Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/C9C7JFvvpy7_JnOtH53T_ZI8ys4.roa
File:                     C9C7JFvvpy7_JnOtH53T_ZI8ys4.roa (raw, json)
Hash identifier:          YP5Gfy8mUmmKNx955VKRZlsO1ndN8li36luErXGchHg=
Subject key identifier:   0B:D0:BB:24:5B:EF:A7:2E:FF:26:73:AD:1F:9D:D3:FD:92:3C:CA:CE
Certificate issuer:       /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial:       01857103068006E0183CA29C130438D4734F
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/C9C7JFvvpy7_JnOtH53T_ZI8ys4.roa
Signing time:             Mon 02 Jan 2023 05:45:01 +0000
ROA not before:           Mon 02 Jan 2023 05:45:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41171
IP address blocks:        94.103.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:03:06:80:06:e0:18:3c:a2:9c:13:04:38:d4:73:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
        Validity
            Not Before: Jan  2 05:45:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bd0bb245befa72eff2673ad1f9dd3fd923ccace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:de:b3:b7:d0:b4:a6:27:22:5b:e2:14:24:
                    a3:9b:63:77:9d:02:60:e6:01:29:29:70:b9:78:b3:
                    7e:fd:4d:9f:2c:24:0d:a2:68:84:0c:15:84:72:23:
                    35:95:69:75:4f:f8:ba:95:d0:7f:54:a9:71:bb:70:
                    51:ef:60:09:40:4a:53:39:94:73:a7:2e:e8:7b:67:
                    3d:86:40:e3:66:93:36:ca:5c:3c:d9:86:80:3c:2c:
                    fd:c8:a0:e6:12:5e:fd:93:a2:4b:49:f8:07:d0:30:
                    97:17:72:7b:f4:82:a3:f4:87:11:83:39:f4:8a:22:
                    26:7e:22:a3:ab:d6:c2:14:3b:9e:25:9d:cd:c6:15:
                    95:97:1a:13:ca:0b:4a:f0:1f:e3:58:dd:ec:d6:88:
                    99:b9:7f:a7:f0:b5:4d:bd:77:b7:8a:b5:d8:89:a5:
                    a4:4c:8a:5d:d0:78:b3:6b:a6:f6:ac:3a:64:0d:0c:
                    09:f0:1d:47:cc:63:d1:13:71:91:d1:60:1a:ca:19:
                    f5:11:93:1e:88:37:05:38:88:a2:de:13:91:97:00:
                    94:aa:59:fb:21:de:26:29:cf:61:a3:c4:73:cb:e8:
                    84:06:6b:6c:c0:b0:2f:de:04:e1:f7:d2:6a:06:68:
                    ba:77:90:c5:29:73:3f:9c:d8:af:0b:84:10:8d:b1:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:BB:24:5B:EF:A7:2E:FF:26:73:AD:1F:9D:D3:FD:92:3C:CA:CE
            X509v3 Authority Key Identifier:
                keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/C9C7JFvvpy7_JnOtH53T_ZI8ys4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:b9:cb:00:c4:6a:37:62:54:95:36:10:05:59:95:4c:79:
         f0:7d:9b:d5:3d:24:89:a7:e2:5c:78:19:d5:6e:d8:82:c0:9f:
         a1:b8:3d:fd:ed:a0:af:48:bc:8e:bb:68:d9:46:54:72:02:c3:
         12:5a:41:3a:ec:96:32:05:78:ed:cb:59:1b:3d:29:ca:13:67:
         65:88:c7:80:24:12:33:21:78:0e:7b:3e:57:62:66:a7:08:86:
         e1:4a:70:61:63:3c:83:1e:9f:c4:36:30:b8:13:6c:fb:1f:ed:
         a9:cb:a4:8c:57:cb:a4:ea:4e:1d:55:5d:92:45:b6:17:a8:9d:
         4f:b7:a9:a1:7c:17:53:9f:2c:9f:30:59:f5:35:d2:dc:ee:69:
         58:73:93:1b:15:02:03:ca:1d:f0:22:4a:68:fc:9b:2c:60:11:
         16:3c:c5:45:bf:94:16:77:b9:45:f8:3b:e0:79:3d:a0:f4:5e:
         b7:4e:62:16:d8:fb:c2:f4:d5:76:5a:55:43:a3:b9:96:41:27:
         75:dd:2b:6f:b0:b5:bb:0d:23:41:9b:a3:bf:a6:f5:46:e3:0b:
         83:16:3f:77:fb:6b:c1:14:bb:1c:ba:9d:6c:c3:27:a7:a9:c0:
         59:98:a6:a3:8e:3b:8c:ea:8b:e8:6b:63:bb:0d:78:63:d7:4c:
         55:b1:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:33 2024 by rpki-client on console-fra.rpki-client.org