Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/wEdPPxREYM9PpzizgqgTAp8WPoc.roa
File:                     wEdPPxREYM9PpzizgqgTAp8WPoc.roa (raw, json)
Hash identifier:          nngEtnEkEC82j8fpKYCjd2RRDBHb+Vs+5zXTio+Rp8s=
Subject key identifier:   C0:47:4F:3F:14:44:60:CF:4F:A7:38:B3:82:A8:13:02:9F:16:3E:87
Certificate issuer:       /CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
Certificate serial:       018267BEA348714980E9A7A4319809A08044
Authority key identifier: 18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/wEdPPxREYM9PpzizgqgTAp8WPoc.roa
Signing time:             Thu 04 Aug 2022 07:25:23 +0000
ROA not before:           Thu 04 Aug 2022 07:25:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.240.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:67:be:a3:48:71:49:80:e9:a7:a4:31:98:09:a0:80:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
        Validity
            Not Before: Aug  4 07:25:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0474f3f144460cf4fa738b382a813029f163e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:41:4d:0e:b6:17:af:75:bf:1e:cd:04:ab:
                    23:af:3a:b2:44:6d:0d:36:f6:43:df:e1:08:fe:44:
                    d0:f3:7d:20:59:6e:b7:fd:39:92:da:1d:66:3c:33:
                    0b:a6:41:19:ce:86:cc:c9:10:c2:f7:7e:97:66:2e:
                    6d:4b:43:bc:12:1c:7e:24:41:57:41:16:e1:37:c7:
                    28:1c:32:ca:51:59:7f:26:8c:05:0f:b6:01:d0:d3:
                    ea:a3:01:a4:79:2b:2a:31:f6:a0:6f:5c:5a:95:05:
                    d3:a1:dc:cc:9d:10:0c:5b:b3:f3:65:e3:61:09:0a:
                    87:3b:b6:20:0a:d0:4d:3f:a9:80:eb:69:e5:8a:4f:
                    b3:34:05:b5:7e:0e:09:2d:78:0e:04:9d:9f:03:18:
                    25:30:e2:11:d8:5e:29:1f:ac:0c:3e:82:7e:e2:5a:
                    5d:f8:59:89:2e:1b:3c:3f:55:c1:bb:de:e7:ff:73:
                    91:34:fe:fb:73:39:bd:80:2f:2a:c8:40:03:7f:56:
                    32:92:1e:68:b9:be:07:69:58:68:6c:07:29:1b:89:
                    fb:b6:c0:79:ec:87:5a:df:53:61:e2:fa:cb:a8:fb:
                    51:ad:94:30:e8:17:d8:39:b2:32:6e:6a:b0:e1:9d:
                    26:91:53:a8:bf:e2:7c:ec:ca:2c:99:c1:28:ca:0b:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:47:4F:3F:14:44:60:CF:4F:A7:38:B3:82:A8:13:02:9F:16:3E:87
            X509v3 Authority Key Identifier:
                keyid:18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/wEdPPxREYM9PpzizgqgTAp8WPoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:e1:7c:8b:87:ce:ff:31:7c:80:7c:b3:6c:c2:d7:41:6e:
         a1:96:fe:ee:94:ac:f1:85:bd:dd:ab:1d:dc:87:19:7b:4a:2e:
         55:ad:ab:35:d8:9b:ef:2f:31:f4:32:59:f7:44:8a:25:2c:2d:
         12:3d:e1:d9:fc:4c:b3:26:1c:18:66:2c:89:62:22:7e:5d:69:
         40:f9:6a:84:c1:bf:d6:8e:9e:0d:74:41:cf:9b:74:96:ea:6f:
         ab:17:7c:b9:fe:ed:19:34:67:f6:d7:c4:d0:40:4b:2b:47:4a:
         3d:96:6b:ee:33:53:cd:f7:8c:f8:cd:91:81:3e:85:da:6f:56:
         96:8a:9d:bd:1e:21:2b:64:8d:1a:65:8f:94:c3:0b:01:96:07:
         75:a3:5e:05:f4:92:fc:ba:6b:e8:9d:59:19:32:da:0b:5e:b3:
         48:92:ca:14:f5:bd:0b:fc:9d:5a:61:94:c8:b9:10:a3:bb:a7:
         72:26:02:60:d3:02:fd:9a:0e:3a:34:2b:d4:5e:ce:1e:e1:9c:
         27:f1:32:45:58:1f:49:99:21:19:91:e1:1a:6e:ac:99:e5:08:
         24:ae:25:d9:2a:fa:63:ce:a6:e7:1a:49:52:13:ac:4e:a0:7d:
         71:05:7e:fd:1b:b7:39:aa:b6:31:e9:df:23:d4:3a:c4:ec:7d:
         df:89:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:11 2024 by rpki-client on console-fra.rpki-client.org