Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/rq2P8ZM2UKVQUlv5WHqeDOEcY84.roa
File:                     rq2P8ZM2UKVQUlv5WHqeDOEcY84.roa (raw, json)
Hash identifier:          Vb2VXnj2yrHw4ZbOW6d55CBQ8nFfC5TNXz3EM4vNYBU=
Subject key identifier:   AE:AD:8F:F1:93:36:50:A5:50:52:5B:F9:58:7A:9E:0C:E1:1C:63:CE
Certificate issuer:       /CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
Certificate serial:       04610F04
Authority key identifier: A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/rq2P8ZM2UKVQUlv5WHqeDOEcY84.roa
Signing time:             Thu 17 Feb 2022 13:46:00 +0000
ROA not before:           Thu 17 Feb 2022 13:46:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201086
IP address blocks:        185.204.187.0/24 maxlen: 24
                          2a10:7cc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73469700 (0x4610f04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
        Validity
            Not Before: Feb 17 13:46:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aead8ff1933650a550525bf9587a9e0ce11c63ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:fa:23:9c:50:cf:c9:06:10:32:ea:12:eb:
                    a1:af:ea:31:7c:e0:46:8c:2b:6a:1f:a5:e3:2a:89:
                    47:fe:a3:0e:9b:d3:c2:ab:fe:ba:6d:41:2f:14:3b:
                    9a:57:dc:d7:9b:06:82:29:25:64:ab:91:26:b2:03:
                    87:7a:25:ca:a7:33:6f:23:3e:c8:bd:c2:29:c5:08:
                    fa:80:11:58:01:85:bb:51:c7:a6:10:3a:dc:fa:02:
                    58:bd:c7:2b:dd:f5:cc:a5:45:04:52:a9:e5:11:bd:
                    9a:a5:0b:5b:b7:cc:0d:54:1d:d8:ac:c8:7a:f9:17:
                    42:18:23:bd:f2:50:9a:16:f4:47:84:97:cf:cb:f7:
                    ff:42:20:0c:43:26:08:8f:c7:df:f2:be:a1:d9:cd:
                    7c:b0:bb:c3:7d:ce:69:2e:56:fe:41:ef:54:8c:59:
                    68:b7:fb:33:72:2b:52:53:98:fe:c9:a1:87:d1:65:
                    73:3c:57:5d:c6:76:57:79:5e:2b:06:67:fd:e8:1c:
                    52:cb:bf:f8:d3:11:0b:28:ca:d7:83:81:b5:c7:98:
                    80:c3:ac:57:38:c1:3c:7c:18:b2:7c:ec:a1:17:68:
                    3f:50:c1:61:3e:69:9f:01:b2:fa:74:30:34:e4:f7:
                    90:09:c1:c3:06:3c:fe:53:e6:52:72:01:7f:da:a6:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AD:8F:F1:93:36:50:A5:50:52:5B:F9:58:7A:9E:0C:E1:1C:63:CE
            X509v3 Authority Key Identifier:
                keyid:A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/rq2P8ZM2UKVQUlv5WHqeDOEcY84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.187.0/24
                IPv6:
                  2a10:7cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:06:d4:72:fb:41:32:27:c1:39:a8:c6:98:31:82:67:01:
         89:d5:06:f1:1f:e9:5d:f1:df:00:67:fa:b4:bd:ef:e2:34:81:
         3b:28:ee:aa:24:74:84:14:a1:f6:39:d4:58:39:71:e7:3e:eb:
         e2:cd:bb:c8:a3:eb:e5:a6:9b:de:2a:55:1b:6e:b6:7b:2b:80:
         ea:94:ff:6f:27:a6:cc:12:b8:76:93:b4:fb:04:44:81:b4:9b:
         aa:df:e0:bf:50:0e:b0:67:09:81:23:ab:a5:55:77:62:4c:ed:
         4e:1e:31:78:db:aa:b9:2e:84:de:18:19:c1:8b:07:40:bd:84:
         a0:17:37:bb:7b:1d:df:62:d9:07:74:0e:98:5e:69:a8:39:9f:
         4b:8a:34:0a:b3:ef:d0:05:51:e8:c9:a3:34:a7:b0:e0:66:37:
         5e:d3:1d:9a:1c:54:60:f6:85:31:78:be:34:37:d0:98:ee:18:
         c0:50:6b:c4:6f:81:a8:c6:7c:20:80:0c:e7:fc:9b:7f:af:5f:
         c7:18:de:1a:a3:e3:f3:cb:40:5d:1a:db:87:4e:c5:05:11:c4:
         32:87:a9:06:01:3f:26:41:7d:be:df:a5:9f:ea:2f:af:63:3a:
         a9:eb:fe:1a:9a:ee:5d:7d:54:c2:af:bf:4b:96:eb:89:7f:49:
         b2:52:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:25 2024 by rpki-client on console-ams.rpki-client.org