Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/d04aGctKUMHQSMgYkEZqvMWuSGE.roa
File:                     d04aGctKUMHQSMgYkEZqvMWuSGE.roa (raw, json)
Hash identifier:          g6nAaXDsLftSdOZ4DkAhr3E03n044+nsul6/2awE9so=
Subject key identifier:   77:4E:1A:19:CB:4A:50:C1:D0:48:C8:18:90:46:6A:BC:C5:AE:48:61
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       03B92F3E
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/d04aGctKUMHQSMgYkEZqvMWuSGE.roa
Signing time:             Sat 01 Jan 2022 03:01:25 +0000
ROA not before:           Sat 01 Jan 2022 03:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39230
IP address blocks:        185.212.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62467902 (0x3b92f3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  1 03:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=774e1a19cb4a50c1d048c81890466abcc5ae4861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:49:b0:32:e1:59:e2:c1:7f:ae:76:9d:5f:
                    b0:a9:f5:a2:43:96:66:60:96:87:04:62:34:d5:c5:
                    d5:ff:d4:15:ef:81:e0:03:36:d8:f1:41:49:d9:ca:
                    ce:3d:8f:42:9f:25:1e:3c:63:58:2d:54:85:1b:7f:
                    96:e0:af:b4:49:8a:95:7b:46:ef:84:47:55:68:e1:
                    0c:78:b2:21:6b:4e:ac:be:b8:75:6b:40:4a:24:98:
                    b4:3a:4c:58:6d:66:01:36:93:af:c1:ec:b0:d4:be:
                    3e:40:2e:a2:81:33:d7:4e:e2:d4:44:43:d7:00:eb:
                    42:46:bc:04:8e:a8:58:08:e5:74:49:18:71:71:12:
                    b7:d8:d7:c8:85:5d:ca:5d:2f:5e:50:2e:88:ed:d8:
                    e9:a7:c6:9b:e2:74:26:90:2a:d7:91:e2:1f:17:8d:
                    fb:96:54:ed:94:0b:36:ea:be:95:87:ff:f4:46:7e:
                    ce:66:cd:da:e5:62:08:f0:ef:84:95:50:cd:76:a6:
                    66:1c:a2:f4:d6:d0:97:fb:c9:14:6a:3d:66:8e:96:
                    de:91:05:17:a3:64:a6:cf:5b:37:0d:b9:fa:15:24:
                    48:69:ce:54:e7:0f:3e:49:07:f5:73:09:ad:09:e3:
                    3a:9a:e8:a6:24:f3:fc:d9:2e:f7:4b:3e:36:4f:62:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:1A:19:CB:4A:50:C1:D0:48:C8:18:90:46:6A:BC:C5:AE:48:61
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/d04aGctKUMHQSMgYkEZqvMWuSGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:be:25:4f:dc:a4:d8:26:6f:e7:22:ff:f3:e9:32:9d:92:b5:
         c4:b8:89:53:ce:fb:e3:b3:38:3a:94:bc:28:7a:2e:ac:86:8e:
         bd:0f:d9:e4:eb:4d:f4:92:14:7e:e8:59:1c:bd:f2:af:d4:ce:
         d2:14:55:db:94:94:35:ea:d6:ab:1f:b2:cb:f9:66:da:cf:a8:
         0b:e0:27:38:d0:c1:15:52:17:37:00:d0:7f:8c:67:7a:4f:ad:
         53:f7:1f:84:56:9b:a9:3e:43:11:1a:4e:55:3c:35:ee:f8:35:
         61:a6:30:47:0d:36:51:e0:34:a1:6a:55:0f:26:31:66:1a:09:
         68:de:79:fd:ef:f0:74:6a:ac:cd:65:a6:5a:db:36:05:cc:18:
         99:d1:6a:da:3f:ee:2b:77:5b:1e:59:81:8d:2e:54:c3:60:9c:
         98:a5:75:96:a3:9f:30:df:9e:8e:d7:50:5e:c8:68:32:d5:8a:
         ec:8b:cb:05:2d:b5:8e:5e:7a:81:ca:75:09:cf:f3:2c:7c:e6:
         8c:fe:30:0c:f4:a7:a1:b0:a2:ff:0f:3b:37:fc:70:73:3a:cb:
         04:95:0a:ee:0b:a8:6f:19:25:16:13:0d:25:bb:0c:ad:da:15:
         40:f0:63:57:ed:f6:53:08:6b:a1:ed:6a:b4:4f:3b:6b:1d:24:
         af:03:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org