Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa
File:                     M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa (raw, json)
Hash identifier:          B9HQRgcInIThy0NS5CcO27Q+N1HKuEB6UZqSgRqnaOU=
Subject key identifier:   33:FC:09:2D:75:0F:9F:20:05:FA:98:2A:DD:72:D5:8E:62:45:98:18
Certificate issuer:       /CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Certificate serial:       01905F7457E73F369FA03A6701BD59AF3DA8
Authority key identifier: B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa
Signing time:             Fri 28 Jun 2024 15:26:18 +0000
ROA not before:           Fri 28 Jun 2024 15:26:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197722
IP address blocks:        185.30.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5f:74:57:e7:3f:36:9f:a0:3a:67:01:bd:59:af:3d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
        Validity
            Not Before: Jun 28 15:26:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33fc092d750f9f2005fa982add72d58e62459818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:2e:b3:b1:c3:13:ba:22:55:d7:d7:ff:2a:
                    86:36:f9:83:68:2e:d1:48:e2:a1:a3:83:3e:7f:f5:
                    3f:c2:56:85:98:e4:8f:81:b4:0d:8a:23:da:75:21:
                    12:ff:1e:0e:13:f4:40:ef:1d:0d:e7:4d:f3:b4:0e:
                    6e:c6:d4:62:f4:7e:ca:2e:61:a1:60:1a:36:9b:05:
                    1c:c9:4c:88:70:43:70:3b:86:1e:ea:e2:fa:35:cf:
                    8b:f9:3d:ec:1a:12:69:21:e4:46:5e:81:a8:d0:8c:
                    47:64:60:d6:3e:19:66:96:5b:8d:bf:3e:62:03:ca:
                    42:35:67:20:d5:2c:d7:80:ce:94:cb:b1:3b:b4:9a:
                    02:60:c6:0f:1c:11:17:cf:36:f3:df:1f:59:0f:93:
                    54:57:64:91:6c:f0:64:85:8a:37:0f:82:69:05:a9:
                    cc:cb:da:4b:4c:2d:16:45:02:ea:8a:51:b1:59:c8:
                    2c:e2:4e:83:88:97:c8:d2:25:f0:78:0b:93:8e:57:
                    da:bf:82:01:86:82:9c:9e:0a:ac:36:47:a5:ac:8a:
                    a3:4e:63:d8:8d:f3:44:83:3d:c1:fc:8d:68:3c:40:
                    75:d6:bd:83:2b:cd:e5:b5:1d:d4:66:73:64:8a:f6:
                    7c:d2:ea:b5:6a:aa:80:e4:59:6d:f1:a3:ad:97:a1:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:09:2D:75:0F:9F:20:05:FA:98:2A:DD:72:D5:8E:62:45:98:18
            X509v3 Authority Key Identifier:
                keyid:B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:93:35:6d:00:20:1c:87:06:18:43:97:44:4c:d3:64:0f:46:
         5d:e9:e8:71:db:ab:12:39:b6:f5:e1:d7:54:ce:c6:89:4a:b8:
         f8:43:ed:c7:ea:48:f8:1d:bc:95:ea:59:67:24:7e:59:c4:c8:
         12:b5:6a:bf:66:fd:8c:63:5f:f0:7a:aa:91:51:f1:92:4c:f3:
         99:e7:c4:0d:7d:31:80:0c:6e:2a:d9:ad:6b:f3:44:b3:fb:88:
         4c:0e:c7:06:fe:ed:1e:68:52:30:75:42:5c:aa:21:2c:3f:0f:
         15:b4:b7:76:04:df:5a:e4:04:0b:90:60:0c:64:7b:0d:7f:44:
         e6:1e:2b:12:c6:e1:ba:a3:bd:95:8d:99:e6:01:0a:25:e0:05:
         0d:56:77:86:f4:90:68:ca:37:9d:96:6b:c0:48:8e:16:b2:51:
         1c:ea:44:0a:e9:fe:2f:42:b7:ad:74:66:59:87:d8:f8:18:a8:
         2c:25:af:88:65:8e:9f:03:af:32:f7:26:53:45:93:b4:d1:f8:
         cd:58:e2:df:42:78:5e:2c:78:b3:48:12:97:4a:e1:00:4d:ae:
         1c:70:85:51:ac:ef:db:cf:b1:cc:f8:9b:78:48:39:ba:33:09:
         99:8e:08:fe:24:3f:eb:f8:0b:d6:e6:2d:05:4a:d1:43:1a:8d:
         58:ad:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 10:58:45 2024 by rpki-client on console-fra.rpki-client.org