Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/YD64qgA4hNlTkTio-UL_080hjSo.roa
File:                     YD64qgA4hNlTkTio-UL_080hjSo.roa (raw, json)
Hash identifier:          rIH9i5iAl5ztUNMMED2PcjWti6ie+pzuVNulgb0fg5A=
Subject key identifier:   60:3E:B8:AA:00:38:84:D9:53:91:38:A8:F9:42:FF:D3:CD:21:8D:2A
Certificate issuer:       /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial:       0822A8D4
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/YD64qgA4hNlTkTio-UL_080hjSo.roa
Signing time:             Sat 01 Jan 2022 15:58:37 +0000
ROA not before:           Sat 01 Jan 2022 15:58:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205090
IP address blocks:        185.232.169.0/24 maxlen: 24
                          185.233.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136489172 (0x822a8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
        Validity
            Not Before: Jan  1 15:58:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=603eb8aa003884d9539138a8f942ffd3cd218d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:37:6c:a8:c1:ee:2e:04:f2:f7:9a:7d:43:
                    96:91:1b:f6:85:70:17:02:21:6b:c0:89:19:b2:57:
                    b9:66:c6:d3:ac:fa:15:12:91:72:78:cb:6b:a1:37:
                    fd:f9:b5:60:24:ac:4c:f4:2c:03:16:a9:34:2b:90:
                    4c:04:9c:65:88:03:a2:f5:28:85:51:97:0f:3d:cc:
                    b8:e9:22:30:7a:97:88:66:64:f7:99:cd:71:8f:70:
                    39:46:5b:d1:d7:e3:f9:b5:9c:b0:bb:6a:38:de:26:
                    82:d7:d2:7a:2a:f0:b1:2d:12:0d:1f:f3:0d:d8:48:
                    32:9d:73:da:ec:13:6b:df:f3:54:65:c7:07:5b:f6:
                    e3:db:9f:5d:82:85:63:9f:40:ea:b6:69:5e:ed:a1:
                    4d:02:c6:da:72:a2:df:7a:78:f4:58:01:77:01:07:
                    3c:58:7a:10:14:ee:38:3f:08:4b:f3:f4:b8:ea:36:
                    71:8a:d7:d2:1f:4d:dd:11:53:43:9c:76:34:66:09:
                    cf:d8:eb:58:c2:f9:9e:11:5b:73:57:e3:d3:18:70:
                    e0:bd:8f:c5:9d:a8:b9:7e:e1:8d:48:22:9f:7a:5d:
                    ac:33:70:f4:6b:d2:16:64:3f:1f:04:89:39:2c:7f:
                    8c:ce:90:0f:85:e3:a4:05:89:2c:f3:0f:b9:f4:91:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3E:B8:AA:00:38:84:D9:53:91:38:A8:F9:42:FF:D3:CD:21:8D:2A
            X509v3 Authority Key Identifier:
                keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/YD64qgA4hNlTkTio-UL_080hjSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.169.0/24
                  185.233.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:dd:b6:95:4f:ea:18:f0:fa:e1:5e:d9:0c:26:f7:c2:d5:
         26:06:96:8e:e5:b0:42:eb:6f:25:69:71:74:83:8f:ec:c1:08:
         29:4e:b4:c9:4a:d1:46:28:cb:a3:ab:fb:b9:b2:85:8a:dd:50:
         e9:04:06:3f:87:be:c5:e9:c0:16:40:84:29:a1:97:f1:7d:00:
         50:86:3d:8a:c9:b9:62:a1:0a:2b:1d:c5:77:5e:ec:71:a1:7f:
         7e:b1:a9:d6:88:5a:fc:cd:13:93:5a:91:0f:bd:86:4c:5f:bf:
         60:2e:a4:11:0f:f8:dd:4f:9d:a7:19:56:0b:45:f1:41:fa:5d:
         68:6a:d9:40:05:fa:61:2a:10:62:37:36:a1:d9:1e:cf:4f:a1:
         a0:b9:2c:01:56:9c:65:43:13:78:26:5a:64:26:9f:d7:09:77:
         42:08:b2:be:cf:21:ca:b8:26:02:39:4a:20:94:d9:a2:27:06:
         c7:76:2c:73:a0:f3:83:a2:43:f4:86:a6:9e:62:8f:d4:93:83:
         c4:0c:43:9e:0c:49:9c:ac:cb:7b:24:07:34:55:7c:53:7a:1b:
         bc:ac:9d:e6:41:aa:59:8d:a2:a5:eb:e9:2a:b4:6f:1a:03:d4:
         e2:cd:c0:f2:b8:d5:4d:aa:6c:59:23:7c:cb:5c:b9:16:7c:ed:
         90:f0:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org