Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/vppqGU6doPvjH8bdcjI2-Da2Iuk.roa
File:                     vppqGU6doPvjH8bdcjI2-Da2Iuk.roa (raw, json)
Hash identifier:          bZnzSiHL3RBBGsRTadt35gHpDO1VZmJfo9ve5XklqOg=
Subject key identifier:   BE:9A:6A:19:4E:9D:A0:FB:E3:1F:C6:DD:72:32:36:F8:36:B6:22:E9
Certificate issuer:       /CN=07d0ba368232da095070a9fc7572465858f7af13
Certificate serial:       01882086792B12D93D6953C56DE549048BA8
Authority key identifier: 07:D0:BA:36:82:32:DA:09:50:70:A9:FC:75:72:46:58:58:F7:AF:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9C6NoIy2glQcKn8dXJGWFj3rxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/vppqGU6doPvjH8bdcjI2-Da2Iuk.roa
Signing time:             Mon 15 May 2023 17:47:43 +0000
ROA not before:           Mon 15 May 2023 17:47:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        188.244.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:79:2b:12:d9:3d:69:53:c5:6d:e5:49:04:8b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d0ba368232da095070a9fc7572465858f7af13
        Validity
            Not Before: May 15 17:47:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be9a6a194e9da0fbe31fc6dd723236f836b622e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:f0:44:e2:56:d5:f1:5e:6f:67:b9:d9:a0:
                    db:ef:e8:7c:41:25:31:ca:1f:12:38:89:c6:c1:95:
                    9a:19:46:ba:92:9b:29:7c:01:6e:c2:de:54:4d:e3:
                    ec:c3:e5:b6:52:cc:95:90:c7:70:7f:f8:f6:5c:e6:
                    39:5e:e4:e2:5e:66:41:78:bb:b0:02:78:87:a5:12:
                    e3:dd:c7:93:91:d8:e0:97:86:8b:b7:a2:34:46:2d:
                    fa:24:3a:90:6d:85:7d:22:f8:00:ae:08:09:17:4f:
                    5a:76:13:0d:ea:c7:88:ed:d8:19:73:9e:23:79:af:
                    71:7e:46:b2:df:a2:eb:e7:aa:6b:53:c5:bd:75:7c:
                    e9:2c:b5:e1:ba:6d:27:11:45:44:c7:43:d6:38:6f:
                    0a:f3:c9:f1:bf:28:81:27:d4:7b:b0:18:ef:f9:51:
                    ec:f5:19:c2:6c:8e:0f:cd:f5:48:3d:a8:49:86:f4:
                    e7:fe:93:a5:17:3e:e1:2d:34:2b:8e:e4:35:b5:4d:
                    61:f9:64:9e:47:df:e6:62:43:40:ad:4f:f9:1a:75:
                    56:71:8e:30:74:3d:cd:8d:5d:7a:36:94:5f:c2:5c:
                    08:8f:37:9a:10:14:7d:8e:36:0f:68:1c:f5:3c:30:
                    23:82:bc:f5:29:a4:3a:b6:b3:db:53:5f:92:83:12:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9A:6A:19:4E:9D:A0:FB:E3:1F:C6:DD:72:32:36:F8:36:B6:22:E9
            X509v3 Authority Key Identifier:
                keyid:07:D0:BA:36:82:32:DA:09:50:70:A9:FC:75:72:46:58:58:F7:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9C6NoIy2glQcKn8dXJGWFj3rxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/vppqGU6doPvjH8bdcjI2-Da2Iuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/B9C6NoIy2glQcKn8dXJGWFj3rxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:59:65:cb:b8:b1:c8:9e:fd:df:be:31:b8:81:dd:bb:76:5c:
         6e:82:5e:d7:2a:74:2f:f3:ba:ff:8a:d9:ac:9a:21:11:3c:ab:
         5f:3b:81:ed:ca:8d:eb:0b:23:cc:c0:b0:97:d2:68:b7:57:b8:
         ab:a4:75:56:77:d4:c1:69:f0:7e:b3:5a:95:69:82:19:88:3b:
         c5:55:30:3f:3e:90:cd:e3:49:d5:45:21:40:f3:93:d7:b8:17:
         90:d2:46:fd:9b:1a:46:61:63:10:a0:4a:1b:c8:29:0e:25:21:
         e6:46:88:1f:91:a3:38:76:09:56:80:5a:5f:70:fa:6d:1a:63:
         1b:4c:bf:62:08:db:4b:20:e5:bb:8b:9f:73:5b:a3:72:6d:b5:
         38:d4:a5:bb:ba:0e:12:d1:39:14:19:4e:27:97:04:9a:9c:e6:
         57:71:0e:53:39:01:b2:ec:17:a1:a9:2a:79:f3:5e:a2:6a:5e:
         09:4f:b4:c8:72:ea:a1:0f:0e:09:05:be:2a:ae:59:21:ba:8d:
         52:9f:41:ce:76:99:25:0f:8b:ad:d6:43:24:3b:c6:ee:75:02:
         cc:cc:2b:7d:9f:db:db:27:7c:1e:b1:ce:19:15:07:d0:45:5a:
         84:79:18:80:af:ea:cd:5d:01:91:a9:2a:5b:97:84:c9:da:32:
         fe:54:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:22:21 2023 by rpki-client on console-fra.rpki-client.org