Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/1-6cwypGuobG-YP2GwrpGCc5x48k.roa
File:                     1-6cwypGuobG-YP2GwrpGCc5x48k.roa (raw, json)
Hash identifier:          Td3ufM4Zp+CWdDtckpa9+iMf7jbGXayofipUzLRK6qQ=
Subject key identifier:   FB:A7:30:CA:91:AE:A1:B1:BE:60:FD:86:C2:BA:46:09:CE:71:E3:C9
Certificate issuer:       /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial:       01938BF01F4D9ABCFAFAAEECEAC03F196CD5
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/1-6cwypGuobG-YP2GwrpGCc5x48k.roa
Signing time:             Tue 03 Dec 2024 09:53:09 +0000
ROA not before:           Tue 03 Dec 2024 09:53:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12844
IP address blocks:        185.183.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:f0:1f:4d:9a:bc:fa:fa:ae:ec:ea:c0:3f:19:6c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
        Validity
            Not Before: Dec  3 09:53:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fba730ca91aea1b1be60fd86c2ba4609ce71e3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:51:54:75:8f:63:af:51:1e:40:18:42:ec:
                    92:64:a0:13:9b:d6:9a:3a:b4:18:79:b4:ae:2b:55:
                    18:f3:47:99:e0:d9:a7:fb:01:7c:0a:3b:e6:e4:14:
                    ef:c4:ef:21:5f:4f:c7:9b:00:ec:25:41:5b:ce:02:
                    4a:eb:d4:7e:fc:fc:3f:ee:ba:34:f7:a7:28:85:0e:
                    c3:af:24:da:54:26:cc:fe:16:be:be:93:76:0b:b1:
                    b9:95:67:30:00:7e:0c:9c:7b:9e:ff:c6:8c:c7:ca:
                    ea:29:46:4f:97:98:13:2d:10:f9:e7:c2:93:d8:a7:
                    7f:30:fd:1e:2a:da:25:17:ea:1d:3c:cb:ab:e0:57:
                    ee:19:a7:f8:0e:03:0b:74:ba:a7:6b:f8:87:78:17:
                    38:8d:59:60:19:01:b7:da:f9:e5:9b:50:0e:f1:fa:
                    09:a7:ef:f6:87:d0:3f:54:dd:b2:f8:5a:80:08:b2:
                    b3:82:c5:3c:6f:be:e8:7e:ed:be:26:5d:df:0a:2c:
                    8a:67:08:eb:49:6c:87:20:f4:17:fd:84:4e:28:11:
                    2b:61:4a:ec:32:5f:29:0a:d0:58:17:f3:1b:15:7d:
                    8e:83:0e:d6:86:4d:e2:21:27:ca:99:3c:d0:4e:f4:
                    1a:b1:5a:51:1e:bf:19:80:89:cb:f0:ac:15:e4:c3:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:30:CA:91:AE:A1:B1:BE:60:FD:86:C2:BA:46:09:CE:71:E3:C9
            X509v3 Authority Key Identifier:
                keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/1-6cwypGuobG-YP2GwrpGCc5x48k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:36:c5:10:94:8f:22:8f:1a:f0:ba:ba:08:81:50:4c:70:fc:
         ca:30:9a:71:d6:4b:2f:bc:e0:26:df:df:d1:d0:e9:b4:55:7b:
         55:65:1e:e6:b1:12:22:14:5d:a8:5d:1e:1d:ac:e8:cb:e7:aa:
         07:05:d5:f9:df:3c:74:0d:ef:b5:60:4c:b6:d9:12:39:89:5a:
         18:fd:a3:3a:b9:d4:b6:b8:ae:6f:94:8c:c4:c9:b6:fc:ca:07:
         56:57:36:e8:44:54:40:60:dc:8d:ee:29:73:e3:12:67:a3:23:
         a1:3b:e8:b5:78:c4:0b:a0:1e:c9:25:c1:98:4a:fb:41:94:2a:
         9a:6b:c8:ac:24:4b:be:30:b8:fa:7e:94:74:d7:ea:48:8b:cd:
         d3:83:fc:4e:4e:36:a0:8f:28:f7:3a:3e:77:04:e5:1f:f9:b8:
         32:78:27:06:43:f2:17:3c:88:7d:3b:26:02:0a:04:7d:75:40:
         6b:d0:b9:63:f1:95:f1:3b:d3:40:d9:76:9f:de:27:6f:f3:18:
         42:43:bf:8e:9d:34:19:10:eb:f5:69:74:85:8a:f2:ef:13:32:
         41:42:77:fb:d6:e5:0c:f1:09:e3:9f:1d:d1:8c:47:02:62:0e:
         d4:1d:1f:ae:9d:ea:45:e7:6a:fc:5e:5b:d9:44:b3:b7:5a:bc:
         f6:94:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net