Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/OVolV8io_iycTD2v_3otQrDhUqg.roa
File:                     OVolV8io_iycTD2v_3otQrDhUqg.roa (raw, json)
Hash identifier:          NS9a+nFkShKgEFzshUaJ4kYCeAjpY31vmf+Y8pKq6Cc=
Subject key identifier:   39:5A:25:57:C8:A8:FE:2C:9C:4C:3D:AF:FF:7A:2D:42:B0:E1:52:A8
Certificate issuer:       /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial:       01863582C7317368A4E690873B745516484F
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/OVolV8io_iycTD2v_3otQrDhUqg.roa
Signing time:             Thu 09 Feb 2023 09:30:08 +0000
ROA not before:           Thu 09 Feb 2023 09:30:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212953
IP address blocks:        188.93.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:35:82:c7:31:73:68:a4:e6:90:87:3b:74:55:16:48:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
        Validity
            Not Before: Feb  9 09:30:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=395a2557c8a8fe2c9c4c3dafff7a2d42b0e152a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:39:8a:ba:4a:34:fa:3d:9b:85:7e:39:5e:
                    7b:8a:28:35:ac:2a:98:06:0d:34:aa:2a:b1:2d:fb:
                    06:74:79:93:b2:85:28:98:c1:1d:59:5b:d1:22:88:
                    7f:7b:1c:eb:e1:49:39:d9:4c:e0:6c:db:11:86:a2:
                    0e:c1:6d:8d:cf:aa:98:09:03:b0:9c:a6:3b:e8:15:
                    10:c8:9c:e1:2f:85:4b:b7:a7:5f:6f:26:e9:15:51:
                    86:a0:6d:f3:31:bb:3e:9b:21:02:e3:0b:13:6b:9f:
                    d0:ce:a5:88:43:84:e4:3d:e2:78:35:6c:08:a0:8a:
                    6a:67:10:b0:6c:52:80:47:0f:3b:30:4d:9f:60:76:
                    f8:5a:51:87:af:d8:3b:41:f9:9f:e4:0c:f5:6e:6f:
                    f0:92:05:6c:ab:55:67:80:cb:d8:73:06:cc:d9:a2:
                    83:87:bb:ab:89:dc:7a:a2:46:da:d7:12:18:24:b5:
                    28:63:c3:d5:cf:a3:d8:be:40:d6:bf:c0:69:97:24:
                    95:31:4b:93:63:f6:0d:b5:fb:a8:a5:f5:c6:57:e6:
                    8f:52:3f:1c:9e:b4:81:3c:fb:78:74:b7:60:a5:01:
                    2f:76:85:07:c5:a2:3c:db:1d:ef:c1:03:a2:5d:03:
                    6a:b4:fe:9b:29:06:89:17:ba:b5:33:d4:61:d1:89:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5A:25:57:C8:A8:FE:2C:9C:4C:3D:AF:FF:7A:2D:42:B0:E1:52:A8
            X509v3 Authority Key Identifier:
                keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/OVolV8io_iycTD2v_3otQrDhUqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:60:f5:8d:fe:2a:65:cd:c9:94:b6:b0:02:79:98:4a:b6:
         0b:bf:a5:e7:93:6b:11:f4:8c:06:48:55:ba:4d:7e:32:54:eb:
         ae:2f:5e:22:bb:a1:b4:49:85:4d:09:af:05:2b:e2:1d:7f:51:
         ed:a5:c6:9c:e7:af:5d:60:df:b5:59:73:81:9e:47:6c:43:f3:
         0e:33:e9:5e:9d:5f:04:af:b0:61:c4:9e:ff:ec:c0:cb:92:53:
         a3:2c:bf:b2:40:da:7a:8b:26:65:49:8d:5e:cb:d8:4a:b7:bd:
         68:fe:31:95:ff:0a:df:ff:1e:04:b9:13:c7:6c:4d:5d:cd:f5:
         0b:d7:57:82:ee:57:b8:98:b1:f8:1e:ad:3a:ff:bd:05:ed:01:
         40:58:71:f0:da:66:5b:e2:c3:48:fa:8e:34:85:87:73:cf:bf:
         3f:ce:9f:86:53:d8:1e:96:57:3b:33:1c:78:89:47:20:87:cd:
         c7:7c:b3:6e:50:f9:8f:61:e5:3b:94:64:4d:a3:47:d7:73:85:
         d9:d9:b8:b4:84:16:6f:d3:41:3b:4b:94:11:b1:de:a1:4f:5e:
         8a:f6:5a:6d:f6:23:a2:29:dc:a5:03:19:db:40:1f:74:62:02:
         90:6c:e8:7b:c9:96:ee:77:b7:dc:a5:11:ec:f4:32:2c:d2:38:
         2e:5b:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:55 2024 by rpki-client on console-fra.rpki-client.org