Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/PYdd4R0m7JeLY02roB5WIHOV56Y.roa
File:                     PYdd4R0m7JeLY02roB5WIHOV56Y.roa (raw, json)
Hash identifier:          5Fk6fAa4wBgUd9Egt6YvpjGt5Ayx51b/Kj+Aid4slpc=
Subject key identifier:   3D:87:5D:E1:1D:26:EC:97:8B:63:4D:AB:A0:1E:56:20:73:95:E7:A6
Certificate issuer:       /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial:       0188716A4E59B9368B822D62E348BE41EE0D
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/PYdd4R0m7JeLY02roB5WIHOV56Y.roa
Signing time:             Wed 31 May 2023 10:46:12 +0000
ROA not before:           Wed 31 May 2023 10:46:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57207
IP address blocks:        95.140.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:71:6a:4e:59:b9:36:8b:82:2d:62:e3:48:be:41:ee:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
        Validity
            Not Before: May 31 10:46:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d875de11d26ec978b634daba01e56207395e7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:6a:4f:fc:fe:d5:7d:93:af:d9:49:a7:c0:
                    a5:11:37:ae:53:ff:6a:24:08:d7:75:83:75:c7:55:
                    c8:c0:22:05:e1:f6:31:14:2e:98:c9:8f:ad:46:61:
                    e8:01:5a:9c:27:e4:6c:e7:e1:c3:8e:3b:04:bd:ed:
                    4d:e2:f8:27:49:f0:97:6b:6f:51:74:5a:f8:01:5c:
                    b7:aa:dc:ef:45:59:b6:0c:05:34:db:04:90:63:93:
                    07:80:48:9b:da:34:7a:52:40:14:44:ed:a3:a5:59:
                    35:77:ac:63:c6:c3:bd:77:64:bb:bc:94:e3:af:f0:
                    c2:e2:63:f9:f3:37:bf:91:5e:38:4b:88:b8:fa:ed:
                    b9:45:7e:ab:2f:ef:a5:03:9c:40:7d:dc:ec:ab:f7:
                    22:df:91:81:b0:af:3f:bb:06:82:54:e5:fd:d8:05:
                    e4:25:39:bd:f0:23:9e:f3:cb:79:9a:c8:f3:a3:3d:
                    ff:1e:c8:5c:e3:f3:2d:55:36:14:b0:84:8a:39:49:
                    8b:5a:85:31:db:29:ba:2c:81:ec:94:dc:e7:84:bb:
                    80:3a:66:c2:1b:22:ee:54:aa:d5:e1:b5:9c:02:f0:
                    11:34:7c:68:fd:89:49:54:14:a9:01:14:7a:ef:82:
                    ef:39:3a:3a:8a:c9:07:71:85:99:82:07:3c:7b:a3:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:87:5D:E1:1D:26:EC:97:8B:63:4D:AB:A0:1E:56:20:73:95:E7:A6
            X509v3 Authority Key Identifier:
                keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/PYdd4R0m7JeLY02roB5WIHOV56Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:49:e8:b0:e3:80:92:66:6e:07:74:e7:22:f3:81:b8:0f:c4:
         08:91:20:f6:ab:1e:a9:84:32:43:0e:e2:c3:ad:68:57:7d:eb:
         32:27:4a:84:b6:0f:87:dd:f6:e5:a4:b9:53:78:83:93:33:7b:
         a7:a9:6d:4f:9f:83:f6:4f:77:a4:30:62:95:e2:55:f0:dc:e6:
         d5:2b:00:6f:82:7f:4a:38:e3:4d:89:40:67:4d:9f:a9:a7:8b:
         00:e7:cc:2e:19:f1:34:fc:df:3b:c0:69:6a:e5:0b:2f:89:08:
         0b:0e:5d:b0:19:42:42:09:39:94:9a:2f:e8:86:c3:e0:98:fd:
         d9:7b:91:f7:f5:c9:29:4b:19:be:c9:59:a8:98:e6:4b:42:00:
         b8:84:f1:e8:c8:b4:05:26:47:37:4b:ac:f9:b0:fe:73:87:a3:
         84:9b:d5:52:96:c5:b6:63:66:29:42:f5:eb:95:be:e4:e5:1f:
         b5:b0:e7:d9:47:30:9f:fb:dd:85:45:13:ee:14:b3:b5:e1:e0:
         f7:88:bc:8f:69:99:5f:58:37:b4:73:9c:c4:f3:51:a4:09:8f:
         aa:f1:b1:85:f3:4b:45:16:8c:14:47:a2:ad:1e:d6:d4:ff:00:
         71:35:a2:d0:f1:e3:33:43:8e:f5:29:7e:3b:55:20:57:94:97:
         eb:1c:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org