Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/sgKsk8uOQmOPXotnAUBjHBu100A.roa
File:                     sgKsk8uOQmOPXotnAUBjHBu100A.roa (raw, json)
Hash identifier:          XMyqTUEfJNc09Edku0r16/PbporqMZlWO/CVA0/UNBE=
Subject key identifier:   B2:02:AC:93:CB:8E:42:63:8F:5E:8B:67:01:40:63:1C:1B:B5:D3:40
Certificate issuer:       /CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Certificate serial:       0188916E1AF98F4DAB5E19342A294D41F62C
Authority key identifier: 69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/sgKsk8uOQmOPXotnAUBjHBu100A.roa
Signing time:             Tue 06 Jun 2023 15:58:12 +0000
ROA not before:           Tue 06 Jun 2023 15:58:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51765
IP address blocks:        212.18.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:6e:1a:f9:8f:4d:ab:5e:19:34:2a:29:4d:41:f6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690b16976a9577cfbad2d0531be3afd35a714ad3
        Validity
            Not Before: Jun  6 15:58:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b202ac93cb8e42638f5e8b670140631c1bb5d340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:40:10:a9:b4:1b:93:7c:fa:58:ae:a9:04:
                    97:dc:ae:b9:53:77:88:b8:12:07:28:7d:99:91:7e:
                    74:c6:e2:a8:06:fe:f4:2b:01:85:98:c1:2e:90:90:
                    40:5f:4c:29:da:2c:83:c2:76:e2:6c:6d:a0:be:d6:
                    e3:84:a8:20:0f:24:4b:87:4b:03:8d:f7:60:fe:84:
                    75:8f:34:80:87:88:55:0e:06:b8:bf:12:ea:3b:64:
                    8b:02:8d:51:77:36:fe:1f:2b:ca:22:5d:99:47:7f:
                    49:f1:60:79:61:97:b2:22:83:d6:45:ed:47:c3:4b:
                    50:90:59:b1:de:36:d5:f9:cc:21:02:c4:d3:22:e0:
                    ec:51:00:43:51:5b:4a:97:38:48:0b:23:53:e4:06:
                    3f:78:06:6d:b4:40:c6:6d:25:4f:20:02:f2:17:9f:
                    d5:8e:47:4d:ee:30:49:b1:8c:d0:c1:82:14:b1:39:
                    3b:14:13:cd:b6:66:9b:07:7e:8f:6d:ca:4b:3b:80:
                    cb:07:6e:f1:44:4f:5a:f7:bf:61:7a:f2:50:cc:03:
                    69:c5:78:25:83:0d:a2:0d:e8:e9:ee:77:18:a7:fd:
                    3d:b3:ef:d4:0c:3d:6e:41:55:f5:22:7d:63:c2:1b:
                    49:46:ea:d4:4c:ae:99:9b:58:21:ac:28:2f:c3:ec:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:AC:93:CB:8E:42:63:8F:5E:8B:67:01:40:63:1C:1B:B5:D3:40
            X509v3 Authority Key Identifier:
                keyid:69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/sgKsk8uOQmOPXotnAUBjHBu100A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:63:c5:4e:e6:1e:d1:ec:f8:9b:45:56:ac:8b:8c:a5:06:af:
         9e:3d:da:fa:d7:93:fe:53:c6:66:35:6e:3f:1c:a8:97:09:f5:
         15:0c:b6:03:28:e5:a2:43:22:cc:0c:2c:0d:39:7c:34:e8:24:
         15:8c:53:ca:cc:6f:be:9a:c3:b5:de:94:c4:21:83:08:36:74:
         c1:c8:20:2e:a0:34:ce:dc:f1:9f:12:21:bc:7d:f7:78:54:ae:
         61:2d:8d:54:93:ad:8d:ea:91:26:5f:a7:b4:e9:b2:8a:2d:9f:
         1f:9f:07:9d:51:78:99:c6:be:d8:ef:52:15:a4:ce:7b:19:93:
         ce:1b:05:f1:87:26:bd:ad:47:04:48:f3:98:8e:a8:b3:e2:5a:
         e9:6f:52:17:93:f6:83:fc:c9:e9:7c:d0:26:ee:07:56:6c:af:
         89:a3:08:e4:2c:6e:d8:27:49:06:0c:66:e8:dd:d8:69:96:ed:
         24:13:21:e8:f2:fc:fa:cc:2e:17:98:0c:8f:19:0d:64:5c:dd:
         ef:99:b7:05:93:1d:9d:dc:f6:9c:7b:c6:b9:62:ce:97:b6:b6:
         a4:04:49:bf:5d:2c:4d:e0:f0:4b:d3:69:46:91:67:35:34:c8:
         fa:33:b1:39:91:87:d8:0b:17:29:80:9b:2a:bc:40:aa:26:73:
         11:63:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:07 2024 by rpki-client on console-ams.rpki-client.org