Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/Ri5V5J2DazZWEYXb5uiauJTBN0Y.roa
File:                     Ri5V5J2DazZWEYXb5uiauJTBN0Y.roa (raw, json)
Hash identifier:          4xws0C0auienjaAnXGAbwYj0t6ItcLieTaOTnwH7UdY=
Subject key identifier:   46:2E:55:E4:9D:83:6B:36:56:11:85:DB:E6:E8:9A:B8:94:C1:37:46
Certificate issuer:       /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial:       0188716A4FCA4A68CF71B4D16379528F77DC
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/Ri5V5J2DazZWEYXb5uiauJTBN0Y.roa
Signing time:             Wed 31 May 2023 10:46:12 +0000
ROA not before:           Wed 31 May 2023 10:46:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199565
IP address blocks:        178.254.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:71:6a:4f:ca:4a:68:cf:71:b4:d1:63:79:52:8f:77:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
        Validity
            Not Before: May 31 10:46:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=462e55e49d836b36561185dbe6e89ab894c13746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:3c:f0:dc:27:02:ee:a1:07:bd:9e:c7:82:
                    63:84:71:d2:a6:30:58:b6:51:15:91:4e:fe:dd:86:
                    4f:53:f5:28:b6:f5:a4:1d:bc:26:76:ae:53:e6:85:
                    19:c2:17:40:4c:e8:7d:a1:d0:ae:6e:b0:c3:76:17:
                    9c:7a:3a:c2:f0:99:98:41:4e:6b:52:c6:81:19:3a:
                    ac:67:fb:d8:8b:ce:14:ca:06:fc:41:e4:82:a4:16:
                    2d:f8:83:a6:05:7b:e9:8c:12:3f:50:9b:85:d3:5b:
                    bb:d4:d0:e4:da:d3:97:f1:9c:9b:cc:7f:e7:6f:1e:
                    de:c8:6c:d3:32:aa:18:46:d3:5a:fc:cd:58:8f:69:
                    90:bd:43:ba:d4:44:f6:97:3b:2e:92:5b:7a:08:f2:
                    2c:40:6a:99:05:da:64:58:ff:dc:4c:3a:cd:f1:0d:
                    9e:5c:9e:85:c7:03:4b:e7:ec:79:ed:e9:d6:c0:46:
                    13:ac:6f:5d:23:3c:87:7f:cb:c8:6e:65:79:b7:24:
                    b1:7b:2a:7d:46:73:2d:2f:b1:9a:15:53:43:c5:c6:
                    07:69:88:5e:2c:34:4c:5f:f7:0d:db:ce:6e:b3:47:
                    42:b8:d4:a9:3a:6e:e0:25:2b:12:ee:37:0d:8d:df:
                    4e:2c:fb:c7:5a:06:82:9a:a8:71:37:e9:f6:54:59:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:55:E4:9D:83:6B:36:56:11:85:DB:E6:E8:9A:B8:94:C1:37:46
            X509v3 Authority Key Identifier:
                keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/Ri5V5J2DazZWEYXb5uiauJTBN0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:9e:56:b8:35:f8:37:00:c7:79:08:55:a5:ce:f9:9a:70:
         0a:98:6f:f8:fe:87:c9:64:7a:59:e1:80:73:48:9b:3e:0b:20:
         8e:a4:4c:13:0c:ef:ea:46:0e:75:9b:63:83:bd:5b:c0:d2:14:
         95:e9:f6:8f:2f:57:05:0e:de:2a:c7:04:0f:cd:97:7c:93:c7:
         f3:28:f0:83:0a:2e:8c:08:0a:6a:e9:6b:e9:8e:6f:77:1a:10:
         e2:3d:4c:48:58:7c:63:8d:f7:f2:82:59:79:d6:39:d7:9f:d4:
         bf:8f:14:e4:d8:08:8b:3f:12:6b:c7:ef:7c:ab:b2:49:58:a0:
         e6:f4:48:1a:35:5f:a1:7b:61:e5:de:aa:a2:35:7e:43:9c:f0:
         c8:b0:c9:38:19:e9:fa:67:ee:64:e7:a4:82:75:d4:f7:84:21:
         6b:28:06:52:e1:6f:d5:bd:3b:89:55:e1:e7:96:96:26:80:45:
         12:f5:4e:f2:22:28:3d:56:f3:0d:b0:ce:ce:7e:49:49:19:9a:
         19:e9:fb:cc:a8:92:9d:a0:f9:01:30:10:d2:4e:41:43:28:16:
         bd:4e:20:17:a4:82:ee:03:ee:a7:5d:68:25:aa:5a:2f:02:c2:
         96:a1:25:b1:3a:a8:45:cc:ec:49:2d:fc:5b:65:b7:ce:84:ab:
         b0:a6:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org