Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/V0AVwhgxdshvTvKSLLokqsjZF6w.roa
File:                     V0AVwhgxdshvTvKSLLokqsjZF6w.roa (raw, json)
Hash identifier:          6YyhRyZFfenoaOw3aN+pJ2aKSoAwuMWXDNrlDKnchkE=
Subject key identifier:   57:40:15:C2:18:31:76:C8:6F:4E:F2:92:2C:BA:24:AA:C8:D9:17:AC
Certificate issuer:       /CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
Certificate serial:       010987E0
Authority key identifier: D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/V0AVwhgxdshvTvKSLLokqsjZF6w.roa
Signing time:             Mon 07 Mar 2022 17:38:57 +0000
ROA not before:           Mon 07 Mar 2022 17:38:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59253
IP address blocks:        193.163.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17401824 (0x10987e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
        Validity
            Not Before: Mar  7 17:38:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=574015c2183176c86f4ef2922cba24aac8d917ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:ec:ea:06:47:6f:15:27:1e:42:7c:e1:26:
                    eb:04:a4:a7:dd:c3:a4:b8:89:b2:64:57:06:db:58:
                    77:e5:26:f2:0f:19:aa:4a:40:80:c0:8b:6f:01:b2:
                    fa:9c:15:22:34:64:5e:1b:23:1a:7a:00:a7:fc:f1:
                    82:5e:63:73:32:f9:89:de:a9:da:c2:21:bd:89:5d:
                    54:ae:8e:12:24:02:a4:1a:16:c1:f5:16:70:65:e7:
                    e1:38:68:ef:db:df:f6:6d:45:97:58:6f:eb:c8:8d:
                    16:de:a8:98:c5:83:bd:c8:49:c5:a6:49:11:09:5b:
                    3a:27:4e:c6:6a:e3:0f:57:41:a4:b0:f8:ee:7d:d5:
                    5f:25:6d:cb:f6:a3:bf:eb:17:74:99:3e:b1:6a:21:
                    ff:3c:f1:d6:d5:11:15:1a:69:bf:08:53:56:18:2f:
                    99:99:dd:af:93:bc:c9:26:c6:bd:98:53:e7:68:81:
                    15:8e:b6:57:9f:9d:b6:70:cc:fc:02:a8:9c:90:5a:
                    94:42:2a:6d:52:88:6f:43:02:ff:de:75:2a:41:63:
                    e4:a0:9b:35:33:9e:d8:ec:ac:12:d5:5f:99:7f:3a:
                    61:68:61:6c:34:e7:9f:3b:6d:d8:cd:eb:4c:1f:a5:
                    60:5e:43:fe:32:64:f8:89:53:fd:49:06:c2:fe:71:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:40:15:C2:18:31:76:C8:6F:4E:F2:92:2C:BA:24:AA:C8:D9:17:AC
            X509v3 Authority Key Identifier:
                keyid:D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/V0AVwhgxdshvTvKSLLokqsjZF6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/2bWU8wV9-2JD9pwARuI7__kSF-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:4b:fe:f7:e3:9a:79:ef:32:2e:d2:a3:06:f9:e4:78:a0:d3:
         bd:7f:7f:20:f9:bc:07:8f:cd:90:5f:ba:7d:7e:3a:82:cf:72:
         ab:95:7e:d8:0e:95:b9:64:cd:dd:dd:b0:40:19:d6:b7:d3:57:
         61:d5:57:cd:0b:cf:d9:79:f5:df:3e:f3:5d:87:8c:9c:97:a3:
         87:70:4f:ba:81:b5:5d:0c:67:69:36:b1:04:3a:89:86:27:2c:
         87:12:ce:c1:a1:c4:cb:40:30:04:4e:4c:11:8b:ae:d6:f9:3f:
         40:4d:0e:39:04:5b:57:eb:4f:e0:00:c8:23:e8:ed:3f:8c:58:
         57:ce:96:c9:f7:f3:86:c4:40:89:6f:f3:71:c3:ec:b9:40:0d:
         cc:77:04:c9:cb:9d:cb:16:43:92:8e:73:0d:fe:95:66:dd:ca:
         ae:d5:bf:46:fb:6b:03:77:12:20:d3:14:4e:e8:b4:b0:23:cb:
         00:d8:d7:a3:3a:bd:f4:4e:ce:29:3b:bd:3c:10:77:00:0f:ac:
         bf:84:33:4f:3e:75:91:84:9b:82:97:e2:30:da:8f:b3:97:f6:
         78:c5:cf:2c:73:ab:f6:b1:2b:87:35:de:fe:45:ee:a4:bd:c0:
         31:24:f4:ef:7f:b2:34:e1:b3:17:7e:93:8b:02:59:9b:b4:28:
         28:88:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org