Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/CuSNB6V5VFXSF83FpPZ8665fBbM.roa
File:                     CuSNB6V5VFXSF83FpPZ8665fBbM.roa (raw, json)
Hash identifier:          h8lds6nW0MecFNg4y5wKzFYU3HxV6tAeaZd8Atx/Yss=
Subject key identifier:   0A:E4:8D:07:A5:79:54:55:D2:17:CD:C5:A4:F6:7C:EB:AE:5F:05:B3
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       01856F022A898A947D1A8B853AD3CC5DD7E9
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/CuSNB6V5VFXSF83FpPZ8665fBbM.roa
Signing time:             Sun 01 Jan 2023 20:24:50 +0000
ROA not before:           Sun 01 Jan 2023 20:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210398
IP address blocks:        83.217.238.128/26 maxlen: 26
                          83.231.149.64/28 maxlen: 28
                          213.130.49.64/26 maxlen: 26
                          213.130.47.32/28 maxlen: 28
                          2001:728:1404::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:2a:89:8a:94:7d:1a:8b:85:3a:d3:cc:5d:d7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 20:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ae48d07a5795455d217cdc5a4f67cebae5f05b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c6:46:70:bd:55:5a:5b:da:e2:69:b9:b7:15:
                    fb:46:9a:ba:b2:29:40:3a:2b:55:c1:c3:75:bf:d6:
                    26:2a:64:ad:2d:99:9a:1b:13:56:2c:3c:67:7c:7c:
                    be:2b:ed:54:84:e6:f7:1c:cc:5d:80:cc:57:a4:e7:
                    4a:b2:43:b2:42:37:dd:ea:09:4c:e4:df:b5:40:99:
                    de:47:16:c2:60:88:70:9b:e2:d5:88:68:1d:17:a4:
                    2c:8c:2e:eb:2a:a6:9c:28:42:80:16:a0:60:13:57:
                    46:05:71:98:76:3f:e2:9f:9f:db:58:2d:48:c7:80:
                    26:e5:87:41:3e:c4:4a:08:39:80:38:09:42:4b:5b:
                    67:04:5f:42:14:da:a1:33:72:35:f1:7b:9d:82:b3:
                    82:6e:3c:af:f7:2e:f3:36:bc:65:d4:cc:8c:6a:0a:
                    dc:17:ea:51:b4:2a:34:3d:9d:88:85:2e:88:d2:d9:
                    ef:74:a4:a5:a3:15:cf:f5:8e:19:dc:4b:13:46:e5:
                    3d:f2:a6:46:06:4d:49:be:0a:b2:b8:e6:3c:56:d4:
                    72:b1:51:b8:61:00:12:a4:4d:94:aa:60:ba:b8:e1:
                    e5:b6:54:2d:75:f6:64:07:37:19:60:f6:bc:c4:de:
                    ba:aa:a4:a1:90:5a:bc:c2:c2:75:9c:20:e3:20:64:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:8D:07:A5:79:54:55:D2:17:CD:C5:A4:F6:7C:EB:AE:5F:05:B3
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/CuSNB6V5VFXSF83FpPZ8665fBbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.217.238.128/26
                  83.231.149.64/28
                  213.130.47.32/28
                  213.130.49.64/26
                IPv6:
                  2001:728:1404::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:a0:16:cf:2d:62:4f:40:06:52:d9:d2:c5:e7:e1:71:66:
         cc:96:57:3c:b1:39:25:84:dc:46:6c:54:80:8e:b9:86:d9:cc:
         44:01:a1:31:96:97:7d:3c:4c:6e:f8:3d:95:df:3d:49:b2:33:
         b7:43:33:68:f4:8e:1a:b1:f5:01:2d:2b:96:e8:96:cd:88:23:
         89:1f:b4:78:82:2e:1f:18:21:3b:dd:d4:59:43:f5:51:d4:28:
         24:66:01:b5:74:28:c0:d9:72:f4:76:eb:22:c9:22:b1:e7:b9:
         1e:01:f9:fa:83:2f:4a:4d:94:31:13:9a:7f:1c:ba:12:22:05:
         e5:6c:a7:93:a7:a5:58:d0:d7:ee:ad:1d:5b:64:fb:a3:38:11:
         9c:d8:49:48:96:1e:56:94:a0:b0:ff:04:d7:cb:d1:87:01:95:
         5e:37:a4:e9:25:af:44:aa:2a:62:36:3d:bd:f9:7a:86:82:d4:
         5d:99:48:e1:6e:91:7d:85:04:46:1f:79:57:4e:f4:29:d3:04:
         38:03:a1:52:04:be:df:18:bf:b2:f5:89:ff:2d:21:b1:bf:c9:
         c2:3a:2e:fe:52:71:08:a1:bd:2e:d6:6b:88:03:53:61:e2:50:
         ee:02:31:38:31:f4:5e:e4:c0:c1:7e:87:93:91:7a:0d:5d:49:
         ce:4f:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org