Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/TTgoamtGJtV5Yyj86E4vUESw5Kc.roa
File:                     TTgoamtGJtV5Yyj86E4vUESw5Kc.roa (raw, json)
Hash identifier:          d3+F4irTEEKK2LNQ5NpOC9WlXCmLRUgirlkBHvZ59GE=
Subject key identifier:   4D:38:28:6A:6B:46:26:D5:79:63:28:FC:E8:4E:2F:50:44:B0:E4:A7
Certificate issuer:       /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial:       081E6357
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/TTgoamtGJtV5Yyj86E4vUESw5Kc.roa
Signing time:             Sat 01 Jan 2022 15:58:35 +0000
ROA not before:           Sat 01 Jan 2022 15:58:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        185.232.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136209239 (0x81e6357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
        Validity
            Not Before: Jan  1 15:58:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d38286a6b4626d5796328fce84e2f5044b0e4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:90:d4:0b:60:e7:f6:89:d0:42:f0:ac:b0:
                    df:c7:eb:82:fb:3f:2a:d4:08:0a:33:cd:a3:ca:ec:
                    c1:e4:5b:91:04:38:61:46:49:86:5b:ab:87:5d:33:
                    c2:f7:5a:2e:3c:4f:cc:f6:10:a8:40:60:62:75:3f:
                    a0:c0:fb:ee:95:1d:6d:dc:25:e8:24:16:30:f7:a7:
                    56:aa:1e:b8:47:0a:c3:a2:a9:3c:c9:0a:56:fd:00:
                    a8:56:20:8e:43:eb:4e:85:16:fc:cd:85:e4:40:48:
                    a4:f2:53:43:f1:98:fc:f6:84:6d:5b:2e:6d:27:de:
                    12:22:2c:c6:14:e9:15:6c:9c:6c:ce:37:b4:4e:88:
                    61:f2:a3:ec:90:3f:b5:20:49:a3:9f:97:58:4f:55:
                    5d:e7:52:24:ed:5d:50:60:91:24:51:27:ee:21:a9:
                    15:e7:6c:8d:c4:00:c2:af:8d:82:6e:62:0d:ad:ef:
                    0e:d9:fb:0b:7a:c0:7c:83:6d:2e:13:85:80:fe:39:
                    42:3d:f9:f1:82:67:54:b6:0b:75:c0:d5:3d:8f:17:
                    fc:39:f5:92:a1:c9:ae:ae:67:db:51:28:ae:6f:c1:
                    1a:25:e2:78:53:21:ce:4f:b5:ad:71:6c:79:c2:be:
                    63:b9:7a:28:f5:45:f9:16:b2:f3:a2:a5:0f:d8:67:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:38:28:6A:6B:46:26:D5:79:63:28:FC:E8:4E:2F:50:44:B0:E4:A7
            X509v3 Authority Key Identifier:
                keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/TTgoamtGJtV5Yyj86E4vUESw5Kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:fb:29:c0:ba:44:96:25:4f:d3:d9:1b:6d:31:20:fb:86:
         30:d0:c7:f2:b5:60:b4:3f:71:5d:3e:9f:a0:10:51:a9:8b:0a:
         21:41:ab:68:9f:5d:7f:d3:1d:2b:a3:f3:de:c5:96:f2:0b:73:
         d4:66:83:e0:c4:a1:35:fb:7d:36:f4:65:eb:34:12:bc:f8:fe:
         e2:35:f5:6d:e2:16:7c:24:ab:fc:4c:1f:26:cd:bb:fd:02:a0:
         f3:c3:c1:82:58:f9:5a:29:69:70:8a:84:75:c1:bb:f2:13:8d:
         a5:84:5f:5c:94:cd:a1:ab:4c:22:d0:16:93:aa:a2:d1:6a:5c:
         41:46:30:85:98:5b:d8:e7:6c:c0:26:89:d6:b1:ca:01:5c:ba:
         0d:18:2c:d2:3f:77:64:11:ad:6f:80:09:47:d2:fb:bf:f5:39:
         89:28:09:4b:28:84:7d:b7:d5:e9:07:2a:57:3a:b6:b1:c6:79:
         b7:54:e8:a9:2a:fa:56:c9:e5:e7:f7:3a:5c:0a:dd:5f:09:ab:
         f2:39:7f:e3:2d:fc:39:f4:aa:a5:3e:2a:9e:f5:0a:b6:6b:74:
         2a:9c:bc:51:db:af:af:de:46:e2:ea:4b:55:a1:8c:28:56:dd:
         c4:a1:d2:41:61:8c:1e:7b:64:31:83:1c:75:18:50:3c:26:40:
         06:24:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org