Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/0Xf6-vilfia24A7NEN-1UNpf3TQ.roa
File:                     0Xf6-vilfia24A7NEN-1UNpf3TQ.roa (raw, json)
Hash identifier:          hlCPws79TRjoG/wJl4XIBqwLzlhcryMiUyk2ApIcBwY=
Subject key identifier:   D1:77:FA:FA:F8:A5:7E:26:B6:E0:0E:CD:10:DF:B5:50:DA:5F:DD:34
Certificate issuer:       /CN=09660852bd09ad2213da02bd15bbf1837695734c
Certificate serial:       01856FE7067DB287C91DC0FF1160B4B96F10
Authority key identifier: 09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/0Xf6-vilfia24A7NEN-1UNpf3TQ.roa
Signing time:             Mon 02 Jan 2023 00:34:49 +0000
ROA not before:           Mon 02 Jan 2023 00:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201446
IP address blocks:        185.23.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:e7:06:7d:b2:87:c9:1d:c0:ff:11:60:b4:b9:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09660852bd09ad2213da02bd15bbf1837695734c
        Validity
            Not Before: Jan  2 00:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d177fafaf8a57e26b6e00ecd10dfb550da5fdd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:43:82:5d:89:a2:44:ee:99:00:aa:a3:dc:
                    0e:dc:8f:54:0e:a6:f6:cb:bb:f0:21:a9:17:db:8f:
                    99:b9:21:38:54:78:00:c2:1e:6a:5e:a0:0c:d0:b4:
                    47:8c:f7:38:b1:0a:73:3a:c2:bb:b8:27:ed:86:f3:
                    b1:2f:46:b4:3f:6b:b1:0b:1c:a8:96:13:1d:25:98:
                    79:79:e5:74:11:54:de:ae:76:f6:30:fc:1b:91:3b:
                    8a:cc:6a:88:22:a4:a9:42:17:a9:fa:9a:72:8e:98:
                    e9:65:80:dd:38:98:8f:15:0b:c1:f0:3c:01:41:9b:
                    b7:56:6a:24:de:5a:2d:c6:b7:fc:42:d1:38:a0:66:
                    a2:0f:fc:ce:ae:e6:f9:f6:8a:c1:6c:2a:87:fe:10:
                    e4:fa:9a:13:0c:b7:74:73:22:d3:7a:1c:8f:80:7a:
                    de:51:ea:32:a4:39:39:a8:6e:98:2a:21:80:f4:2f:
                    05:15:8d:a9:78:59:cf:1d:cd:03:eb:f5:1d:3f:00:
                    12:c4:ea:b3:f9:06:b4:04:e2:2f:77:0f:ed:b9:6e:
                    a4:94:c8:bf:3a:b8:20:dd:2d:67:1c:a1:eb:6c:44:
                    48:af:38:d3:cc:b7:15:06:18:e1:08:5d:d6:f8:80:
                    48:e2:92:b2:e3:85:72:9b:f8:f3:7f:f9:65:cb:4b:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:77:FA:FA:F8:A5:7E:26:B6:E0:0E:CD:10:DF:B5:50:DA:5F:DD:34
            X509v3 Authority Key Identifier:
                keyid:09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/0Xf6-vilfia24A7NEN-1UNpf3TQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:4f:89:d3:55:d5:a9:6e:fa:c6:d0:d7:32:96:6b:d7:ea:
         4d:7a:a9:bf:45:97:02:dc:a4:b4:cc:f2:07:de:a5:d1:19:68:
         71:6a:8b:43:6b:52:0e:ab:86:7e:d4:76:5d:54:dc:08:5b:00:
         cf:8d:6d:ab:93:49:71:d9:93:33:75:8c:0d:b1:44:77:c1:8d:
         25:32:65:df:57:63:9b:46:69:ff:72:ca:ad:84:ae:7a:93:64:
         37:24:25:3a:bd:c6:9c:d9:ab:d7:b4:fc:fb:a1:81:8b:9a:36:
         0a:d0:95:aa:95:75:fd:45:c9:6c:13:12:92:6e:12:0b:8e:f0:
         10:80:9f:e0:96:32:0a:9a:1d:fd:c6:8e:d8:f4:84:85:ae:24:
         66:2f:5a:2a:de:05:fd:eb:b8:08:74:b8:94:a4:f8:1f:76:2c:
         1d:ed:71:a2:76:d3:8b:12:e8:db:7f:f7:e8:f9:c0:cb:bd:19:
         be:f0:9b:19:6e:7d:d3:4b:28:7d:13:be:e2:40:a1:f2:5a:46:
         00:5d:b7:39:8d:67:4a:b1:72:af:6d:23:96:cc:56:cb:f1:c9:
         28:1e:f4:f4:6d:e4:52:d3:26:34:d2:b1:e7:8f:9d:aa:54:a7:
         1e:d5:2d:d5:9c:c6:b5:29:92:b2:10:65:d4:cc:e3:39:a2:c9:
         98:b3:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org