Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/kiaM0Ly4FAtRd8dG5IpEpmQtbt4.roa
File:                     kiaM0Ly4FAtRd8dG5IpEpmQtbt4.roa (raw, json)
Hash identifier:          3ae8zNK8+sOhkvKr2grcjS3MOOX7G8EZ2uVXIXrC+JM=
Subject key identifier:   92:26:8C:D0:BC:B8:14:0B:51:77:C7:46:E4:8A:44:A6:64:2D:6E:DE
Certificate issuer:       /CN=ed536c19a691c2f544220a9521474a8765e59cf1
Certificate serial:       018CC348AE1DD81E8B8CD2A0D636E490FCAF
Authority key identifier: ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/kiaM0Ly4FAtRd8dG5IpEpmQtbt4.roa
Signing time:             Mon 01 Jan 2024 04:29:29 +0000
ROA not before:           Mon 01 Jan 2024 04:29:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211612
IP address blocks:        185.206.83.128/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:ae:1d:d8:1e:8b:8c:d2:a0:d6:36:e4:90:fc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed536c19a691c2f544220a9521474a8765e59cf1
        Validity
            Not Before: Jan  1 04:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=92268cd0bcb8140b5177c746e48a44a6642d6ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:11:9a:a7:c0:4b:33:0e:9a:bc:1d:37:e1:
                    17:94:01:54:03:a8:83:1f:b1:c1:03:ec:b2:ae:84:
                    fb:11:21:fb:a4:db:e4:14:ce:e4:52:ca:bf:90:cf:
                    c3:3f:a0:d8:d4:6c:59:f9:14:94:13:86:eb:a7:6c:
                    5d:f2:18:e9:cb:88:0a:53:da:f0:97:ba:e0:8d:29:
                    ee:d1:27:79:f0:a6:3c:51:5f:a3:bb:19:5e:3d:a5:
                    6d:61:01:12:43:bc:65:b4:4a:6d:89:7a:39:3b:54:
                    1f:e0:42:59:c2:8f:fa:51:21:dc:70:f3:b6:d9:ee:
                    1d:d3:6a:35:19:9c:43:eb:15:48:ce:d4:8b:20:a7:
                    dc:e1:a2:f6:ea:08:48:59:4a:e3:88:12:90:cb:6d:
                    09:f5:02:0c:21:69:ae:df:cb:08:59:c0:f7:3a:56:
                    96:72:51:eb:0d:bb:5c:16:92:bb:79:96:30:27:9c:
                    fb:1f:18:0c:86:b2:81:4c:d7:b3:b3:37:90:5e:00:
                    2c:bf:f3:63:85:e2:e2:e6:d8:b3:45:f0:11:25:c5:
                    e0:8d:2d:75:de:1a:ee:15:e6:a4:1d:64:1a:53:52:
                    d5:0b:c5:03:6c:cd:83:be:8b:07:5d:1f:0f:f6:33:
                    a3:92:e3:75:23:d7:09:6d:6f:07:32:b5:12:4f:42:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:26:8C:D0:BC:B8:14:0B:51:77:C7:46:E4:8A:44:A6:64:2D:6E:DE
            X509v3 Authority Key Identifier:
                keyid:ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/kiaM0Ly4FAtRd8dG5IpEpmQtbt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.83.128/26

    Signature Algorithm: sha256WithRSAEncryption
         54:2c:82:24:f8:dc:2c:0b:45:12:f6:a7:23:d7:e2:a7:4a:7e:
         d1:49:55:18:12:fe:b3:e2:b2:2f:68:c7:8f:6c:d1:5f:a9:09:
         d0:8f:af:65:9c:e2:13:86:26:77:f8:68:91:47:0f:cc:49:04:
         cf:69:ae:23:3a:02:8e:24:35:93:95:cf:19:a7:1a:3c:7a:59:
         66:1b:a1:89:2f:40:04:ad:03:d1:3e:2d:29:b1:84:65:2b:f4:
         6b:ef:cd:d1:c2:a5:e8:ad:b7:d2:26:d1:6a:b0:27:8a:bd:89:
         71:2c:a3:53:ac:e9:71:d2:f3:fa:f5:41:37:c5:43:9b:6c:9a:
         be:30:43:39:47:08:f6:c7:c7:b7:fa:1b:7b:cd:e8:2e:62:64:
         98:93:9c:4c:cc:73:f4:dc:ca:18:49:ff:a9:b6:37:58:0e:b5:
         54:7a:81:b7:56:f8:b9:11:f2:7d:97:70:6e:50:7f:ef:36:42:
         80:9d:f0:ea:d0:7f:fe:d5:7b:08:48:cf:b6:27:ed:74:9e:87:
         ca:04:b5:d9:2e:bf:57:71:df:ef:f7:e1:9e:7c:95:c7:aa:04:
         7f:af:44:f6:19:ef:d0:75:20:ec:78:45:a6:7c:6a:1d:54:e6:
         48:ca:3b:f6:82:fa:06:0e:8d:79:09:6c:23:1a:70:87:d3:39:
         04:99:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:15 2024 by rpki-client on console-fra.rpki-client.org