Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/zMW4XoB8C4vAHMTkpwlHToQ9rC0.roa
File:                     zMW4XoB8C4vAHMTkpwlHToQ9rC0.roa (raw, json)
Hash identifier:          5jGAJrues0U3sTJ5R8EueX5Uek2UtyEw1pFFN8uCJGw=
Subject key identifier:   CC:C5:B8:5E:80:7C:0B:8B:C0:1C:C4:E4:A7:09:47:4E:84:3D:AC:2D
Certificate issuer:       /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial:       018AA7922FB70F8D7FA270D3BB5DD190F615
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/zMW4XoB8C4vAHMTkpwlHToQ9rC0.roa
Signing time:             Mon 18 Sep 2023 09:14:50 +0000
ROA not before:           Mon 18 Sep 2023 09:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49217
IP address blocks:        188.93.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:92:2f:b7:0f:8d:7f:a2:70:d3:bb:5d:d1:90:f6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
        Validity
            Not Before: Sep 18 09:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ccc5b85e807c0b8bc01cc4e4a709474e843dac2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:f0:26:11:3c:92:f4:7d:5f:f0:a4:80:e3:
                    72:d0:4a:24:71:62:52:5b:b8:2e:25:1f:91:73:44:
                    ba:9e:f9:f5:6b:03:5f:77:9d:fe:3f:da:72:c4:d6:
                    21:43:6e:b2:56:48:29:83:4f:0a:72:28:36:d1:6c:
                    4d:71:dc:56:da:0d:64:6f:e4:ec:03:9f:f3:65:98:
                    5c:45:22:d6:db:95:7e:3a:bc:80:0e:2b:e4:2e:75:
                    61:d2:90:87:69:b6:e2:5b:f9:c0:37:36:cf:71:d0:
                    87:59:f3:67:e1:98:26:0b:8d:8a:dd:21:de:5a:a1:
                    8b:a5:3e:5a:0c:89:d4:de:82:3a:e0:43:a9:b4:ef:
                    55:db:8f:a8:95:7a:a3:a5:1e:f5:27:74:3c:26:98:
                    23:a1:d7:7a:b5:5d:6a:af:26:21:09:1d:64:ea:e3:
                    75:2d:49:04:64:b7:b3:a3:d8:44:d4:39:76:c5:90:
                    1d:75:6f:66:b0:64:4a:35:a3:6c:8a:3f:f1:8f:19:
                    d1:fa:77:4c:d3:f8:c4:80:3e:01:fb:c4:3f:96:e6:
                    0c:04:82:74:fd:38:9f:b7:5f:b3:54:d1:45:ec:29:
                    d7:d0:12:27:8e:9c:7f:28:31:32:e9:86:4e:9e:6d:
                    6a:ae:da:82:f3:4f:5f:78:12:28:55:6d:ad:70:59:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:B8:5E:80:7C:0B:8B:C0:1C:C4:E4:A7:09:47:4E:84:3D:AC:2D
            X509v3 Authority Key Identifier:
                keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/zMW4XoB8C4vAHMTkpwlHToQ9rC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:92:93:53:d7:7d:57:09:68:ee:a5:fc:e5:74:4c:5b:34:
         c1:83:15:87:5c:60:0b:93:b7:7e:f6:5f:f4:0c:12:8d:7c:dd:
         31:80:b4:4f:ef:e5:74:6e:a0:e8:a8:a1:0d:07:34:3e:18:68:
         1a:98:46:b2:48:c8:d6:a5:8a:e9:e6:c1:fc:9d:c1:ec:a4:52:
         fa:ab:1d:e6:c5:98:ed:f1:ab:a9:62:a0:1f:68:f8:ee:c9:4b:
         65:b3:c1:a6:61:d2:01:3a:5d:6a:2e:34:14:ed:61:3c:a7:a9:
         69:9d:62:bc:85:45:25:4d:37:b8:73:83:38:6a:e5:98:57:3c:
         0d:b9:39:50:fc:0d:0e:cc:20:b7:39:84:24:d4:f3:46:fc:5d:
         e2:46:ca:3d:b9:b2:fe:c1:7e:83:9c:8b:41:68:e6:aa:e0:1b:
         98:ce:d4:01:12:f7:d4:09:9b:b3:c7:77:d3:00:00:e3:51:b4:
         bc:6d:af:48:1d:ab:10:64:a2:82:3a:52:b9:90:1e:b6:65:5d:
         73:67:78:29:bb:d8:bf:ad:43:d3:05:c6:29:44:fc:a5:49:68:
         56:32:59:d3:30:db:5c:cb:6e:84:eb:aa:3f:3b:00:2e:4f:d7:
         88:fe:13:87:32:dc:d3:66:0f:4f:7d:2b:45:96:da:c4:e7:5d:
         96:9c:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:21 2024 by rpki-client on console-ams.rpki-client.org