Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/oaAa2gO4hW3XUyzD9-4oT1mt9zw.roa
File:                     oaAa2gO4hW3XUyzD9-4oT1mt9zw.roa (raw, json)
Hash identifier:          Drzen2SUAwQOVB3CsOHmgCkJo2RsTH/KNVovvbzpyhE=
Subject key identifier:   A1:A0:1A:DA:03:B8:85:6D:D7:53:2C:C3:F7:EE:28:4F:59:AD:F7:3C
Certificate issuer:       /CN=e84edd1dca36afb77ff89e9ae858110ab313894a
Certificate serial:       05888F2C
Authority key identifier: E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/oaAa2gO4hW3XUyzD9-4oT1mt9zw.roa
Signing time:             Fri 24 Jun 2022 09:58:47 +0000
ROA not before:           Fri 24 Jun 2022 09:58:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48504
IP address blocks:        185.117.36.0/22 maxlen: 24
                          2a04:b440::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92835628 (0x5888f2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84edd1dca36afb77ff89e9ae858110ab313894a
        Validity
            Not Before: Jun 24 09:58:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1a01ada03b8856dd7532cc3f7ee284f59adf73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:ef:40:e1:5d:b9:ee:87:35:39:f5:51:41:
                    3b:76:dd:0f:7a:be:32:0f:a3:00:4f:5d:d6:d3:15:
                    56:ad:0e:e8:0a:9e:76:66:5c:8b:7f:a4:e1:4d:f5:
                    5e:20:37:9c:01:bd:09:0c:d7:c9:23:56:02:eb:60:
                    3a:45:f1:6f:44:41:23:9a:80:62:b1:ad:a5:72:b6:
                    b7:ab:ff:5d:36:a3:d2:7b:1e:63:65:22:cc:44:05:
                    34:c2:e2:97:87:af:1e:a3:5e:73:01:50:cf:c8:31:
                    9c:fb:01:30:b3:a9:5c:cb:9d:ce:f3:56:4c:c5:17:
                    e4:6a:ec:f5:a3:eb:b8:ee:45:46:42:a8:80:ee:8c:
                    be:3d:60:c3:3a:db:97:42:98:6f:a4:01:47:18:20:
                    0a:04:95:6a:f7:0b:67:9c:28:c7:08:7d:a0:bc:af:
                    f8:4e:e4:36:a6:cb:9a:03:62:ac:2c:fe:3b:b3:4a:
                    6e:9a:3b:75:b0:09:7b:da:d6:73:f0:42:ac:c9:b9:
                    b9:25:8d:8c:16:de:d5:65:61:53:92:8f:92:85:e0:
                    12:2a:76:c1:6b:bb:fd:f5:eb:5e:7a:31:75:2b:3d:
                    cb:21:d6:ec:1d:6b:1b:6e:8c:47:02:79:c7:a4:3b:
                    11:ec:d9:60:b6:20:ec:3c:25:2b:56:74:36:5e:cf:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:1A:DA:03:B8:85:6D:D7:53:2C:C3:F7:EE:28:4F:59:AD:F7:3C
            X509v3 Authority Key Identifier:
                keyid:E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/oaAa2gO4hW3XUyzD9-4oT1mt9zw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.36.0/22
                IPv6:
                  2a04:b440::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:34:7e:3e:6d:68:9c:23:ea:10:ab:4e:72:45:26:72:87:64:
         1d:e0:2d:aa:c9:90:9b:8d:32:4a:65:2c:1a:03:62:be:e4:36:
         74:46:a1:e2:7b:8c:b1:45:61:bf:c2:c2:50:ba:70:2c:69:5a:
         d0:f9:3d:d2:3e:c7:6e:46:58:c6:9a:0b:9e:dd:e0:4b:83:af:
         b9:aa:5e:04:d3:05:d2:7e:49:d4:04:19:6d:3f:20:59:42:1e:
         23:6f:62:f0:76:28:82:d4:cd:c1:81:0e:56:fa:8e:63:4a:22:
         d8:f4:c9:f9:1c:f7:38:a9:23:cf:c6:4a:81:18:56:1e:13:6b:
         a2:5e:b4:60:7b:6f:8c:5b:b7:8d:4b:3e:6c:28:da:e3:06:95:
         0e:00:b2:d2:96:d0:af:51:33:5c:7f:a9:81:30:29:e0:7f:b5:
         59:fa:3c:a7:c2:1a:3e:a1:50:b9:0d:d2:b1:e2:37:97:ad:de:
         64:4b:c9:3c:b8:ef:8a:1f:af:ff:d9:9b:b6:4d:18:4a:66:d9:
         9d:99:70:f2:d4:d8:48:67:e0:b1:28:5c:4d:85:fe:7d:d7:1a:
         1c:1c:79:f6:fc:e0:68:e9:ec:62:49:dd:dd:fe:16:21:bc:85:
         46:be:81:14:11:73:87:bf:e4:34:a7:60:79:b6:c2:0e:8f:7f:
         10:90:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org