Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/SnedMklWeBPTdLkGEpJH618iWHA.roa
File:                     SnedMklWeBPTdLkGEpJH618iWHA.roa (raw, json)
Hash identifier:          q81L8huPc2l2zowXIGHtU7wBr6o1ZHEaA5oQ4ZDyd+4=
Subject key identifier:   4A:77:9D:32:49:56:78:13:D3:74:B9:06:12:92:47:EB:5F:22:58:70
Certificate issuer:       /CN=612102634204bfc1aa7ce81d70187f6b764ab10d
Certificate serial:       06A2D51C
Authority key identifier: 61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/SnedMklWeBPTdLkGEpJH618iWHA.roa
Signing time:             Sat 01 Jan 2022 11:54:52 +0000
ROA not before:           Sat 01 Jan 2022 11:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207334
IP address blocks:        185.243.206.0/24 maxlen: 24
                          2a0c:1a40:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111334684 (0x6a2d51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612102634204bfc1aa7ce81d70187f6b764ab10d
        Validity
            Not Before: Jan  1 11:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a779d3249567813d374b906129247eb5f225870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:c5:1c:8e:f1:56:91:89:7f:dc:9c:c0:0e:
                    4a:32:5b:6e:79:81:b0:11:0f:32:8e:2c:38:54:74:
                    18:8c:91:8a:aa:30:fa:46:0e:46:97:d0:32:fb:3d:
                    f7:21:2e:1f:b9:ad:79:84:0f:5b:47:76:9a:c0:0e:
                    eb:60:4f:56:0c:23:11:f2:a7:33:5c:95:5b:5d:f6:
                    bb:4f:5c:0d:d0:c1:f9:12:36:4a:c0:8b:32:f0:c2:
                    5a:a9:b2:a3:a1:c8:1d:a2:ac:f3:98:3c:ed:0d:de:
                    26:37:d0:02:a8:8a:58:2f:9c:e6:07:3a:c6:fc:ba:
                    85:c4:40:f2:cd:fe:c4:27:46:59:c0:8f:a7:fb:6d:
                    2a:45:d2:67:b8:7f:ad:c3:a7:0e:ee:4e:7b:20:ba:
                    7a:11:1c:03:05:d6:c3:86:9f:13:1f:70:3c:0f:f1:
                    84:ec:e6:74:81:95:6d:56:7f:af:d4:95:2b:df:5d:
                    35:42:06:98:54:ec:fc:d4:c9:21:e3:96:09:bb:d2:
                    37:3f:ad:59:19:7f:49:32:37:58:ea:01:13:14:7d:
                    e0:a2:96:79:75:5b:8f:d4:ed:e8:3c:ef:63:bf:a2:
                    43:f9:4f:e9:08:f6:ab:41:44:17:fa:1f:f9:cb:60:
                    10:fa:78:bc:de:95:25:9b:14:f0:4f:77:8e:31:fc:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:9D:32:49:56:78:13:D3:74:B9:06:12:92:47:EB:5F:22:58:70
            X509v3 Authority Key Identifier:
                keyid:61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/SnedMklWeBPTdLkGEpJH618iWHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.206.0/24
                IPv6:
