Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/wDpdXanzOAo7lLwspCJQs5Shedo.roa
File:                     wDpdXanzOAo7lLwspCJQs5Shedo.roa (raw, json)
Hash identifier:          vxDBIFs5ThZYxZHsIGvZ34cYyqRHwhXAakLVOOI/nJA=
Subject key identifier:   C0:3A:5D:5D:A9:F3:38:0A:3B:94:BC:2C:A4:22:50:B3:94:A1:79:DA
Certificate issuer:       /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial:       082094F6
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/wDpdXanzOAo7lLwspCJQs5Shedo.roa
Signing time:             Sat 01 Jan 2022 15:58:36 +0000
ROA not before:           Sat 01 Jan 2022 15:58:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202402
IP address blocks:        185.233.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136353014 (0x82094f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
        Validity
            Not Before: Jan  1 15:58:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c03a5d5da9f3380a3b94bc2ca42250b394a179da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:df:3b:7f:19:b9:44:c3:fc:5e:b6:66:a0:
                    94:0e:7f:36:20:e2:e8:f9:e1:ca:65:8e:b7:7d:b9:
                    19:db:75:42:ee:87:ad:85:a5:be:01:18:20:48:36:
                    8c:e4:94:da:54:fd:9c:07:d2:c3:e8:e2:d5:6a:24:
                    e7:6c:0b:e3:a6:be:80:17:bb:d1:60:69:ff:f7:0d:
                    f7:d9:48:2b:11:2f:ec:23:f8:4f:1a:c5:77:e5:b6:
                    7a:ec:18:5b:1f:83:bc:03:78:06:dd:8a:1b:82:97:
                    39:5c:a6:a3:49:41:8e:4c:6e:3f:cf:0d:20:96:61:
                    e6:2c:92:14:66:6e:eb:8c:8f:8c:17:e4:35:8d:a8:
                    fc:72:06:8e:13:e3:40:cc:8e:05:fd:f0:56:f9:b7:
                    ba:b7:9e:bd:35:f3:fe:6d:7d:c6:7a:98:01:31:a2:
                    56:27:de:82:0b:91:9e:92:b5:bd:0a:3a:b9:7d:16:
                    6a:2d:1e:f7:70:c0:1f:82:c5:15:68:cd:ae:82:9b:
                    96:0b:f0:49:a5:0c:43:e9:d5:9d:07:62:f9:80:c1:
                    c1:ea:b3:e6:fd:2c:bd:6d:b9:07:a0:36:de:70:de:
                    67:ae:73:e7:70:17:5c:97:4a:93:8c:32:28:dd:92:
                    b6:f6:e1:fc:cb:4c:2e:59:7d:4a:ac:38:e7:45:af:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:5D:5D:A9:F3:38:0A:3B:94:BC:2C:A4:22:50:B3:94:A1:79:DA
            X509v3 Authority Key Identifier:
                keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/wDpdXanzOAo7lLwspCJQs5Shedo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:77:14:ac:63:d9:6c:07:81:7d:db:60:4a:6c:0d:84:05:2a:
         5c:36:11:aa:4a:45:2b:c5:6a:a2:b4:18:97:63:b8:7c:57:a9:
         e4:04:54:98:fb:da:1e:e4:90:ed:63:9b:81:c1:ca:b1:41:f6:
         50:b2:77:1d:d2:64:44:59:44:83:c8:ef:6e:70:f8:8a:0a:32:
         ef:5c:a0:86:c0:05:30:3d:f4:0b:99:ac:81:5a:45:05:d0:6b:
         12:0e:de:1b:a3:4c:3f:67:98:8d:d6:b6:a5:48:b7:44:c8:1f:
         01:69:1a:90:af:f8:3e:61:49:55:4b:23:32:82:4b:3b:67:f3:
         75:cc:78:eb:f0:7e:9f:39:1e:d4:64:41:12:ec:6c:72:61:d1:
         41:4c:ec:8f:f0:d9:c2:4f:de:91:fd:0c:28:ef:7d:65:d5:4d:
         06:2e:8a:19:cb:e7:8e:7a:e5:ce:9e:bf:18:9f:14:25:c5:c0:
         97:cd:0d:44:a2:83:70:9a:1a:49:32:61:b4:4c:e3:5e:3e:72:
         b4:2d:2a:09:1f:48:8a:1f:bc:2c:48:1b:55:c3:3a:5a:68:c2:
         f3:04:56:df:19:8f:37:a5:04:15:b6:34:4e:21:78:b7:19:0a:
         40:6c:3a:b8:0e:d7:b1:16:41:55:a4:b5:b7:37:1d:dc:85:e5:
         d4:1b:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org