Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c7596f-ae65-41ab-995c-4de3e5f6e71a/1/rDP2ZLMlDMBbW_Ner7JPD6vm5jU.roa
File:                     rDP2ZLMlDMBbW_Ner7JPD6vm5jU.roa (raw, json)
Hash identifier:          bs9ItH1XzCJUldaeJ1bCI7vDl8qKO6uh1L/1R1IJjJ8=
Subject key identifier:   AC:33:F6:64:B3:25:0C:C0:5B:5B:F3:5E:AF:B2:4F:0F:AB:E6:E6:35
Certificate issuer:       /CN=7650eee875d6f637206ce5b5b9aaaccacf898167
Certificate serial:       01856EF8E1C2F2C56A61CE89C69C0A8E5433
Authority key identifier: 76:50:EE:E8:75:D6:F6:37:20:6C:E5:B5:B9:AA:AC:CA:CF:89:81:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlDu6HXW9jcgbOW1uaqsys-JgWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c7596f-ae65-41ab-995c-4de3e5f6e71a/1/rDP2ZLMlDMBbW_Ner7JPD6vm5jU.roa
Signing time:             Sun 01 Jan 2023 20:14:42 +0000
ROA not before:           Sun 01 Jan 2023 20:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212667
IP address blocks:        188.93.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:f8:e1:c2:f2:c5:6a:61:ce:89:c6:9c:0a:8e:54:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7650eee875d6f637206ce5b5b9aaaccacf898167
        Validity
            Not Before: Jan  1 20:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac33f664b3250cc05b5bf35eafb24f0fabe6e635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:6d:6b:a0:17:5f:a5:24:b2:c3:ba:f5:b5:
                    57:88:a1:45:cd:d2:39:77:be:b2:e0:b8:cb:b7:fc:
                    69:ae:be:21:dc:ff:29:59:77:aa:a9:cd:65:18:96:
                    d5:3c:d2:75:f5:3d:b7:d8:d2:d3:6c:45:c2:ee:51:
                    dd:1e:76:76:c1:b2:ce:94:f0:44:18:45:d6:dc:36:
                    cc:49:ee:75:cf:62:66:00:04:40:cf:b0:b8:9b:5f:
                    54:8f:4c:8f:16:2b:37:04:16:77:70:70:8e:66:a1:
                    3c:6f:9d:3e:bf:05:d1:da:3f:57:4e:d8:bc:0c:de:
                    f8:dc:61:8a:59:05:af:a6:2f:37:87:81:9a:a2:9d:
                    68:22:4b:ce:00:fb:5e:fd:6f:08:d8:46:74:a2:f7:
                    80:b8:14:65:5a:0f:6c:c4:94:96:cc:21:ab:cf:28:
                    97:ec:69:8f:df:6c:18:81:78:8e:ca:e8:95:df:04:
                    7b:c9:cc:ef:d8:3b:9b:4a:14:1f:ad:81:32:f0:25:
                    93:34:12:0f:8c:22:d2:52:34:a5:3e:e8:c4:53:4a:
                    58:16:9e:38:5b:c7:c1:4d:14:ba:2f:7e:86:45:89:
                    88:3d:44:7c:20:02:7d:a8:6a:e9:52:a0:3e:42:8a:
                    83:b2:fb:01:f6:40:ae:89:f2:5e:64:46:e7:a7:5c:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:F6:64:B3:25:0C:C0:5B:5B:F3:5E:AF:B2:4F:0F:AB:E6:E6:35
            X509v3 Authority Key Identifier:
                keyid:76:50:EE:E8:75:D6:F6:37:20:6C:E5:B5:B9:AA:AC:CA:CF:89:81:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlDu6HXW9jcgbOW1uaqsys-JgWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c7596f-ae65-41ab-995c-4de3e5f6e71a/1/rDP2ZLMlDMBbW_Ner7JPD6vm5jU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c7596f-ae65-41ab-995c-4de3e5f6e71a/1/dlDu6HXW9jcgbOW1uaqsys-JgWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:92:ef:24:dc:a7:7a:45:4e:fb:2e:4b:f1:fe:70:3b:be:9c:
         36:33:ea:0c:c2:c5:bc:31:b5:76:f9:bc:00:8f:f9:1a:c3:24:
         64:1e:4c:d8:ab:a3:2a:a6:e5:60:48:ab:2b:7b:6f:8b:fa:89:
         6d:d3:e2:c3:d6:c3:1d:f7:3a:e7:16:8c:a6:82:74:de:59:30:
         9a:d7:1a:30:2b:ef:6b:69:99:28:c0:bd:5b:27:fd:dd:c9:33:
         5e:17:42:4f:7b:aa:30:c2:2f:0a:a2:35:8e:02:21:8e:d8:76:
         2f:a5:8d:36:4c:a5:ff:9f:85:7d:11:2e:73:0b:7a:d3:df:25:
         8e:8e:cc:29:fb:fb:cb:e7:09:bc:0e:de:3c:80:e3:3a:d3:5a:
         c6:01:08:19:b4:47:42:07:bf:ce:e2:81:ce:17:0d:4a:a5:61:
         05:31:90:1f:bb:2b:0c:49:b3:58:f5:a6:55:a2:75:70:96:86:
         3d:93:ba:02:51:57:87:9b:48:93:44:7d:dd:05:92:d0:11:6a:
         e1:53:8c:8a:02:c7:55:4a:5a:8e:0f:0c:e9:a9:16:d2:ce:8b:
         ae:f4:ce:47:fa:28:65:69:9a:80:45:03:ce:7f:47:b5:09:07:
         56:1c:81:54:81:1a:25:7d:80:84:64:46:63:53:cd:38:c7:43:
         3b:cf:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:59 2024 by rpki-client on console-ams.rpki-client.org