Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/MYd6QTTj_bUUr111ASK9H-e8HfE.roa
File:                     MYd6QTTj_bUUr111ASK9H-e8HfE.roa (raw, json)
Hash identifier:          uda7e1iZ7QNknrZiqg6zimq09HUQ+Ub4Fa5KKZO44FA=
Subject key identifier:   31:87:7A:41:34:E3:FD:B5:14:AF:5D:75:01:22:BD:1F:E7:BC:1D:F1
Certificate issuer:       /CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Certificate serial:       89C679
Authority key identifier: A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/MYd6QTTj_bUUr111ASK9H-e8HfE.roa
Signing time:             Sat 01 Jan 2022 01:54:48 +0000
ROA not before:           Sat 01 Jan 2022 01:54:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        212.18.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9029241 (0x89c679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
        Validity
            Not Before: Jan  1 01:54:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31877a4134e3fdb514af5d750122bd1fe7bc1df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:0b:43:0f:69:3b:26:05:1b:72:91:a5:01:
                    24:c3:13:66:03:80:f8:7f:27:8a:a8:87:e4:23:1b:
                    d5:29:1e:db:4e:82:c1:35:59:67:e1:c6:bd:f4:22:
                    05:99:5d:8a:5f:ee:fc:db:6d:5c:18:3e:10:f0:74:
                    de:ed:88:6d:9d:95:f0:99:60:0c:b5:89:6f:66:02:
                    27:95:6b:80:19:c5:f8:ce:74:2d:8c:8c:e8:1c:90:
                    92:35:7a:a7:5b:1e:4a:4b:07:ee:4c:c3:e9:86:f6:
                    2f:b3:9c:57:8c:ac:69:00:f5:61:55:70:4d:cd:a8:
                    db:3e:9b:c9:d6:61:54:7e:77:ec:e9:c7:b1:f3:aa:
                    50:ae:58:49:53:20:fd:50:fe:0e:39:92:43:37:96:
                    e1:4b:42:de:b9:e9:30:dc:6c:57:69:02:51:4e:79:
                    58:f8:ef:7a:42:7f:00:d3:82:9b:56:17:63:93:e7:
                    3a:85:1d:6d:c6:6f:5b:28:cc:c9:f8:1c:b5:eb:a9:
                    70:54:31:55:f6:96:2e:e6:90:ce:43:10:9b:36:db:
                    b0:c1:15:dc:d6:33:06:74:60:c5:9e:51:b0:28:9e:
                    f2:7a:52:86:7f:80:31:e5:09:63:0e:e7:17:e9:85:
                    6b:29:50:9f:8b:b1:d2:78:4b:cf:c3:b3:c9:a5:fe:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:87:7A:41:34:E3:FD:B5:14:AF:5D:75:01:22:BD:1F:E7:BC:1D:F1
            X509v3 Authority Key Identifier:
                keyid:A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/MYd6QTTj_bUUr111ASK9H-e8HfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:94:d4:78:a7:4d:28:ed:95:f5:4c:24:31:29:72:b3:1f:42:
         54:71:16:f2:8e:bd:cb:9c:5c:fc:e0:a3:ca:a8:43:4d:50:fc:
         bd:4f:3f:83:ce:5d:a2:0c:d3:07:fa:d7:4d:a3:b4:47:b1:b5:
         7d:88:fa:09:d9:d0:45:68:f4:9d:29:cc:59:4f:83:e0:32:77:
         42:a6:63:cc:27:ca:c7:8f:a0:73:c1:2b:07:2a:8a:86:e5:0b:
         7f:d8:d6:fc:40:ed:13:44:36:55:17:a8:2d:b7:f3:ed:26:18:
         4b:68:ab:ba:b4:90:86:0e:0d:4d:ae:40:b7:41:85:ae:3e:48:
         88:07:12:a6:fa:72:90:0b:ab:c0:a1:55:3e:1a:d2:73:75:51:
         f0:b8:dd:60:22:e0:dd:8b:e3:97:60:1b:35:db:26:53:0f:9a:
         64:eb:d8:8e:d2:58:e9:c7:ab:18:b9:87:6f:47:fd:d7:2c:c8:
         9c:42:fc:46:ba:5f:fe:fe:eb:7c:eb:2c:6f:e9:ad:83:b1:6a:
         24:e3:48:05:c3:f2:d7:6a:00:51:d0:bd:d6:39:bf:10:dd:f0:
         04:10:4e:62:10:f7:cd:5c:d9:e7:3a:e6:17:3b:12:a6:af:c3:
         ab:6a:4e:64:9b:3b:2e:86:7e:c1:25:ce:14:42:f2:43:1f:b7:
         a4:aa:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:47 2024 by rpki-client on console-fra.rpki-client.org