Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/BFzeyQSXynRRZGUQEe0sjiYDKLs.roa
File:                     BFzeyQSXynRRZGUQEe0sjiYDKLs.roa (raw, json)
Hash identifier:          H6s2vl5MtEnuoiIGNWnoBUvQ+KUYa+Saqi3kRcDkND4=
Subject key identifier:   04:5C:DE:C9:04:97:CA:74:51:64:65:10:11:ED:2C:8E:26:03:28:BB
Certificate issuer:       /CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
Certificate serial:       044B446C
Authority key identifier: A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/BFzeyQSXynRRZGUQEe0sjiYDKLs.roa
Signing time:             Wed 09 Feb 2022 12:37:27 +0000
ROA not before:           Wed 09 Feb 2022 12:37:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209711
IP address blocks:        185.204.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72041580 (0x44b446c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
        Validity
            Not Before: Feb  9 12:37:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=045cdec90497ca745164651011ed2c8e260328bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:f7:4d:e5:74:ce:28:ae:e8:ff:46:af:83:
                    7f:27:78:82:03:9b:0e:d1:92:82:1f:9d:57:2c:95:
                    c2:89:3c:72:2d:39:64:a5:f2:a0:a8:25:5a:16:70:
                    54:35:68:5b:b5:4f:ce:70:57:8e:74:24:02:06:c7:
                    42:6d:da:0d:1e:2c:9d:fa:70:1a:00:bd:a3:3c:2e:
                    6e:ad:c2:6a:5e:3d:7b:8c:29:d3:94:82:be:a1:40:
                    a5:f1:64:ff:a5:e4:30:3e:d0:94:16:6c:df:55:e8:
                    38:82:47:18:38:af:c7:e0:e5:5b:82:b6:17:03:6f:
                    ba:74:98:54:df:95:0e:f4:46:82:4c:bc:fd:08:bf:
                    e1:4c:1b:3f:6f:66:1d:86:0e:c7:e7:ab:9d:7f:7c:
                    65:d7:b9:a2:77:cb:7a:36:24:e0:9f:d1:53:a1:36:
                    98:ad:1b:38:c3:7f:b6:04:f6:b6:2b:9d:07:5f:c0:
                    50:c0:a1:de:20:a6:d7:95:9c:92:3d:b8:02:60:41:
                    59:39:2b:aa:ef:37:01:40:53:73:de:48:b5:7d:a3:
                    88:5a:99:d9:a6:e2:b7:61:64:dc:78:c7:44:90:ec:
                    52:76:3c:06:af:d5:88:e2:65:67:45:6b:f9:10:51:
                    c1:01:82:80:68:51:bd:bd:01:3e:9a:6e:c1:4d:41:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5C:DE:C9:04:97:CA:74:51:64:65:10:11:ED:2C:8E:26:03:28:BB
            X509v3 Authority Key Identifier:
                keyid:A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/BFzeyQSXynRRZGUQEe0sjiYDKLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:18:72:1a:f0:f6:0f:b0:5d:9f:d4:94:e9:cd:90:39:c3:27:
         a3:5a:95:3b:ae:d6:42:88:25:7a:fe:91:ae:0f:4b:e1:75:78:
         f5:f1:ed:95:6d:8d:32:1d:f8:b1:72:69:6c:4b:29:dc:cf:ab:
         fc:bd:87:22:cb:9c:2c:2e:79:23:aa:4e:7e:39:8a:e7:1a:bf:
         52:37:66:f0:6a:93:17:24:5f:98:c6:31:25:b7:4e:c7:b4:51:
         5b:10:ae:f4:0d:e8:4e:6b:20:8f:d7:7b:23:b7:cd:5b:b0:7a:
         bd:eb:21:92:12:54:e0:2f:4a:7e:a3:69:ed:54:41:14:b6:ca:
         20:6e:5a:b9:b7:88:ca:a3:58:c5:38:12:ed:7b:01:fd:76:9f:
         8f:b4:dc:d1:d2:01:dd:12:f8:12:50:f4:bb:ef:34:a2:73:0d:
         0d:6b:d7:c0:74:cd:64:12:1f:a7:c1:38:3d:b7:4c:10:5b:18:
         5c:ac:88:d1:17:96:e1:3c:4c:2c:54:3c:3b:51:47:ad:b3:09:
         e2:28:5c:1d:70:d8:11:b8:73:38:4a:ca:ed:1f:53:dc:a2:94:
         90:52:4a:be:ba:a3:61:77:b5:5f:7c:5e:05:70:f2:ed:94:9e:
         54:cb:13:a0:60:2f:fd:10:3f:b7:f3:43:d1:a9:fb:9e:a5:79:
         7d:96:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:04 2024 by rpki-client on console-fra.rpki-client.org