Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/mw01YuRPVTK6slGpy1tMsekDKMA.roa
File:                     mw01YuRPVTK6slGpy1tMsekDKMA.roa (raw, json)
Hash identifier:          nyyu1C+39XKgwPNEy3i67zJGE4fEmQcco8wMzc1W/UA=
Subject key identifier:   9B:0D:35:62:E4:4F:55:32:BA:B2:51:A9:CB:5B:4C:B1:E9:03:28:C0
Certificate issuer:       /CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
Certificate serial:       01882086770CB0A3917315A40414E4BBC5B0
Authority key identifier: D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/mw01YuRPVTK6slGpy1tMsekDKMA.roa
Signing time:             Mon 15 May 2023 17:47:43 +0000
ROA not before:           Mon 15 May 2023 17:47:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        193.163.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:77:0c:b0:a3:91:73:15:a4:04:14:e4:bb:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
        Validity
            Not Before: May 15 17:47:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b0d3562e44f5532bab251a9cb5b4cb1e90328c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:61:9e:64:2f:68:a1:98:c1:af:9b:40:41:
                    f8:4a:c0:86:48:79:01:3b:e4:a6:65:e0:53:02:35:
                    fe:d0:7f:0d:9d:09:a6:f2:33:96:9f:b7:0f:29:cc:
                    9c:44:b3:fd:f5:f2:9c:7f:db:c0:a4:ad:43:78:ae:
                    4a:d8:ec:e9:92:4a:67:8d:87:eb:8b:93:d5:8c:e7:
                    9b:7f:07:10:28:95:fe:68:3a:39:c2:2a:2e:2a:67:
                    f1:8c:bb:1f:29:66:1b:eb:aa:d0:45:6c:79:65:f7:
                    b3:61:a7:d2:1b:5c:8b:fb:4b:56:cd:bc:61:68:b6:
                    fb:72:e3:7c:c9:9b:d7:d5:6d:ea:44:d6:bf:df:28:
                    56:b6:3e:34:23:2f:5f:0a:25:7f:c9:59:26:eb:be:
                    30:f0:b9:04:85:ea:e2:12:71:77:75:83:bf:53:d4:
                    59:e4:09:2a:dc:0d:25:b9:cc:79:f5:fa:eb:e1:97:
                    2c:81:72:a5:0e:58:63:73:4e:c0:f9:33:03:0c:44:
                    6c:50:20:c7:0f:89:35:77:7b:e4:b5:19:c1:82:bb:
                    c6:7b:89:b8:d2:3b:3e:8f:b9:a0:83:5d:90:45:2c:
                    0b:d5:2d:f7:6a:b3:79:49:5d:80:21:b7:98:20:45:
                    58:a1:0f:1e:96:28:a8:10:30:8b:db:69:ee:10:39:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:35:62:E4:4F:55:32:BA:B2:51:A9:CB:5B:4C:B1:E9:03:28:C0
            X509v3 Authority Key Identifier:
                keyid:D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/mw01YuRPVTK6slGpy1tMsekDKMA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/2bWU8wV9-2JD9pwARuI7__kSF-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:3d:b8:93:b2:8a:b1:87:05:c5:fe:0f:28:51:de:e0:f5:
         8f:5e:e8:f7:db:4e:1e:75:a9:2b:31:3f:94:6d:72:df:0c:96:
         f6:73:f5:d9:88:15:7f:00:ed:d8:84:12:30:f9:39:f0:83:6b:
         e1:7b:87:17:27:43:fc:64:59:71:62:8e:4f:60:4b:90:c5:4f:
         8a:a0:0f:f6:53:b1:f1:60:b4:7a:a0:65:e1:4c:c9:af:c8:99:
         59:64:da:6d:85:5a:d3:ce:1d:fb:82:04:fb:af:3a:4a:4a:83:
         05:ce:17:6d:ca:6d:54:2e:e5:24:a1:66:89:58:95:a8:a7:26:
         60:6e:7a:98:8c:62:94:83:b0:9b:7a:e8:2f:94:72:85:c4:24:
         3b:bc:61:e6:5f:2f:22:58:91:3a:17:83:64:82:39:1c:ab:6f:
         a5:3a:f2:5b:4c:af:6f:a1:1e:11:49:ef:ed:6b:1b:4c:29:64:
         98:a1:3c:92:65:0b:11:30:28:be:8f:0e:c8:17:07:2e:34:99:
         75:2a:6f:b2:bf:a2:91:ff:5a:c1:f0:0a:ef:38:bf:03:c4:b2:
         e9:00:c4:cc:db:66:85:36:43:97:a2:df:ad:85:cf:86:70:7e:
         c3:bf:d8:f8:7f:6c:95:cc:0e:59:4b:a6:25:5f:2b:c4:be:93:
         3a:98:51:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghncMsKORcxWkBBTku8WwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YjU5NGYzMDU3ZGZiNjI0M2Y2OWMwMDQ2ZTIzYmZmZjkx
MjE3ZWUwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjBkMzU2MmU0NGY1NTMyYmFiMjUxYTljYjViNGNiMWU5MDMyOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUZhnmQvaKGYwa+bQEH4SsCGSHkB
O+SmZeBTAjX+0H8NnQmm8jOWn7cPKcycRLP99fKcf9vApK1DeK5K2OzpkkpnjYfr
i5PVjOebfwcQKJX+aDo5wiouKmfxjLsfKWYb66rQRWx5ZfezYafSG1yL+0tWzbxh
aLb7cuN8yZvX1W3qRNa/3yhWtj40Iy9fCiV/yVkm674w8LkEheriEnF3dYO/U9RZ
5Akq3A0lucx59frr4ZcsgXKlDlhjc07A+TMDDERsUCDHD4k1d3vktRnBgrvGe4m4
0js+j7mgg12QRSwL1S33arN5SV2AIbeYIEVYoQ8eliioEDCL22nuEDnNLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJsNNWLkT1UyurJRqctbTLHpAyjAMB8GA1UdIwQY
MBaAFNm1lPMFfftiQ/acAEbiO//5EhfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmJXVTh3VjktMkpEOXB3QVJ1STdfX2tTRi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80MGMyZGItMDVkNy00YzQzLTk1YzYt
MDNhOGVhYWY4NDMzLzEvbXcwMVl1UlBWVEs2c2xHcHkxdE1zZWtES01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80MGMyZGItMDVkNy00YzQzLTk1YzYtMDNhOGVhYWY4NDMz
LzEvMmJXVTh3VjktMkpEOXB3QVJ1STdfX2tTRi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMXMA0G
CSqGSIb3DQEBCwUAA4IBAQBTOj24k7KKsYcFxf4PKFHe4PWPXuj3204edakrMT+U
bXLfDJb2c/XZiBV/AO3YhBIw+Tnwg2vhe4cXJ0P8ZFlxYo5PYEuQxU+KoA/2U7Hx
YLR6oGXhTMmvyJlZZNpthVrTzh37ggT7rzpKSoMFzhdtym1ULuUkoWaJWJWopyZg
bnqYjGKUg7CbeugvlHKFxCQ7vGHmXy8iWJE6F4Nkgjkcq2+lOvJbTK9voR4RSe/t
axtMKWSYoTySZQsRMCi+jw7IFwcuNJl1Km+yv6KR/1rB8ArvOL8DxLLpAMTM22aF
NkOXot+thc+GcH7Dv9j4f2yVzA5ZS6YlXyvEvpM6mFHW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org