Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/frLJ8BSiW7Gou7DK0Qnj7iroSb4.roa
File:                     frLJ8BSiW7Gou7DK0Qnj7iroSb4.roa (raw, json)
Hash identifier:          urrMWSUP+171MMV7E3lZs2H3kDC4IrXquk1/q5Ks73M=
Subject key identifier:   7E:B2:C9:F0:14:A2:5B:B1:A8:BB:B0:CA:D1:09:E3:EE:2A:E8:49:BE
Certificate issuer:       /CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Certificate serial:       0188092C77F6483A6BE8FDF1CD72913C5F9B
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/frLJ8BSiW7Gou7DK0Qnj7iroSb4.roa
Signing time:             Thu 11 May 2023 04:58:09 +0000
ROA not before:           Thu 11 May 2023 04:58:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        188.64.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:09:2c:77:f6:48:3a:6b:e8:fd:f1:cd:72:91:3c:5f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
        Validity
            Not Before: May 11 04:58:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7eb2c9f014a25bb1a8bbb0cad109e3ee2ae849be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:33:73:bb:14:c5:9d:4c:87:42:bf:1e:a4:
                    5d:22:e4:69:9d:b5:68:f0:2b:fc:f4:66:ef:6c:9c:
                    2a:a3:b8:56:2f:90:d4:b7:1d:a0:8d:a5:22:5d:f4:
                    6f:ae:98:01:72:e5:33:cb:f8:9e:6d:34:0a:c2:49:
                    19:06:a5:d0:56:1a:35:03:d1:97:ef:7b:25:43:2f:
                    26:ff:65:4b:e7:cf:29:16:77:fd:df:ef:4d:3f:c7:
                    88:43:02:39:29:ea:31:74:f6:7b:09:58:35:fe:41:
                    02:23:8e:1a:f3:c1:a2:b8:71:6f:17:db:f5:2c:ab:
                    cd:9c:7a:d7:6a:7a:b9:1a:8d:76:d5:94:05:65:be:
                    1e:ac:97:17:15:49:ba:62:b8:a4:da:ee:80:19:39:
                    be:e1:b9:94:e8:3b:af:a1:f0:96:10:d9:e5:b8:d1:
                    3f:57:90:aa:56:e7:1c:54:cf:8e:bc:5e:32:77:ed:
                    16:d1:64:08:a7:f0:91:1e:00:b1:34:41:e4:07:e3:
                    8c:0c:ac:3f:d2:d0:65:c9:20:69:8d:b5:80:24:e1:
                    97:ed:9c:a5:08:1e:3d:ba:b3:df:7a:ca:59:0e:59:
                    76:ce:cd:de:1d:64:48:62:87:f8:6a:cb:4d:18:28:
                    6c:58:1e:85:e6:0a:88:aa:92:56:99:ae:5c:99:d7:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:C9:F0:14:A2:5B:B1:A8:BB:B0:CA:D1:09:E3:EE:2A:E8:49:BE
            X509v3 Authority Key Identifier:
                keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/frLJ8BSiW7Gou7DK0Qnj7iroSb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:6e:db:00:97:3d:13:d1:81:7e:3f:fc:08:52:09:e2:1b:
         2d:2e:71:d7:eb:a6:2a:20:aa:f4:2c:b8:35:77:cc:44:60:c2:
         66:a9:50:5e:58:5a:90:7b:a3:f2:66:fa:71:a6:4e:db:0d:c9:
         0a:54:ae:12:3c:5c:ad:a0:98:02:12:ba:60:6b:97:a7:b7:bf:
         2d:06:04:fe:d0:3f:1e:8e:48:b8:b5:0c:5d:0c:e0:45:45:83:
         89:a8:55:f1:5d:77:c3:5a:9e:d2:06:24:f5:47:d5:2b:59:c8:
         ea:d9:04:2b:9c:23:13:5a:51:04:c4:c6:a9:f4:11:b5:a7:c2:
         46:82:1d:5f:4f:0c:f1:2a:ff:72:87:d7:94:8b:c2:cb:30:4c:
         5d:a6:80:29:55:30:dc:70:22:4b:08:b5:91:a4:36:7d:5f:ca:
         ec:1b:e9:e1:9a:f6:09:d3:d0:34:3b:0d:17:48:d5:93:a3:8c:
         92:27:b3:53:59:bc:46:42:63:6f:0a:c3:85:c7:50:10:8d:99:
         29:a8:31:4a:9e:38:b7:28:8c:97:79:2b:43:b7:c1:ee:e3:be:
         e1:e1:60:ba:06:57:ae:14:fb:c5:11:84:46:c8:44:ae:1b:27:
         02:84:75:53:20:88:6d:6b:cc:ba:53:f4:a2:d4:c4:24:0c:46:
         7e:34:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:16 2024 by rpki-client on console-ams.rpki-client.org