Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/jdYTAl5nq9M8Olaxpy6OnQbFA_M.roa
File:                     jdYTAl5nq9M8Olaxpy6OnQbFA_M.roa (raw, json)
Hash identifier:          xcKm1s+iNMFQOdaZQnaH/FkEjXzwdpf1gk5HXLhIqhI=
Subject key identifier:   8D:D6:13:02:5E:67:AB:D3:3C:3A:56:B1:A7:2E:8E:9D:06:C5:03:F3
Certificate issuer:       /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial:       018CC9BC02F48B69AAB11C660FA20FB3D744
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/jdYTAl5nq9M8Olaxpy6OnQbFA_M.roa
Signing time:             Tue 02 Jan 2024 10:33:11 +0000
ROA not before:           Tue 02 Jan 2024 10:33:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204739
IP address blocks:        185.242.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:02:f4:8b:69:aa:b1:1c:66:0f:a2:0f:b3:d7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
        Validity
            Not Before: Jan  2 10:33:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8dd613025e67abd33c3a56b1a72e8e9d06c503f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:16:f1:c7:09:17:5a:5a:f8:3b:21:48:d9:
                    d1:02:00:88:b6:74:8f:7c:a9:20:61:56:a8:3b:60:
                    2d:72:a1:a7:87:87:b4:cf:2f:be:a8:6a:4a:36:41:
                    fd:de:c9:88:c5:a4:3b:cf:00:a7:78:d2:03:b6:ba:
                    d6:8c:cb:09:ea:86:95:6c:52:85:6b:7e:55:4b:a2:
                    97:50:de:a1:c1:18:9b:2e:00:e2:b1:b2:4b:5d:6c:
                    86:7a:e3:3c:87:73:2f:b3:56:17:06:65:08:70:55:
                    09:e9:5a:9c:68:19:a9:9f:2e:3e:1d:89:ad:11:33:
                    72:49:25:89:53:8c:65:f6:ec:8c:94:d3:22:f3:3b:
                    61:16:74:ee:63:a6:7e:67:87:6a:b3:01:94:7a:31:
                    b3:86:ce:a1:af:a9:35:c1:2e:dd:f9:12:bb:67:44:
                    53:6d:02:58:c9:1f:43:c3:3b:50:28:ef:e0:fd:be:
                    3c:8b:33:c9:e4:ae:70:eb:bb:4b:64:82:5c:cf:7e:
                    b3:95:22:de:ea:63:cb:79:b0:6d:b7:45:37:61:f1:
                    fb:74:7d:3e:16:67:03:32:9b:00:05:f4:fc:11:4a:
                    b4:32:40:7e:e8:5e:05:b7:34:73:52:b6:ca:37:ef:
                    ec:2d:26:1b:30:6a:83:12:80:86:c3:6c:93:e2:32:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:13:02:5E:67:AB:D3:3C:3A:56:B1:A7:2E:8E:9D:06:C5:03:F3
            X509v3 Authority Key Identifier:
                keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/jdYTAl5nq9M8Olaxpy6OnQbFA_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:95:73:a0:f1:a8:37:e3:01:c8:3e:48:d2:66:b3:d9:75:
         f1:aa:0d:1f:2e:7f:5f:b1:cd:f2:ea:3b:bd:52:eb:b8:03:a3:
         9a:68:75:4a:23:9b:53:66:20:3a:5e:af:da:dd:3c:8e:62:6d:
         ee:0d:c0:ae:bd:7e:3e:91:99:b0:e7:8a:e4:d4:0c:e7:a2:5d:
         71:10:79:70:3d:82:68:2c:74:66:09:b9:52:dc:15:17:98:f6:
         9b:0c:38:61:42:fc:92:c2:24:4a:9a:fc:e8:eb:60:5a:cd:e2:
         a4:79:a0:30:a7:60:b1:2e:d4:2c:ca:3d:30:ec:ed:f4:a4:b5:
         39:67:1d:cc:31:a6:40:53:71:28:4d:a0:ff:81:06:95:ab:c6:
         52:3e:fc:34:5e:27:7a:11:a9:ce:ae:35:2f:ad:14:71:31:73:
         99:ed:42:c5:5c:3f:d2:00:c5:87:e1:83:ac:e9:4b:e2:53:ed:
         39:83:03:2e:ce:6e:e2:45:cc:28:ee:e7:f1:1b:43:12:b8:69:
         35:6e:51:89:98:fa:38:06:fd:78:36:c6:68:a4:e7:c6:ca:e6:
         2c:65:3a:a7:99:44:7d:56:02:f1:6d:74:b7:a5:23:19:53:40:
         d5:6a:f6:e7:2d:c3:c3:43:ed:df:c6:bd:29:3c:f8:5d:93:e3:
         35:05:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:30 2024 by rpki-client on console.sobornost.net