Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/E21jebNtYkY0rHG-mjqba3gYqtI.roa
File:                     E21jebNtYkY0rHG-mjqba3gYqtI.roa (raw, json)
Hash identifier:          aK2FshWBVIpb6QJSCGkHafpOF2+S82mwfWwszXSCzOw=
Subject key identifier:   13:6D:63:79:B3:6D:62:46:34:AC:71:BE:9A:3A:9B:6B:78:18:AA:D2
Certificate issuer:       /CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
Certificate serial:       0543E14B
Authority key identifier: C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/E21jebNtYkY0rHG-mjqba3gYqtI.roa
Signing time:             Wed 30 Mar 2022 08:44:02 +0000
ROA not before:           Wed 30 Mar 2022 08:44:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211261
IP address blocks:        185.210.195.0/24 maxlen: 24
                          185.210.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88334667 (0x543e14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
        Validity
            Not Before: Mar 30 08:44:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=136d6379b36d624634ac71be9a3a9b6b7818aad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:bb:14:d7:57:64:55:75:01:fb:58:97:b3:
                    fa:7c:c3:04:6d:07:d0:30:1f:16:b2:59:8c:49:03:
                    2e:5a:b8:cd:97:18:d2:41:e1:66:e4:4b:d1:93:d0:
                    cd:f3:1a:47:89:91:a6:f8:7d:38:0f:89:fc:38:c8:
                    43:de:26:16:5e:0b:7b:cd:62:66:29:76:98:64:89:
                    00:aa:2c:41:3e:bb:b3:bb:52:b3:78:7f:8d:8a:b0:
                    e9:1b:26:16:97:49:16:fd:03:af:10:49:ac:6b:12:
                    ab:d4:62:cb:95:f0:30:ac:6e:93:e9:d8:f2:c0:59:
                    25:32:dd:4d:77:9e:ba:f6:32:ee:6e:b4:da:4f:4e:
                    e6:da:0b:a9:f2:f2:b7:74:e0:62:cc:16:31:8c:fc:
                    b6:6c:56:92:c9:f6:2c:da:4f:d9:dc:a2:12:1f:73:
                    44:37:20:c7:eb:12:21:32:1d:10:f6:e1:26:b1:b1:
                    da:57:88:44:90:de:18:32:07:66:34:7e:f2:ca:7c:
                    7e:1d:62:22:c4:c5:2d:28:60:b3:c6:21:46:af:4f:
                    c4:46:55:43:80:b9:73:e9:56:50:e1:c3:a9:a2:3f:
                    bb:f7:09:79:c8:c7:81:13:1f:e3:7f:e5:df:01:2b:
                    ac:fc:22:d5:c0:78:19:57:19:ea:c1:d4:b4:a6:d7:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6D:63:79:B3:6D:62:46:34:AC:71:BE:9A:3A:9B:6B:78:18:AA:D2
            X509v3 Authority Key Identifier:
                keyid:C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/E21jebNtYkY0rHG-mjqba3gYqtI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/yd6HwTyh0b-_CWdskCHQsjhqmPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.193.0/24
                  185.210.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:33:71:86:46:0f:50:eb:4f:78:28:2f:38:37:3f:c8:f4:5b:
         06:6e:65:16:d4:18:fa:e3:43:d2:90:b6:a7:52:2c:3f:38:bc:
         98:78:da:ea:c3:0d:1c:1a:8d:74:ff:70:b9:cd:3a:80:e0:d2:
         09:b7:69:4f:73:44:90:41:d8:ef:76:eb:bb:93:9a:8b:1e:40:
         06:6c:9c:ad:88:da:49:41:db:34:1f:b1:7f:80:a1:c1:4f:a6:
         de:dc:76:07:38:10:7c:6e:2b:17:4a:0a:0c:0d:9d:40:53:75:
         e2:36:72:f6:48:19:92:fa:3c:70:92:0d:bf:11:fc:b5:a0:ac:
         05:f3:bf:df:4a:74:98:cd:2b:bd:8c:74:4b:61:d0:1c:93:fe:
         79:ac:ea:86:98:67:73:a6:d3:fe:2f:bc:26:2f:f5:e4:9d:51:
         03:4b:7c:ab:ad:f2:b1:e7:65:d2:ec:66:82:7f:a5:6a:a1:95:
         83:07:44:50:1c:25:c9:ba:eb:ff:90:5c:85:2d:42:73:db:53:
         a4:ae:39:a6:19:dd:8e:dc:49:9c:33:cd:81:3f:ff:c6:f8:52:
         8d:d5:f8:71:d8:f2:be:f8:e9:97:82:0b:3b:26:7c:a5:c8:f2:
         c0:ec:4b:56:16:12:c7:71:fd:c0:42:46:48:80:de:0d:d8:e4:
         77:ce:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:45 2024 by rpki-client on console-fra.rpki-client.org