Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/j24yJ1RLhHWHXlMlGpTixWBsMbM.roa
File:                     j24yJ1RLhHWHXlMlGpTixWBsMbM.roa (raw, json)
Hash identifier:          F905WCcDFSi/hAS9fBqOFnRWTGN3pQKrrP36dTxacmk=
Subject key identifier:   8F:6E:32:27:54:4B:84:75:87:5E:53:25:1A:94:E2:C5:60:6C:31:B3
Certificate issuer:       /CN=b226c61ebed42c036da00e1903c52defb3d21a84
Certificate serial:       018451F178A64125061349A46DB5DA27256D
Authority key identifier: B2:26:C6:1E:BE:D4:2C:03:6D:A0:0E:19:03:C5:2D:EF:B3:D2:1A:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sibGHr7ULANtoA4ZA8Ut77PSGoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/j24yJ1RLhHWHXlMlGpTixWBsMbM.roa
Signing time:             Mon 07 Nov 2022 11:54:50 +0000
ROA not before:           Mon 07 Nov 2022 11:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57497
IP address blocks:        185.229.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:51:f1:78:a6:41:25:06:13:49:a4:6d:b5:da:27:25:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b226c61ebed42c036da00e1903c52defb3d21a84
        Validity
            Not Before: Nov  7 11:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f6e3227544b8475875e53251a94e2c5606c31b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:a8:54:0b:2d:e2:13:3e:0d:0c:fb:8a:07:
                    38:fb:98:a3:69:44:0e:21:d6:8d:ff:ca:57:e5:e1:
                    e9:9f:78:fa:1b:04:ac:70:a7:8f:e5:bf:4e:53:dc:
                    60:23:12:ab:dc:87:35:2f:1a:dc:35:cc:12:e3:a5:
                    3f:57:87:e9:eb:bd:df:1c:76:05:7e:3b:dc:3f:2f:
                    e1:80:8d:17:20:a5:4e:57:a3:92:1a:37:f6:23:3e:
                    9c:a0:88:b2:64:16:5a:5e:ad:12:a2:ce:8d:d2:a7:
                    76:1f:f3:08:e0:f0:d4:13:17:4e:a3:b2:02:a8:32:
                    51:7d:55:89:ef:dd:a5:49:6b:35:f4:10:e1:ad:84:
                    63:d7:56:33:4f:cb:ac:9f:ae:01:8d:d6:18:cb:c5:
                    ef:fa:95:a4:cb:b6:39:46:a3:87:59:a4:95:e3:26:
                    90:1c:4a:9a:c2:d4:de:30:28:c2:2d:fc:f2:ed:d7:
                    b0:b7:02:ca:e8:67:8e:2f:a7:1d:47:93:40:23:38:
                    60:7d:ee:00:13:82:49:bc:5d:5a:63:f5:3e:77:e1:
                    a4:77:a2:f8:49:45:37:1e:13:9b:14:10:6a:e5:b1:
                    b1:e2:f7:29:24:3a:b9:88:5c:88:04:69:63:15:1d:
                    84:e1:8c:4e:93:4a:70:21:70:1b:f7:5c:0f:54:62:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:32:27:54:4B:84:75:87:5E:53:25:1A:94:E2:C5:60:6C:31:B3
            X509v3 Authority Key Identifier:
                keyid:B2:26:C6:1E:BE:D4:2C:03:6D:A0:0E:19:03:C5:2D:EF:B3:D2:1A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sibGHr7ULANtoA4ZA8Ut77PSGoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/j24yJ1RLhHWHXlMlGpTixWBsMbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/sibGHr7ULANtoA4ZA8Ut77PSGoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:61:38:12:3a:7d:09:e2:40:a1:08:a6:08:fd:5b:d3:7b:ab:
         09:7f:01:41:b4:37:de:04:d5:fc:01:6a:92:71:1a:b4:cc:d6:
         4c:fa:f5:89:dd:11:da:01:b1:cd:76:42:da:37:1a:2a:a2:b7:
         a8:f5:42:0e:d1:03:1a:d8:eb:d3:86:14:51:e7:d8:b5:68:29:
         5b:8a:e9:96:d6:e6:a2:9e:10:8b:e5:e2:40:e2:2e:16:15:f1:
         e7:fb:4e:79:43:90:07:c4:18:14:43:cf:48:7f:cf:91:c3:81:
         f0:a3:95:3b:b9:32:dd:b2:c1:89:3e:30:a2:6d:df:06:fb:21:
         bb:dc:42:69:e3:8a:3b:e7:0b:13:20:27:90:5b:91:2d:78:ef:
         62:7b:1b:ea:e8:ee:17:92:1a:48:d6:9c:25:7d:d1:7a:a5:b2:
         5b:2f:b0:6b:97:1c:d4:8b:3e:7c:ef:dd:af:14:e0:6e:b9:4a:
         50:1a:3c:30:cd:63:13:72:91:2e:5c:e4:c4:39:67:08:7a:e8:
         d0:0b:5c:51:d8:25:5c:de:f0:f6:d4:a5:2e:65:9c:c3:f8:07:
         3f:48:34:53:6b:bc:40:2b:22:a4:4e:19:93:d7:d0:64:90:a2:
         9c:47:d0:5f:11:60:d2:dd:80:e2:3d:b9:e4:a9:b5:0f:43:99:
         70:36:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:58 2024 by rpki-client on console-fra.rpki-client.org