Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/1_ex--7d6p1vgVOCZ5OPRII-MvY.roa
File:                     1_ex--7d6p1vgVOCZ5OPRII-MvY.roa (raw, json)
Hash identifier:          5iXaRGPnAYpvWu1woap6l1F4eiR+e5KoXbAJAF20saw=
Subject key identifier:   D7:F7:B1:FB:EE:DD:EA:9D:6F:81:53:82:67:93:8F:44:82:3E:32:F6
Certificate issuer:       /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial:       018273F7E94F27C3BEF9B5125DFCF9E549E6
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/1_ex--7d6p1vgVOCZ5OPRII-MvY.roa
Signing time:             Sat 06 Aug 2022 16:23:23 +0000
ROA not before:           Sat 06 Aug 2022 16:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44547
IP address blocks:        188.93.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:73:f7:e9:4f:27:c3:be:f9:b5:12:5d:fc:f9:e5:49:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
        Validity
            Not Before: Aug  6 16:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d7f7b1fbeeddea9d6f81538267938f44823e32f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:fe:25:67:0c:53:54:b3:c7:d3:cf:bf:79:
                    5f:29:b6:97:8e:f5:dc:92:86:2d:94:39:4c:80:f2:
                    52:78:c0:f7:0c:a4:89:e7:4f:56:fa:60:9d:53:8c:
                    45:6b:4d:5d:b5:e6:aa:69:98:da:4e:d2:4f:f1:79:
                    14:88:ed:54:81:fa:d4:a7:19:34:98:84:ff:cc:16:
                    7c:32:88:24:f6:0a:48:0a:f9:77:d6:1c:c4:de:40:
                    ab:a7:53:33:e1:26:ad:79:29:35:2f:a8:6a:56:32:
                    d4:e1:6f:ca:02:ec:04:88:ab:dd:36:1f:f1:95:51:
                    92:7e:71:0d:e1:53:b2:22:b3:e7:e9:1b:79:78:3d:
                    a1:d7:af:9a:71:8f:4f:96:8e:37:25:4e:a4:0f:37:
                    36:d6:17:0d:90:00:19:e3:c7:55:d7:52:90:91:93:
                    df:5f:90:56:f1:b9:53:eb:85:0d:1d:3d:73:f1:21:
                    24:9a:5b:3c:76:67:38:0c:2a:fd:02:64:f7:77:75:
                    a8:e5:8e:ee:71:aa:09:7c:8f:b2:36:58:82:d2:4b:
                    ed:3d:fe:e5:92:ce:70:3e:26:01:42:3d:e5:72:38:
                    78:22:e8:2d:32:c2:cc:ce:a6:43:19:c6:65:38:19:
                    b3:0e:1a:2c:30:d4:b7:44:7d:ac:f2:75:01:f4:72:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:B1:FB:EE:DD:EA:9D:6F:81:53:82:67:93:8F:44:82:3E:32:F6
            X509v3 Authority Key Identifier:
                keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/1_ex--7d6p1vgVOCZ5OPRII-MvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:38:0b:83:49:88:42:15:67:61:68:5b:a5:64:be:48:bd:
         ff:88:2a:19:2b:b4:3d:f3:69:58:37:fc:78:16:88:58:c6:d2:
         1e:d8:57:3d:5a:3a:5b:3b:90:7b:a1:bc:be:ef:c3:69:3f:44:
         69:2a:28:dd:b4:71:dc:f5:11:e6:01:d5:38:12:e9:b9:2d:b9:
         9c:5c:fe:27:9e:f5:6d:7b:05:fe:bc:97:dc:db:af:6a:d0:dc:
         3b:df:da:3c:a0:40:81:e1:e3:e7:72:69:17:bd:82:d6:39:7e:
         e5:15:24:25:5b:d3:6b:27:56:57:a3:ea:1e:cb:95:58:6d:3a:
         7b:1f:f1:89:88:a2:48:f3:1b:cc:ca:a3:3b:1b:f7:c5:34:1a:
         75:64:5b:f3:2b:f8:72:67:95:57:28:b7:46:1d:3d:c8:e9:9a:
         a9:75:af:40:b0:fd:d2:7b:7b:fc:09:36:0b:26:22:f7:8e:91:
         90:e9:3d:95:b4:02:90:fe:4f:63:d0:d7:da:4c:d0:59:61:90:
         0d:50:7f:04:46:83:26:9a:43:07:f8:1b:69:51:ee:a6:a1:91:
         d6:16:f7:4d:11:f9:5e:64:85:e4:14:49:73:11:ed:28:a4:cf:
         28:03:92:db:be:8d:ae:95:95:fa:5a:29:4f:e1:da:ca:49:ae:
         ad:95:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:55 2024 by rpki-client on console-fra.rpki-client.org