Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/X_s-ZQaZK8MYcyLFrihAEQPEYA8.roa
File:                     X_s-ZQaZK8MYcyLFrihAEQPEYA8.roa (raw, json)
Hash identifier:          RiQ2rk6nKa8QAaxVrAi2iFm90JCuSKePMfb9cpKJnMg=
Subject key identifier:   5F:FB:3E:65:06:99:2B:C3:18:73:22:C5:AE:28:40:11:03:C4:60:0F
Certificate issuer:       /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial:       0186F80ED54776EB56E571AA539AA7C9D9A1
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/X_s-ZQaZK8MYcyLFrihAEQPEYA8.roa
Signing time:             Sun 19 Mar 2023 04:09:26 +0000
ROA not before:           Sun 19 Mar 2023 04:09:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57043
IP address blocks:        185.234.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f8:0e:d5:47:76:eb:56:e5:71:aa:53:9a:a7:c9:d9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
        Validity
            Not Before: Mar 19 04:09:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ffb3e6506992bc3187322c5ae28401103c4600f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:ef:2c:56:c5:63:bb:b7:5b:37:1f:e3:1b:
                    02:ec:ea:7b:ee:60:04:98:2a:69:0b:c2:6e:66:0f:
                    3f:05:21:3d:21:0f:2a:58:f6:92:8c:bb:10:c4:69:
                    ae:ea:fb:68:b7:5e:ef:ec:2e:7e:a5:df:fa:77:1b:
                    cc:3c:84:9e:d1:10:5e:9b:8e:e0:7e:5a:29:37:e9:
                    53:1a:c8:35:f2:af:48:28:f6:91:e3:e8:ff:cd:e1:
                    45:5c:95:ce:71:d2:15:32:0d:64:96:aa:42:5b:5c:
                    14:c0:6f:61:38:33:07:a7:1c:b0:f5:51:a1:51:3e:
                    c3:d5:52:ad:fd:5f:a2:ba:9a:b0:99:5c:f6:29:24:
                    8f:a9:25:f7:28:55:a3:5d:76:51:c4:36:1f:ab:31:
                    3b:4f:0d:d3:d7:19:84:1c:82:8d:3b:d9:79:63:3a:
                    d9:8d:9c:09:a8:93:ef:d4:4c:5a:a4:28:e9:e8:a6:
                    de:9c:9f:7a:e6:6e:ed:f8:71:98:82:f1:9b:41:0f:
                    f2:12:c1:fb:b6:9a:bc:9c:c7:e7:f1:5f:c5:b0:fb:
                    c9:75:a3:38:70:ed:2d:10:3a:8b:d3:2e:db:0b:94:
                    e0:db:4a:ae:36:5e:3c:b0:5e:c3:32:b5:1f:d3:6c:
                    17:7d:21:cb:bc:12:cd:da:0c:a3:ce:e6:9e:84:1b:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FB:3E:65:06:99:2B:C3:18:73:22:C5:AE:28:40:11:03:C4:60:0F
            X509v3 Authority Key Identifier:
                keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/X_s-ZQaZK8MYcyLFrihAEQPEYA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:5b:3d:9c:ef:84:34:d5:e2:d6:ce:a6:c2:2a:ef:49:0c:
         35:c4:70:f7:ca:26:3b:f6:2a:0c:86:f2:fc:ce:1a:d3:26:87:
         f1:09:11:8d:3b:8c:62:e6:61:75:1d:14:93:25:05:39:c7:0f:
         f7:3e:af:c4:0d:25:b9:c7:23:e0:bc:6d:02:c0:a9:6d:63:61:
         3c:17:b0:8b:d2:b5:03:ac:ba:37:db:dd:2a:b0:64:0a:c3:38:
         75:57:6f:ad:c4:88:a7:4b:0b:bb:bd:84:f4:9e:fe:7b:6e:8b:
         df:e0:f8:a4:31:a7:16:f5:ad:0b:5e:75:77:a6:54:b7:74:31:
         d8:ba:79:52:79:9f:4a:f3:91:0e:b4:7f:6f:a3:d5:32:d6:be:
         f6:51:9b:a7:63:66:46:54:6d:85:26:95:92:45:fe:2a:95:4b:
         4c:33:07:b2:38:ce:9d:ae:d9:56:d7:72:45:4b:77:82:f2:4f:
         72:85:29:9e:3c:51:5e:33:ba:a9:03:80:b7:dd:db:47:71:4f:
         07:cd:2b:c5:50:d8:b4:0b:88:9a:6e:dc:69:25:9f:aa:48:c6:
         85:61:26:20:74:a9:2c:e7:34:40:f1:32:10:2c:9c:d6:37:d6:
         ac:89:36:c0:9f:aa:92:8f:15:78:1e:11:47:d5:89:08:75:f7:
         6a:64:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org