Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa
File:                     wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa (raw, json)
Hash identifier:          kmnUjddDA93qa0ma/ycdkwe6YDzl/9P9byNUMXgRo/I=
Subject key identifier:   C0:F8:D9:AD:0F:42:39:7D:47:C6:6F:48:E3:FE:9E:DD:80:C5:4D:39
Certificate issuer:       /CN=ddf4872dc2891fba3953dde1f4b744a45dd53d2c
Certificate serial:       0FDEE795
Authority key identifier: DD:F4:87:2D:C2:89:1F:BA:39:53:DD:E1:F4:B7:44:A4:5D:D5:3D:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fSHLcKJH7o5U93h9LdEpF3VPSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa
Signing time:             Sat 01 Jan 2022 13:01:44 +0000
ROA not before:           Sat 01 Jan 2022 13:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60350
IP address blocks:        185.183.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266266517 (0xfdee795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf4872dc2891fba3953dde1f4b744a45dd53d2c
        Validity
            Not Before: Jan  1 13:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0f8d9ad0f42397d47c66f48e3fe9edd80c54d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:68:b3:80:a2:50:3d:11:56:b1:01:1a:1d:
                    b5:cb:7e:11:5f:3f:e4:50:53:10:b9:f8:7e:03:5f:
                    b5:dc:54:3b:ee:0d:3f:3b:bc:2a:12:91:fb:2d:61:
                    5d:d2:7c:8b:52:6f:bb:39:71:d4:55:20:47:e1:62:
                    ed:08:30:db:a6:bb:1f:d6:ff:e9:1d:df:fc:3b:d3:
                    36:35:e3:c3:f2:de:39:bd:29:b1:5e:4b:24:33:6c:
                    bf:57:54:1f:7e:58:55:a7:67:ac:9e:a4:bf:23:de:
                    f4:a8:5d:7b:3b:d1:73:a2:7b:c9:0d:02:b1:c9:76:
                    37:1c:c7:12:c0:83:86:92:9b:97:32:3f:52:5c:9e:
                    db:b7:50:e6:eb:3b:7e:aa:ea:20:25:a3:93:70:d7:
                    aa:86:c9:f0:44:1a:77:f6:2c:f3:58:bc:80:55:cf:
                    bf:ba:05:c3:4c:a4:a4:83:28:cb:4b:41:48:01:c2:
                    be:e3:5d:95:ba:70:a2:c7:36:e5:5a:e2:6c:74:14:
                    0c:42:ec:18:fe:47:d2:9e:92:c8:c8:0f:1b:ea:9a:
                    07:9e:30:e0:6d:63:c4:28:5d:88:70:28:30:0e:57:
                    6d:a6:ba:84:e3:61:43:0b:d3:43:0d:a4:c1:40:dd:
                    68:d7:ac:63:2d:95:d2:b4:b0:67:6c:57:c2:75:a5:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F8:D9:AD:0F:42:39:7D:47:C6:6F:48:E3:FE:9E:DD:80:C5:4D:39
            X509v3 Authority Key Identifier:
                keyid:DD:F4:87:2D:C2:89:1F:BA:39:53:DD:E1:F4:B7:44:A4:5D:D5:3D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fSHLcKJH7o5U93h9LdEpF3VPSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/3fSHLcKJH7o5U93h9LdEpF3VPSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:2c:02:b2:9b:2e:e0:6b:c2:28:34:9f:e7:be:f8:fa:79:c3:
         82:31:21:4b:b0:04:2f:3e:6e:db:e7:e4:40:ae:f5:d8:61:5b:
         e0:24:d3:21:f3:fd:40:59:14:35:b2:8d:c0:e4:d4:cc:4d:84:
         8d:0b:db:3c:7d:4f:08:1d:cb:8a:78:46:b2:a8:de:7d:60:32:
         e5:85:91:f9:59:5d:d8:54:36:2e:7c:58:56:b0:79:95:a7:af:
         16:81:95:3f:3f:26:c5:07:87:09:15:e5:ae:d9:e5:45:71:30:
         f8:91:38:7d:f7:f2:98:50:34:80:48:94:50:31:a0:12:0a:89:
         99:5f:ef:a2:15:e7:d5:a8:b4:c3:ec:02:1a:af:ad:1d:d2:57:
         9b:f0:90:2e:ad:2d:fe:c9:c6:c8:04:11:46:ab:93:f3:b3:ca:
         89:a3:76:3d:57:c4:37:44:e6:07:6e:67:d6:f3:f4:47:32:ed:
         fa:07:e6:95:13:1a:05:a9:5c:9e:54:ee:51:70:30:32:4b:43:
         da:40:43:23:49:d1:32:af:6b:fc:27:9f:ab:82:87:6d:9c:13:
         a6:2e:58:18:ce:03:2b:bd:b3:f0:27:2f:d2:c5:d4:5b:55:d9:
         64:f1:12:00:8f:b1:aa:5a:33:18:c3:10:8d:11:01:2d:46:3a:
         34:aa:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:52 2024 by rpki-client on console-fra.rpki-client.org