Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa
File:                     zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa (raw, json)
Hash identifier:          Q0q32VFfOCjMHFily+APZO+VNJLfH93qyBTv6PbjoyE=
Subject key identifier:   CE:11:35:A7:C4:39:22:3C:B7:55:47:4A:C5:B7:FE:71:6A:74:59:52
Certificate issuer:       /CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
Certificate serial:       0185719E787221DB4DE19E3BA84DFBCF2989
Authority key identifier: C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa
Signing time:             Mon 02 Jan 2023 08:34:48 +0000
ROA not before:           Mon 02 Jan 2023 08:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207579
IP address blocks:        185.210.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:78:72:21:db:4d:e1:9e:3b:a8:4d:fb:cf:29:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
        Validity
            Not Before: Jan  2 08:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce1135a7c439223cb755474ac5b7fe716a745952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cc:55:6e:15:49:58:7f:f8:35:0c:3c:ca:d5:
                    01:2b:49:9c:5a:56:80:e0:da:5e:ff:67:05:a2:1e:
                    a9:27:21:9f:0a:93:33:ec:c7:08:fa:c5:2b:51:ca:
                    85:9a:2a:ba:b2:fb:28:2c:4a:f5:8d:fe:9e:c6:93:
                    2d:12:29:21:0c:22:62:d9:3c:24:2b:93:77:ef:45:
                    b0:1f:75:ec:fb:58:18:46:30:76:fa:ba:46:6f:15:
                    b6:53:5c:14:cd:68:16:68:58:47:09:50:4c:61:32:
                    1c:db:9a:3f:97:b5:98:f4:91:cf:bc:e1:94:59:f9:
                    c7:96:97:52:c7:06:d7:e3:5b:95:b5:b4:a0:9b:fb:
                    51:eb:af:01:66:97:f7:06:79:6d:de:43:c7:60:18:
                    5f:68:1d:c3:c6:d3:db:20:c0:4f:dc:62:db:cf:58:
                    af:36:ce:48:de:7f:3c:72:36:92:3e:1d:2f:5b:ac:
                    4a:52:4b:9c:dc:21:7f:b7:e8:9d:30:be:a6:01:02:
                    c2:bd:8b:6e:41:70:6b:cb:a0:69:40:d3:e4:4a:67:
                    ce:e0:44:d6:57:0c:85:b7:b7:16:bc:ff:66:c7:1a:
                    ea:b9:6f:98:fb:6b:66:c2:b4:5e:3a:94:34:be:9b:
                    df:77:5b:cf:03:fe:79:ae:be:58:fd:38:27:a4:32:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:35:A7:C4:39:22:3C:B7:55:47:4A:C5:B7:FE:71:6A:74:59:52
            X509v3 Authority Key Identifier:
                keyid:C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/yd6HwTyh0b-_CWdskCHQsjhqmPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:26:4f:ff:13:e4:76:70:64:80:a1:79:c7:48:97:b0:5f:
         bb:ab:13:30:ab:e5:66:f8:5a:7d:02:57:b0:bf:44:6c:55:a3:
         9d:92:db:30:49:d8:1a:08:74:09:74:8a:b3:f2:2c:98:3d:3b:
         76:60:c4:95:48:2a:f0:90:35:43:c0:b6:ec:15:67:00:64:bf:
         f9:00:58:ab:e1:3c:37:86:f8:4f:33:ea:20:3c:49:eb:96:cb:
         d3:22:d7:7c:77:26:43:5d:c1:70:c9:e1:e0:9a:5d:b1:06:cc:
         c2:2b:5e:7a:4e:92:ca:99:63:0e:e2:9f:39:a8:15:98:e6:5a:
         04:e3:86:b8:b8:08:24:1f:7f:17:b7:0f:6a:cf:3b:87:a0:35:
         25:8b:96:a0:cd:fc:a5:b1:74:4c:16:cb:b1:56:67:26:d7:17:
         45:ce:1b:85:c3:cd:2c:d0:a7:ed:af:7a:ef:a0:bb:93:ae:88:
         59:e9:8f:de:d1:cb:fd:98:0c:aa:ab:c3:e1:2b:ad:93:51:eb:
         bb:e4:1b:11:69:78:d4:74:9b:e5:98:86:4a:29:c6:53:3b:23:
         43:12:b6:a1:d4:dd:af:f6:4e:df:37:5a:8b:04:be:86:0a:2f:
         00:6a:50:36:c1:9c:4f:97:ac:eb:f5:bd:dd:b1:92:b8:d8:9a:
         18:b1:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:45 2024 by rpki-client on console-fra.rpki-client.org