Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/1-OGGl4TuCdZsaCEJlMScYoqfRCk.roa
File:                     1-OGGl4TuCdZsaCEJlMScYoqfRCk.roa (raw, json)
Hash identifier:          DkLnBngFwBjVrWZKtSX/qjRf8hajCDtWmBnbbUzE8lI=
Subject key identifier:   F8:E1:86:97:84:EE:09:D6:6C:68:21:09:94:C4:9C:62:8A:9F:44:29
Certificate issuer:       /CN=7089ddca091c0ae3402eb2531f77fe63a0262763
Certificate serial:       01856E41CF180390157A860152CB319269EB
Authority key identifier: 70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/1-OGGl4TuCdZsaCEJlMScYoqfRCk.roa
Signing time:             Sun 01 Jan 2023 16:54:44 +0000
ROA not before:           Sun 01 Jan 2023 16:54:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213005
IP address blocks:        188.93.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:41:cf:18:03:90:15:7a:86:01:52:cb:31:92:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7089ddca091c0ae3402eb2531f77fe63a0262763
        Validity
            Not Before: Jan  1 16:54:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8e1869784ee09d66c68210994c49c628a9f4429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:12:ec:95:18:ca:0b:3e:a2:26:5a:30:ac:
                    c0:c9:81:fe:22:48:e3:c9:d6:87:1c:f4:9d:6b:94:
                    f5:68:08:cf:b7:9c:23:5f:a3:b0:e4:bc:bf:23:e3:
                    d2:fa:64:21:b8:b0:a6:f9:23:b3:76:ae:af:7e:c8:
                    28:d2:33:c1:25:6f:7d:fd:26:dd:2d:83:f3:72:15:
                    8c:f8:56:c6:1f:5d:8b:13:58:6f:52:e2:3f:6a:ad:
                    b0:59:04:5c:9f:64:59:5e:69:d7:5b:24:fe:2f:96:
                    fd:55:09:19:4d:fa:d6:31:0c:3c:ca:e7:91:1c:fb:
                    f2:32:05:fc:43:df:7d:38:aa:86:20:cf:3a:62:c1:
                    b8:9d:ff:41:03:3e:e5:71:64:ec:1a:be:ff:49:ed:
                    5e:09:98:41:c7:7d:99:72:29:4c:98:a4:27:2b:37:
                    db:2c:78:03:15:48:83:36:6f:41:dc:2a:97:cc:fe:
                    3d:83:62:20:eb:e8:24:c8:24:6e:cb:de:fe:8a:a5:
                    cf:09:45:bb:3a:b7:5c:a7:e3:a6:2b:4a:26:a6:ea:
                    ec:15:bc:76:86:9d:68:84:f2:fc:5f:24:ed:7a:ec:
                    22:27:ec:bc:37:78:e3:3b:cf:be:e4:d5:a2:6d:d9:
                    dc:bd:d5:3f:19:80:e6:87:b2:ef:f9:52:1d:ed:0f:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E1:86:97:84:EE:09:D6:6C:68:21:09:94:C4:9C:62:8A:9F:44:29
            X509v3 Authority Key Identifier:
                keyid:70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/1-OGGl4TuCdZsaCEJlMScYoqfRCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:58:ad:50:9b:b2:7a:62:40:a7:f4:8f:42:71:4e:95:2b:14:
         2e:fe:dd:22:18:2a:af:88:e9:d1:6b:6a:55:20:7b:92:5f:f2:
         ba:99:66:22:96:8f:e8:2a:75:85:d4:59:7b:da:d5:43:5c:9f:
         6d:7b:7a:5f:a1:60:1c:d7:0f:73:1e:9e:e7:a9:8b:15:76:72:
         ed:c6:ac:ed:a9:7f:b0:10:89:46:ca:69:99:6c:01:80:70:34:
         8f:94:ee:4b:a2:cc:ce:33:8f:6d:2f:9e:6f:5c:43:fa:9b:7a:
         48:58:86:c7:97:1e:2a:9a:e1:f8:cc:88:94:1b:35:e6:b0:8a:
         e5:7d:7a:f4:ae:9f:85:2a:ba:ac:24:91:75:a7:26:b4:4e:9d:
         17:a4:d3:78:1e:67:77:75:36:11:8b:69:2d:ab:28:59:04:44:
         89:9c:2b:44:d7:e9:81:e9:c0:28:d4:fc:75:9a:06:c6:f9:55:
         00:b0:a2:3b:83:a7:7b:a9:58:18:17:82:4b:a6:2c:1f:63:6b:
         af:ca:bf:31:c0:ad:76:5e:a2:7e:4f:d9:85:a6:b4:37:a9:80:
         1a:71:43:8b:6e:57:07:f9:3d:02:89:1b:b1:ff:97:1a:cd:40:
         0c:9f:01:16:45:11:67:a9:78:ed:5c:41:9d:f3:0b:eb:b2:69:
         c6:1c:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:06 2024 by rpki-client on console-fra.rpki-client.org