                  2a0c:1a40:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:07:65:fb:09:d2:86:60:87:ad:c0:63:ec:ab:29:9a:bd:75:
         64:92:ed:7a:46:c9:48:45:e0:7c:24:e3:4e:c7:9a:cd:cc:68:
         3d:b2:75:26:2f:ac:96:f1:c3:a5:a2:2a:c1:fe:b8:a4:85:e6:
         ef:9d:9d:c0:e8:41:d8:07:8b:7a:08:50:92:37:be:a1:c9:98:
         ab:1b:a5:d9:25:3c:54:1c:e6:f7:b1:3c:d4:36:43:35:54:a4:
         fd:6a:b9:ab:89:8e:07:c5:5d:a5:93:f9:97:f4:24:91:8d:b7:
         5a:47:19:e1:2d:b9:87:1e:fd:0b:a7:a5:3f:40:fe:ce:f9:0b:
         b4:69:75:d3:e5:84:9f:84:9f:68:5f:6a:bf:0f:ae:15:27:b5:
         44:2b:a0:13:cf:88:bb:80:b3:00:b3:cd:58:b5:12:b0:5f:71:
         c0:3d:3e:f9:fe:89:bf:67:c0:8e:b4:d4:16:ce:1b:f0:c6:57:
         bb:b5:f2:d2:2a:dd:8c:8e:5d:16:e1:41:05:d3:97:88:7b:38:
         ab:70:cd:1b:8f:98:73:df:cf:d7:3e:14:d1:56:d8:95:96:92:
         73:42:0f:d0:c4:aa:58:3f:c1:1a:98:38:12:05:d7:2d:e1:40:
         25:91:17:1a:95:13:a1:e4:80:26:0c:ea:30:8c:e3:da:1a:4c:
         5f:77:69:00
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEBqLVHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTIxMDI2MzQyMDRiZmMxYWE3Y2U4MWQ3MDE4N2Y2Yjc2NGFiMTBkMB4XDTIyMDEw
MTExNTQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE3NzlkMzI0OTU2
NzgxM2QzNzRiOTA2MTI5MjQ3ZWI1ZjIyNTg3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3FxRyO8VaRiX/cnMAOSjJbbnmBsBEPMo4sOFR0GIyRiqow
+kYORpfQMvs99yEuH7mteYQPW0d2msAO62BPVgwjEfKnM1yVW132u09cDdDB+RI2
SsCLMvDCWqmyo6HIHaKs85g87Q3eJjfQAqiKWC+c5gc6xvy6hcRA8s3+xCdGWcCP
p/ttKkXSZ7h/rcOnDu5OeyC6ehEcAwXWw4afEx9wPA/xhOzmdIGVbVZ/r9SVK99d
NUIGmFTs/NTJIeOWCbvSNz+tWRl/STI3WOoBExR94KKWeXVbj9Tt6DzvY7+iQ/lP
6Qj2q0FEF/of+ctgEPp4vN6VJZsU8E93jjH8d4MCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBRKd50ySVZ4E9N0uQYSkkfrXyJYcDAfBgNVHSMEGDAWgBRhIQJjQgS/wap8
6B1wGH9rdkqxDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lTRUNZMElFdjhHcWZPZ2RjQmhfYTNaS3NRMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvZTc0MjQ5LTI1MGEtNDUyNC1iYzhiLTMzZTZiZDU4YjUyMS8x
L1NuZWRNa2xXZUJQVGRMa0dFcEpINjE4aVdIQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
ZTc0MjQ5LTI1MGEtNDUyNC1iYzhiLTMzZTZiZDU4YjUyMS8xL1lTRUNZMElFdjhH
cWZPZ2RjQmhfYTNaS3NRMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEALnzzjAOBAIAAjAIAwYEKgwaQBAw
DQYJKoZIhvcNAQELBQADggEBABQHZfsJ0oZgh63AY+yrKZq9dWSS7XpGyUhF4Hwk
407Hms3MaD2ydSYvrJbxw6WiKsH+uKSF5u+dncDoQdgHi3oIUJI3vqHJmKsbpdkl
PFQc5vexPNQ2QzVUpP1quauJjgfFXaWT+Zf0JJGNt1pHGeEtuYce/QunpT9A/s75
C7RpddPlhJ+En2hfar8PrhUntUQroBPPiLuAswCzzVi1ErBfccA9Pvn+ib9nwI60
1BbOG/DGV7u18tIq3YyOXRbhQQXTl4h7OKtwzRuPmHPfz9c+FNFW2JWWknNCD9DE
qlg/wRqYOBIF1y3hQCWRFxqVE6HkgCYM6jCM49oaTF93aQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org