Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/7M3MkoJmrC0Rdqj8-FQnH3K4oR0.roa
File:                     7M3MkoJmrC0Rdqj8-FQnH3K4oR0.roa (raw, json)
Hash identifier:          jqcK/dfwe6FlXssGi5bvlWF1VT//iG+Oj+JCd+kCJlo=
Subject key identifier:   EC:CD:CC:92:82:66:AC:2D:11:76:A8:FC:F8:54:27:1F:72:B8:A1:1D
Certificate issuer:       /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial:       0183568526F22A11430D6CF92D9433DAF967
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/7M3MkoJmrC0Rdqj8-FQnH3K4oR0.roa
Signing time:             Mon 19 Sep 2022 16:11:50 +0000
ROA not before:           Mon 19 Sep 2022 16:11:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        185.130.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:56:85:26:f2:2a:11:43:0d:6c:f9:2d:94:33:da:f9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
        Validity
            Not Before: Sep 19 16:11:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eccdcc928266ac2d1176a8fcf854271f72b8a11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:11:5b:bc:11:ab:13:a2:94:33:dc:7d:c1:
                    2a:72:61:37:d5:1d:ca:db:e5:46:a1:c9:04:18:7c:
                    b1:a8:9d:2d:93:dc:a7:10:c9:dd:4a:db:60:eb:92:
                    d6:2c:f5:4b:10:af:8c:a5:94:b2:45:a9:0f:f7:4e:
                    da:e7:ef:a2:aa:9a:d1:4f:59:63:83:58:67:7e:20:
                    0f:a3:c8:0a:68:12:a7:aa:2b:a4:bd:90:95:ea:46:
                    7b:1b:c7:9b:d4:91:73:de:59:e6:3c:06:36:76:f5:
                    10:0e:53:d6:b3:80:06:30:f7:5f:11:a1:bd:f7:c5:
                    22:59:08:94:91:34:69:51:94:7e:46:e1:8a:c8:53:
                    db:e6:cb:9e:cf:56:f4:e4:52:82:7b:fe:95:98:63:
                    c1:45:b4:fc:31:9e:51:8f:96:cd:70:7d:d6:d7:56:
                    8a:dd:6d:45:7e:b6:ee:29:20:20:bc:26:7f:0a:8d:
                    56:14:17:25:55:4c:cf:d4:e8:c4:c7:4a:ff:e5:d2:
                    41:47:b9:76:7a:54:1e:06:48:ff:ea:de:2f:3e:08:
                    dd:ae:85:26:f6:77:a2:4b:66:3c:34:94:75:78:fd:
                    84:31:1b:0d:bd:9e:86:98:45:6d:93:23:f0:ff:38:
                    19:89:dd:24:89:e0:f5:aa:dc:bc:a2:6a:80:60:de:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:CC:92:82:66:AC:2D:11:76:A8:FC:F8:54:27:1F:72:B8:A1:1D
            X509v3 Authority Key Identifier:
                keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/7M3MkoJmrC0Rdqj8-FQnH3K4oR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:37:ce:25:87:40:56:6b:aa:d2:08:71:89:2c:d1:26:aa:23:
         c2:1a:2b:b5:9b:42:b9:d5:28:2d:20:09:9a:34:12:9c:15:d7:
         ab:e7:d8:10:ff:6f:aa:60:ff:f1:6b:17:ae:8e:92:88:ce:3f:
         c9:47:fe:24:1a:b1:16:f4:5c:14:4e:27:0e:41:ef:02:d9:bf:
         1a:80:94:2d:16:b4:45:74:41:da:4a:fe:4f:96:07:00:da:24:
         14:46:e1:14:1b:03:7b:96:01:e4:35:42:c5:27:7b:a6:f6:e5:
         f9:71:2e:1a:3c:f5:86:2a:a1:81:de:cd:b5:f2:3a:b7:5a:5a:
         c4:c0:f4:27:b6:63:dc:ac:de:2e:4f:9d:f1:82:2c:36:36:cf:
         9c:98:0c:ca:27:71:68:80:85:09:9e:35:bd:5f:c0:35:1f:fc:
         24:5f:13:15:ce:26:73:a2:6c:58:ce:d1:c4:a0:0f:5c:6e:92:
         85:8d:a7:9e:9a:1c:e0:7f:b0:db:b1:1c:dc:86:aa:49:64:39:
         b5:26:8f:de:88:a5:e5:25:99:7a:2e:21:93:f6:d0:0f:aa:81:
         a5:80:4a:1c:e4:f3:33:ff:45:92:7f:45:5e:69:1f:64:ed:f9:
         1e:44:60:21:52:b3:20:3e:98:b1:79:a5:28:46:48:73:a1:e7:
         b3:6a:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net