Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/Wgpxj96anZ49ZTMSDQY-T_iW1gw.roa
File:                     Wgpxj96anZ49ZTMSDQY-T_iW1gw.roa (raw, json)
Hash identifier:          KcevLYrAhvl0esXH+K/CTUb3lkMHFvLGl1N+D1uql3A=
Subject key identifier:   5A:0A:71:8F:DE:9A:9D:9E:3D:65:33:12:0D:06:3E:4F:F8:96:D6:0C
Certificate issuer:       /CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
Certificate serial:       0191A60C
Authority key identifier: 8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/Wgpxj96anZ49ZTMSDQY-T_iW1gw.roa
Signing time:             Sat 01 Jan 2022 01:55:56 +0000
ROA not before:           Sat 01 Jan 2022 01:55:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48715
IP address blocks:        185.213.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26322444 (0x191a60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
        Validity
            Not Before: Jan  1 01:55:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a0a718fde9a9d9e3d6533120d063e4ff896d60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:a8:39:34:b2:d1:17:f8:43:d0:ca:c3:fd:
                    16:ea:e7:d8:ae:70:42:36:b5:61:56:a7:ca:a6:f0:
                    3f:24:db:3a:2e:33:24:c7:b5:ea:69:16:c0:cc:f7:
                    e7:2f:a9:d5:05:c3:0f:b7:94:8f:c8:9e:4b:f7:c4:
                    15:60:c4:f3:25:1a:b6:79:8e:3e:f8:78:b7:f1:67:
                    98:a6:52:65:52:59:1a:bc:4c:98:dc:e0:65:80:1e:
                    27:99:ef:2e:f8:ba:56:95:dc:ca:40:a0:13:30:3a:
                    18:3b:a2:56:e0:76:f1:75:92:58:71:93:7d:69:4f:
                    c6:37:71:c1:ae:5d:df:c9:31:83:0a:52:4b:41:31:
                    db:0a:92:33:8d:c0:d1:00:9e:60:ab:3e:e6:88:1a:
                    37:c3:6f:c5:1d:5a:eb:01:2e:86:42:c3:9e:35:53:
                    12:fd:fd:da:82:8f:f8:84:a1:5f:5e:ee:36:7f:90:
                    6d:2f:57:db:31:c6:9f:72:1d:5b:d2:07:39:3b:97:
                    c3:5f:6f:50:68:34:9f:65:5e:0f:e3:0d:1f:5b:74:
                    11:4b:fd:83:83:eb:bd:a8:27:66:93:29:61:4a:a0:
                    67:9c:62:3a:03:b5:04:2c:cc:13:80:4c:0a:25:2f:
                    94:94:54:1e:47:1a:9f:c5:60:88:2b:3d:5c:c9:1f:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0A:71:8F:DE:9A:9D:9E:3D:65:33:12:0D:06:3E:4F:F8:96:D6:0C
            X509v3 Authority Key Identifier:
                keyid:8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/Wgpxj96anZ49ZTMSDQY-T_iW1gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/ipqwptxd57rsqtZtrB2UO9j9ke8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:c8:15:8b:1f:cb:78:f8:2b:ef:d5:ef:90:a1:b8:f9:40:
         0c:96:67:90:d4:28:e4:1a:bf:33:f3:4c:22:58:76:57:57:9d:
         64:5b:60:5a:b3:04:ab:ef:ee:89:bb:3f:79:99:b8:fb:12:cf:
         2f:ae:da:e1:a9:ea:d7:b0:5a:48:b6:e3:7d:8c:d8:9f:3a:7a:
         54:9b:c0:c5:59:b8:4a:78:1b:ef:4f:a4:7d:04:8d:f6:46:d4:
         f1:6d:b4:86:60:11:6a:7a:a8:bf:76:b0:4c:16:27:96:e6:34:
         a1:03:41:93:f9:96:e7:53:bc:9f:b5:33:7d:da:f4:6e:47:fe:
         89:67:c0:26:95:08:53:7a:18:b4:83:82:d2:4e:b6:99:f6:de:
         72:6f:56:98:a4:84:ce:a4:32:94:4e:5d:3f:91:3f:a2:6f:4e:
         88:96:83:b4:f8:19:bd:d8:56:1a:33:fd:54:2a:35:49:df:8d:
         82:9d:0c:4c:a9:23:14:79:da:c2:5b:53:be:a1:10:7d:24:da:
         51:6f:99:c9:40:9b:a3:1c:9f:7b:bc:2f:e4:6d:af:9e:b6:b9:
         a7:59:5d:68:0d:dc:7a:16:96:3f:2f:d2:4f:3e:46:d4:68:18:
         a6:02:70:e6:7a:6c:67:3e:08:19:a7:e6:e5:2a:e3:da:13:12:
         7c:30:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:54 2024 by rpki-client on console-ams.rpki-client.org