Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/HEFjXCmnWv-N_y79QruUMeXn9WQ.roa
File:                     HEFjXCmnWv-N_y79QruUMeXn9WQ.roa (raw, json)
Hash identifier:          gWcPMvNCR0GFqoZpYgGnFNVoed0hfdG0+Hx9wIk6X7A=
Subject key identifier:   1C:41:63:5C:29:A7:5A:FF:8D:FF:2E:FD:42:BB:94:31:E5:E7:F5:64
Certificate issuer:       /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial:       01877C260DCC0C73CECED78A843E6A81EDDB
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/HEFjXCmnWv-N_y79QruUMeXn9WQ.roa
Signing time:             Thu 13 Apr 2023 19:44:41 +0000
ROA not before:           Thu 13 Apr 2023 19:44:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50225
IP address blocks:        188.93.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7c:26:0d:cc:0c:73:ce:ce:d7:8a:84:3e:6a:81:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
        Validity
            Not Before: Apr 13 19:44:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c41635c29a75aff8dff2efd42bb9431e5e7f564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:f1:1d:41:31:77:b8:b7:0b:40:df:a6:85:
                    9a:3f:a2:2d:2f:5e:15:6e:73:12:56:53:b7:07:72:
                    a4:22:89:11:e8:c8:c9:3c:a0:40:50:5d:26:d8:69:
                    08:62:64:38:9e:06:7c:f0:4e:4a:53:f2:1f:67:8f:
                    54:43:8f:9d:ec:d4:e9:78:f6:f4:b8:0c:08:8e:60:
                    eb:91:a6:98:3b:5b:28:25:44:44:69:1b:c7:aa:04:
                    87:e8:ab:8f:a5:17:46:52:68:3b:cd:fb:da:15:54:
                    e4:23:7d:e6:42:ef:07:34:46:7f:4f:1c:bc:f3:3f:
                    3e:26:ef:d2:07:aa:00:78:e7:84:59:8e:53:ee:52:
                    c2:89:75:74:84:27:b4:c3:d7:b6:3e:64:47:1e:91:
                    47:b3:d5:be:3f:c4:03:0d:bd:8f:f1:82:f1:24:d0:
                    be:97:46:4a:2b:d2:6b:e4:c6:17:de:1b:5b:59:f0:
                    6d:d1:e5:ba:ea:1f:a7:2e:40:4f:a6:d5:e8:4d:ce:
                    e9:ee:ee:6c:00:11:56:4b:ba:65:eb:cc:53:06:f2:
                    25:ad:77:01:4a:84:63:c5:13:56:1e:5b:27:de:09:
                    7d:8b:78:74:f6:e6:a4:14:e9:12:60:2f:e8:48:55:
                    3a:c3:0c:c4:bd:fe:36:02:c4:40:c2:d0:52:df:ea:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:41:63:5C:29:A7:5A:FF:8D:FF:2E:FD:42:BB:94:31:E5:E7:F5:64
            X509v3 Authority Key Identifier:
                keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/HEFjXCmnWv-N_y79QruUMeXn9WQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:93:60:99:bf:42:2d:a6:5b:65:26:a0:98:d1:f0:01:50:b3:
         07:f0:ca:6e:53:08:35:e1:ee:ee:1d:20:1b:bd:92:4f:ed:dc:
         2a:ec:01:8a:5f:ef:80:3d:9f:1d:b8:6f:0b:40:9a:21:db:51:
         97:08:fe:5a:3e:c6:5b:4b:55:58:26:a8:f4:45:ee:ec:16:33:
         8b:ea:b2:83:71:2f:3a:82:32:17:46:e5:9a:da:b6:6a:fa:b3:
         35:b2:16:7d:bf:39:e7:5c:19:2c:de:2c:cd:e3:70:4b:5c:3f:
         8c:00:d0:25:7c:3b:1e:4c:b8:7b:2d:a7:93:85:ff:56:02:8b:
         22:ae:40:e7:12:85:21:cc:a8:22:83:81:cc:2b:1e:92:e4:26:
         41:74:c4:09:36:b7:e8:d5:93:e6:e2:39:8b:c1:70:35:d4:8c:
         e6:2b:c8:7d:03:ea:1b:67:7b:33:a4:89:b4:60:5a:c4:67:3d:
         45:79:7e:ae:b7:c0:b0:6c:c2:aa:d7:89:e5:ca:2a:24:ff:95:
         27:71:3c:12:69:28:a7:fa:81:c1:8c:3f:29:19:89:77:38:76:
         37:9c:ce:c6:ee:45:0e:75:f1:de:4b:8a:03:09:3d:ae:da:ed:
         86:0a:ad:20:e4:b2:8b:56:9a:87:fc:fc:96:f7:62:db:9c:84:
         2e:1d:d5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:55 2024 by rpki-client on console-fra.rpki-client.org