Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/9WBLIXtndGpJlYtnrMghjcvFaXY.roa
File:                     9WBLIXtndGpJlYtnrMghjcvFaXY.roa (raw, json)
Hash identifier:          +mmgFpAerPDluA6MnvBwrjvQTyntaxGWUnZHIxHwIgk=
Subject key identifier:   F5:60:4B:21:7B:67:74:6A:49:95:8B:67:AC:C8:21:8D:CB:C5:69:76
Certificate issuer:       /CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
Certificate serial:       7AC230
Authority key identifier: D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/9WBLIXtndGpJlYtnrMghjcvFaXY.roa
Signing time:             Sat 01 Jan 2022 03:01:22 +0000
ROA not before:           Sat 01 Jan 2022 03:01:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        193.163.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8045104 (0x7ac230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
        Validity
            Not Before: Jan  1 03:01:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5604b217b67746a49958b67acc8218dcbc56976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:d6:f8:b7:95:b7:db:67:f1:35:29:6a:60:
                    0f:df:81:e6:d4:f1:a8:9d:79:cd:86:fa:bc:cb:df:
                    56:af:16:8c:3f:bd:81:ff:25:d0:cc:fb:b7:dd:e6:
                    d1:41:f2:83:3d:d7:fa:46:84:ec:08:39:7f:f3:af:
                    f9:02:45:e7:48:32:6d:fb:84:22:8b:13:ab:f2:80:
                    55:4b:46:b3:06:ec:54:05:40:55:ed:fb:3c:b8:a4:
                    0d:b3:8b:31:f3:24:8b:87:08:d0:36:9a:e5:d5:74:
                    28:da:36:37:fd:8c:7c:24:fa:d0:5b:99:45:44:d2:
                    a1:61:89:f1:80:dc:5d:39:bf:ec:e2:0c:45:8c:ec:
                    94:d0:2d:d5:76:68:1c:08:85:78:4a:74:11:2f:2f:
                    16:6e:19:7c:18:13:e8:e5:23:28:4a:01:a5:2a:23:
                    6a:76:4d:a2:90:c6:a4:1c:0f:34:4d:40:f3:c2:e1:
                    9a:c7:33:d3:ce:38:5f:76:2a:b0:88:98:f7:6f:a8:
                    27:6c:a3:9f:d6:58:9a:47:28:80:f2:0f:6d:fe:09:
                    ae:ff:21:03:24:6d:60:c8:45:14:ac:29:1b:3a:86:
                    ce:26:65:db:08:14:12:a1:f2:87:f6:2f:00:72:14:
                    2f:73:db:e3:88:1e:98:fc:9c:dc:17:e7:43:2a:9b:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:60:4B:21:7B:67:74:6A:49:95:8B:67:AC:C8:21:8D:CB:C5:69:76
            X509v3 Authority Key Identifier:
                keyid:D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/9WBLIXtndGpJlYtnrMghjcvFaXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/2bWU8wV9-2JD9pwARuI7__kSF-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:bf:af:23:f5:d5:63:61:95:17:79:31:ee:f8:c6:07:97:
         52:e8:a1:c8:a3:0e:1b:25:41:12:e2:65:fa:bf:9d:4a:f4:60:
         42:e2:db:a4:ff:8a:e6:48:4d:b8:84:b9:b9:e5:e9:a7:1d:76:
         6f:a0:c3:2a:eb:82:42:d1:b9:6b:79:97:2a:cc:1f:7c:d5:33:
         de:4b:48:89:4d:68:af:f3:3a:72:f3:0a:e6:2d:6c:b2:2b:5b:
         55:bf:52:1b:b6:5e:87:29:44:7f:04:4d:08:c9:96:62:9c:46:
         37:a0:91:7f:1b:e6:df:5e:3a:74:5c:37:f8:ba:90:b6:52:5b:
         e8:8f:8e:36:27:11:e7:ca:78:e1:91:b0:a5:31:11:40:f6:9a:
         f8:45:a6:d0:f6:c5:27:60:43:4e:d5:a6:fe:61:52:51:21:56:
         d7:15:49:1d:1c:f4:21:8b:30:55:d1:44:90:d7:cb:cb:ed:c9:
         7f:41:08:37:69:11:cb:45:c8:e9:03:b6:11:40:ea:41:20:43:
         cd:86:ec:d0:74:15:6b:1d:92:bc:32:70:35:4e:6c:19:3e:34:
         51:32:38:9e:ee:01:e3:3d:0f:1b:77:0e:4e:2d:87:81:be:ee:
         37:62:19:9a:9f:02:1a:35:22:cf:24:c9:00:70:d2:5f:e7:67:
         1b:5d:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org