Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/G_2qgGn3Dn75UGtW04rtQT8fctM.roa
File:                     G_2qgGn3Dn75UGtW04rtQT8fctM.roa (raw, json)
Hash identifier:          VTO03VJUd59dRIkYTxOC9nkbF+RDc9rkuYvLu72BSwc=
Subject key identifier:   1B:FD:AA:80:69:F7:0E:7E:F9:50:6B:56:D3:8A:ED:41:3F:1F:72:D3
Certificate issuer:       /CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
Certificate serial:       018267BEA44B442BBE99A9734AE99EAC511D
Authority key identifier: 18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/G_2qgGn3Dn75UGtW04rtQT8fctM.roa
Signing time:             Thu 04 Aug 2022 07:25:23 +0000
ROA not before:           Thu 04 Aug 2022 07:25:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209034
IP address blocks:        185.240.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:67:be:a4:4b:44:2b:be:99:a9:73:4a:e9:9e:ac:51:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
        Validity
            Not Before: Aug  4 07:25:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1bfdaa8069f70e7ef9506b56d38aed413f1f72d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:ef:c1:5e:c2:29:f9:48:24:03:17:cf:92:
                    26:39:ae:22:38:89:e8:23:48:35:dc:ed:7a:cf:e8:
                    42:d4:60:ef:66:2e:b9:81:06:ac:2b:89:3f:25:fa:
                    e9:14:04:a7:16:c9:47:9f:16:ab:d2:fe:0e:1c:00:
                    e8:e9:07:54:a9:17:4b:e9:0a:8d:3e:9f:7c:6c:19:
                    08:04:35:d3:99:b8:90:ee:a8:15:d3:f6:de:f6:ec:
                    d3:1b:e6:73:99:44:84:2d:b9:56:29:49:22:d4:8d:
                    62:34:1c:c7:21:b3:a5:39:67:41:70:a7:52:da:a5:
                    99:fa:fa:25:65:c8:52:93:c3:84:b8:ae:27:ff:ad:
                    77:13:a0:c7:c0:c4:65:e5:d2:27:37:d1:80:13:51:
                    90:e3:41:6c:d1:a3:92:cb:d2:cf:f3:81:e3:8d:bc:
                    28:52:f3:21:f8:b2:23:3e:f7:17:8d:cb:70:3f:90:
                    df:ff:72:64:7c:5f:bb:22:8b:41:1f:c4:d9:dd:74:
                    68:7e:25:48:93:bf:a4:2d:85:0b:af:02:38:f5:48:
                    ff:1b:2f:1a:16:5a:55:7f:1c:80:83:f7:6e:e6:85:
                    54:6c:fa:59:8c:59:00:66:8e:2f:15:33:f2:1a:8a:
                    57:1b:7c:18:0c:ab:a4:db:37:b5:76:a1:d1:cd:6f:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FD:AA:80:69:F7:0E:7E:F9:50:6B:56:D3:8A:ED:41:3F:1F:72:D3
            X509v3 Authority Key Identifier:
                keyid:18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/G_2qgGn3Dn75UGtW04rtQT8fctM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:84:ef:0d:a4:88:64:5f:d4:a7:8c:10:94:58:b9:cc:03:ea:
         58:f6:26:80:9d:d4:14:b9:4a:28:9f:a3:22:cc:dc:f6:09:5f:
         15:43:d5:12:64:e8:29:74:d4:a2:11:ab:23:0f:89:00:7d:3f:
         0d:00:d2:ec:a4:ae:79:c5:f5:92:85:f8:1f:60:88:22:21:92:
         dc:a8:45:37:81:73:45:09:b4:6a:41:28:ac:b9:1b:e1:09:62:
         bb:1a:56:10:52:8c:d3:c9:8a:e8:1d:39:64:9f:a2:73:5f:bd:
         70:ce:51:9b:12:4c:ce:b8:cf:80:b4:a5:21:86:72:63:99:4b:
         ad:66:d5:7a:f5:ff:e0:30:d2:a5:2b:c3:65:a7:5d:d0:4b:c0:
         43:e6:7d:88:d6:5c:18:18:78:76:b9:ed:b8:48:32:3d:db:ba:
         17:fb:73:0b:ce:92:3e:12:7c:f8:73:7a:79:bf:67:36:81:29:
         7b:51:9a:50:55:a6:1c:6c:41:82:48:d2:c9:89:e2:52:d1:c5:
         aa:9b:d2:d7:22:65:0a:12:69:df:2d:c9:30:93:dc:60:d8:c9:
         fb:e7:c5:9d:f7:7e:c4:c2:44:99:2d:b1:e4:19:61:be:a7:5e:
         f0:9e:dd:8c:4a:40:f6:75:ab:5f:11:f0:0b:9e:4f:17:54:ad:
         dc:e4:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:30 2024 by rpki-client on console-ams.rpki-client.org