 +0000
ROA not before:           Sat 01 Jan 2022 00:53:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44066
IP address blocks:        185.210.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49407263 (0x2f1e51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a04cdcdc1159c31eedb24cc7ac8b262b756227c
        Validity
            Not Before: Jan  1 00:53:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c16690bcc7a9b48403810c983a94035c954e7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:dc:29:ad:ae:a2:dd:bb:7b:10:cb:7e:f9:
                    bb:fd:7e:1d:59:b0:6c:9c:3f:4c:3c:6a:5b:bd:aa:
                    ec:aa:86:d9:7c:60:7d:d6:d9:32:03:65:ac:67:b7:
                    eb:4f:e6:06:0e:c7:10:03:f8:db:ec:25:68:06:43:
                    35:f0:f7:ff:17:21:52:25:3a:1b:c4:b6:3f:70:8d:
                    16:81:bd:55:c1:be:52:9f:87:30:41:ad:ac:9c:b2:
                    46:17:95:26:2c:09:2b:2e:6b:6e:19:fc:79:1f:73:
                    12:fd:c8:29:8b:b5:68:23:e7:83:a6:35:1d:d4:b5:
                    c1:56:06:ad:53:9c:e1:43:a7:9b:dd:a0:ba:f2:20:
                    f4:92:b0:f6:26:33:5a:ea:61:cc:df:d9:46:86:1e:
                    03:de:35:0f:d1:6a:0c:dd:b8:65:e7:b7:7c:fd:b2:
                    18:56:8a:57:53:ed:c7:fe:68:af:08:e6:62:c0:93:
                    ae:f5:cb:f4:f4:f8:58:36:b2:8c:db:1f:51:da:6f:
                    5e:a1:a1:e0:12:16:0e:5d:b3:6a:87:07:d9:88:2d:
                    71:da:30:01:ae:f6:0b:f9:a4:09:9e:64:f7:62:28:
                    cf:d9:f6:30:b9:ab:52:6a:c2:62:c5:d3:cb:85:25:
                    77:17:4b:bd:6d:73:38:d7:60:a0:0c:96:7a:d4:b7:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:69:0B:CC:7A:9B:48:40:38:10:C9:83:A9:40:35:C9:54:E7:CE
            X509v3 Authority Key Identifier:
                keyid:9A:04:CD:CD:C1:15:9C:31:EE:DB:24:CC:7A:C8:B2:62:B7:56:22:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgTNzcEVnDHu2yTMesiyYrdWInw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/XBZpC8x6m0hAOBDJg6lANclU584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/mgTNzcEVnDHu2yTMesiyYrdWInw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:8c:28:f9:0a:aa:13:a8:f1:87:e2:4e:91:54:84:26:bd:
         b1:8c:da:62:fb:be:b9:ca:e1:a9:9b:b5:9a:3e:51:6d:9d:7a:
         19:be:17:9d:f3:53:68:3d:cc:6e:44:4f:4d:cc:ff:75:74:6f:
         6e:3e:30:bc:cf:fa:91:af:6d:cd:71:29:48:34:8e:6c:55:b0:
         09:51:65:01:24:1c:71:4a:64:37:51:5a:26:7e:56:ae:84:98:
         3a:90:68:bd:7a:df:e8:44:d0:32:c3:aa:53:b8:7f:c8:aa:86:
         47:ca:04:0d:6e:5a:b7:d1:63:1c:43:14:2f:55:18:4f:cc:81:
         df:97:b7:e3:59:c4:f2:77:aa:93:03:98:fc:5d:49:f9:a1:b5:
         79:71:71:85:e8:13:a5:e1:b8:a3:a0:cc:33:f7:4a:36:da:2f:
         7e:13:8d:5b:4a:50:48:fa:48:13:6f:80:f5:de:0b:9c:47:ea:
         84:2f:ae:a8:e4:b7:f2:21:8b:aa:91:8f:f2:49:b7:3e:db:7c:
         cf:bf:e4:2c:01:68:ae:a6:e4:66:a8:c2:f0:b5:f3:0b:fe:29:
         a1:2c:93:20:22:76:50:a7:35:3c:25:2f:7c:77:31:61:0e:e2:
         29:4e:82:d6:d4:ba:2d:ee:75:04:ac:d7:76:23:5a:c0:e1:0f:
         8e:92:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:29 2024 by rpki-client on console-ams.rpki-client.org