Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/UEb4xIUiztn_J8ZkiAGFdEK1M7M.roa
File:                     UEb4xIUiztn_J8ZkiAGFdEK1M7M.roa (raw, json)
Hash identifier:          2JgYrpwg/Tfww2YuH0ach2xpSX/bBBoPejrWJzB+11M=
Subject key identifier:   50:46:F8:C4:85:22:CE:D9:FF:27:C6:64:88:01:85:74:42:B5:33:B3
Certificate issuer:       /CN=266f75f8e477da99eb7b5bab85a2fc3f460391d8
Certificate serial:       1605FE34
Authority key identifier: 26:6F:75:F8:E4:77:DA:99:EB:7B:5B:AB:85:A2:FC:3F:46:03:91:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm91-OR32pnre1urhaL8P0YDkdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/UEb4xIUiztn_J8ZkiAGFdEK1M7M.roa
Signing time:             Sat 01 Jan 2022 09:01:38 +0000
ROA not before:           Sat 01 Jan 2022 09:01:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134512
IP address blocks:        185.63.252.0/22 maxlen: 22
                          185.63.252.0/24 maxlen: 24
                          185.63.253.0/24 maxlen: 24
                          185.63.255.0/24 maxlen: 24
                          185.63.254.0/24 maxlen: 24
                          2a04:f780::/29 maxlen: 29
                          2a04:f780:2000::/36 maxlen: 36
                          2a04:f780:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369491508 (0x1605fe34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266f75f8e477da99eb7b5bab85a2fc3f460391d8
        Validity
            Not Before: Jan  1 09:01:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5046f8c48522ced9ff27c6648801857442b533b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:d2:04:07:a9:a3:b9:4e:f9:a6:b5:34:e6:
                    06:d8:19:be:44:20:26:80:87:96:eb:e6:b7:f0:81:
                    d8:29:e4:76:12:7d:59:8d:4b:7d:cb:4c:30:39:3c:
                    72:ee:68:e9:66:f3:71:49:b9:8e:a4:0c:47:3d:b1:
                    6b:08:5a:5e:e7:ec:bc:78:00:b5:65:34:5b:12:96:
                    db:2f:91:13:b5:b0:5a:b7:82:01:58:5b:38:cc:4c:
                    fe:b4:b6:8b:d2:d1:c8:32:23:22:9b:65:81:31:57:
                    3e:bd:09:92:4c:3f:fd:ee:97:cc:50:3c:54:a0:91:
                    4b:f5:fd:8f:0e:23:eb:e2:a8:ad:09:84:c3:dc:32:
                    f9:0c:0e:da:60:57:4a:38:13:97:34:e8:3d:a5:26:
                    cc:f6:ad:40:73:55:e4:58:e9:8d:82:43:a0:80:7d:
                    9b:0d:6f:bb:40:87:ca:55:f0:9d:4d:3f:24:df:d7:
                    f6:f4:31:81:7b:eb:f3:2d:a8:b0:58:09:8f:cb:fe:
                    90:c7:d5:89:47:63:1a:3d:5e:09:d1:20:06:fc:df:
                    08:14:6b:fd:6c:15:10:47:8b:bb:17:69:bf:6f:a3:
                    c2:0f:8f:e1:87:b6:fd:3b:c7:d2:26:ff:00:7c:b7:
                    ba:51:2a:d3:b7:8c:29:c0:df:5e:ba:81:79:96:f5:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:F8:C4:85:22:CE:D9:FF:27:C6:64:88:01:85:74:42:B5:33:B3
            X509v3 Authority Key Identifier:
                keyid:26:6F:75:F8:E4:77:DA:99:EB:7B:5B:AB:85:A2:FC:3F:46:03:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm91-OR32pnre1urhaL8P0YDkdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/UEb4xIUiztn_J8ZkiAGFdEK1M7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.252.0/22
                IPv6:
                  2a04:f780::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:69:c6:03:57:19:c0:43:8a:9f:a7:81:fb:43:39:88:96:3d:
         1f:70:2c:30:eb:7b:cf:1a:fd:be:db:f0:49:5e:f4:32:8a:f2:
         40:91:30:06:94:71:2f:38:09:a9:12:f1:a4:c8:84:d6:7e:6c:
         fd:45:cf:83:fc:a5:bb:80:e6:90:8d:1a:ec:5d:f2:d1:71:9d:
         4c:f4:0b:36:69:79:ec:3d:81:62:cd:03:25:1c:bf:15:be:f4:
         1e:ae:16:a8:c0:82:62:85:d6:b7:cd:14:4e:fb:4a:75:99:2c:
         bb:38:09:33:e0:64:94:23:9a:9f:5f:c2:81:77:17:fc:a0:23:
         c5:28:ec:22:7a:08:b2:d3:8b:aa:30:52:0e:59:74:2d:42:bf:
         5e:a0:ce:cd:27:be:ff:64:e0:32:0e:3b:2a:d4:ab:f9:01:d5:
         00:a7:41:4c:a6:1c:60:9b:54:b9:ea:04:8f:f5:b3:96:21:fb:
         fa:45:8e:67:54:2d:4f:80:8e:e3:00:00:42:7d:66:8c:bf:79:
         9a:42:0f:bd:60:f2:a2:93:1d:0c:02:75:f3:c4:73:cc:fb:a7:
         2a:d2:65:a3:bb:dc:e2:01:ed:fe:3c:6a:1a:91:29:23:e3:8c:
         2a:02:2d:b1:d0:4f:4c:12:9e:f6:1f:41:f1:ee:bd:f8:ba:39:
         45:59:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:22 2024 by rpki-client on console-ams.rpki-client.org