Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/O_lIKLe87J6Xf3pnz_oWFkhxR2M.roa
File:                     O_lIKLe87J6Xf3pnz_oWFkhxR2M.roa (raw, json)
Hash identifier:          YOmxVtBv6h04OIGMfl6Gj5t26FFjRSte/xpyWGRi59Y=
Subject key identifier:   3B:F9:48:28:B7:BC:EC:9E:97:7F:7A:67:CF:FA:16:16:48:71:47:63
Certificate issuer:       /CN=28642ab1790b7f5f359068e9fbb72641c5413079
Certificate serial:       CFF395
Authority key identifier: 28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/O_lIKLe87J6Xf3pnz_oWFkhxR2M.roa
Signing time:             Sat 01 Jan 2022 07:58:28 +0000
ROA not before:           Sat 01 Jan 2022 07:58:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        185.218.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628309 (0xcff395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28642ab1790b7f5f359068e9fbb72641c5413079
        Validity
            Not Before: Jan  1 07:58:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3bf94828b7bcec9e977f7a67cffa161648714763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:bf:42:a7:8c:ca:7f:27:47:8e:e3:02:32:
                    0a:fb:60:65:3a:01:4d:84:59:b8:1c:3e:57:48:85:
                    1d:28:41:83:63:ad:4e:f5:05:ca:17:da:3c:a4:46:
                    c7:0a:06:9d:00:42:d9:9c:89:3b:59:f9:ac:79:9b:
                    1c:d6:b3:4f:35:2a:59:12:89:7f:81:d2:e9:4a:c8:
                    e7:e5:7e:c3:3a:cc:3c:25:41:04:03:9a:a1:e9:24:
                    f6:83:a1:15:84:7a:0b:50:5b:b6:42:72:f4:d2:f7:
                    d3:ab:fc:97:b0:86:09:1d:8a:82:8b:66:e8:93:fc:
                    f2:06:58:49:53:c8:a5:f1:0d:e6:ef:90:b4:35:7e:
                    3d:f0:f9:f1:e7:02:6d:b9:0a:22:48:ef:f2:91:79:
                    b4:b3:eb:64:60:c7:91:c3:8a:e5:a4:43:09:6a:5e:
                    9d:e0:53:bc:21:fa:54:bd:36:6e:7f:7f:32:33:08:
                    ed:bb:6e:9c:dd:16:08:53:9a:4b:78:5e:08:14:6d:
                    42:2d:f3:d1:13:aa:5b:85:91:57:49:cb:0e:77:e1:
                    8c:97:a6:e8:d1:f0:11:74:d7:7b:56:ac:66:70:25:
                    b4:52:7a:3d:db:e7:76:b2:40:0b:84:1c:16:64:01:
                    60:1c:9d:50:33:d2:5e:fb:82:36:92:dd:e7:0a:3e:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F9:48:28:B7:BC:EC:9E:97:7F:7A:67:CF:FA:16:16:48:71:47:63
            X509v3 Authority Key Identifier:
                keyid:28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/O_lIKLe87J6Xf3pnz_oWFkhxR2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:17:cc:c5:42:36:14:a3:36:54:74:77:dd:e1:70:bd:fd:8b:
         f9:bc:d6:d4:b1:53:38:d3:15:de:dd:97:38:39:c5:39:42:ea:
         59:93:02:88:e6:27:a4:e5:9d:1e:8d:cf:b2:a4:b8:48:02:da:
         a7:c7:34:67:e3:0d:fd:5f:1f:f7:26:10:14:e1:9b:2b:28:c0:
         e2:67:38:a3:5e:3c:79:b4:f6:ee:42:8f:73:a5:d8:4d:11:12:
         62:1b:3c:8c:4a:ba:bf:59:0b:d1:f9:db:d5:8d:51:ac:9e:db:
         46:81:bf:6d:48:af:6e:2b:aa:c0:fb:3e:94:03:59:fa:88:6d:
         ed:ef:d6:f1:30:a1:1a:99:8e:26:8d:8a:03:d3:dc:b2:04:8e:
         9b:28:22:88:80:9c:3f:75:68:97:bf:fc:ed:c0:cc:98:54:88:
         ac:e9:92:b0:c4:e0:4c:74:1c:d6:bf:13:57:64:73:95:82:37:
         2e:93:fe:b6:b5:54:bc:69:8f:f1:3e:2a:69:7c:49:06:bd:50:
         fe:72:15:3a:6b:b5:d1:6c:1e:3c:86:d3:26:e2:5b:2d:01:e5:
         d5:05:f7:4e:37:9c:1d:2c:98:f9:34:9e:e1:d7:1f:59:74:6a:
         6e:48:5b:10:14:c6:d8:33:d6:a0:2b:bf:7d:a2:1e:7e:dd:22:
         a0:3b:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:28 2024 by rpki-client on console-ams.rpki-client.org