Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Wwmnbf6MewdC8LI0ZKQG9Jc101Q.roa
File:                     Wwmnbf6MewdC8LI0ZKQG9Jc101Q.roa (raw, json)
Hash identifier:          VH/OV10W+fgP8LXprAJ+HmDq7KRcCsgRYtcMM+9+KWA=
Subject key identifier:   5B:09:A7:6D:FE:8C:7B:07:42:F0:B2:34:64:A4:06:F4:97:35:D3:54
Certificate issuer:       /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial:       0183A7C8BA53DF3F22CD2C18886096FCD4E2
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Wwmnbf6MewdC8LI0ZKQG9Jc101Q.roa
Signing time:             Wed 05 Oct 2022 10:54:53 +0000
ROA not before:           Wed 05 Oct 2022 10:54:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        194.49.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a7:c8:ba:53:df:3f:22:cd:2c:18:88:60:96:fc:d4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
        Validity
            Not Before: Oct  5 10:54:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b09a76dfe8c7b0742f0b23464a406f49735d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:9b:ed:3e:3b:72:d2:e3:22:e0:be:db:a5:
                    73:dd:8f:57:1d:94:79:6c:82:82:23:e0:ed:51:7e:
                    d9:d4:a8:54:45:17:cd:75:81:59:a7:19:b6:44:0c:
                    2d:bd:57:71:5d:64:77:4b:95:0c:20:58:6d:45:9e:
                    63:dd:a8:e1:27:f2:5d:7e:b4:c6:97:42:b7:2a:7d:
                    55:b5:69:d3:dd:76:c9:1c:ac:ae:a6:4f:ae:ac:26:
                    23:82:1a:ed:9d:2f:62:f3:bf:42:84:43:b1:c2:4e:
                    2f:82:75:e1:17:c6:39:35:c2:77:8a:6f:34:38:98:
                    b7:81:b9:b6:7d:54:17:a9:d5:64:c6:a0:82:ea:e3:
                    c4:d0:3a:32:bc:9e:76:22:91:55:9b:2e:cd:33:99:
                    bc:b0:eb:e6:40:a8:1e:50:00:76:e0:f0:31:74:e0:
                    fb:f3:97:fb:d8:23:70:0f:a4:f5:87:4e:ca:b7:f7:
                    5b:9c:10:6a:a6:d7:ad:26:30:11:2a:e2:e3:ce:ea:
                    82:dc:6b:88:da:60:c6:22:92:b8:84:be:23:bd:af:
                    8a:14:0d:ab:a4:3c:72:e8:57:d5:9e:5a:11:28:6e:
                    2b:9f:15:0c:51:c1:e5:73:61:fa:7d:ea:aa:6e:70:
                    d4:86:34:18:90:bf:5c:56:ee:0f:96:79:f3:77:65:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:A7:6D:FE:8C:7B:07:42:F0:B2:34:64:A4:06:F4:97:35:D3:54
            X509v3 Authority Key Identifier:
                keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Wwmnbf6MewdC8LI0ZKQG9Jc101Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:26:46:a1:04:27:52:75:69:ac:c4:75:e6:e4:c6:72:b7:1f:
         71:ba:f1:70:65:36:58:fc:00:01:08:4f:65:5d:e9:ff:05:88:
         f7:06:02:8c:46:3a:ea:d6:be:97:f3:9b:ee:b3:fe:e7:41:da:
         b3:a9:91:f8:5f:85:6a:f9:be:9e:30:79:03:28:ce:e6:e9:7e:
         9c:f4:4b:37:da:28:9b:39:40:1a:f7:d0:18:5c:7b:8b:d8:c5:
         02:d3:7c:5a:de:5f:f1:b5:f3:c8:a4:0c:da:a4:2b:81:ec:82:
         44:14:05:db:fc:10:54:fb:5a:e1:90:dd:fd:25:c7:f1:8e:36:
         c9:26:99:b7:9c:02:07:05:e4:38:c8:d4:dd:13:66:0b:c5:d4:
         62:a9:ab:85:e0:94:ad:1b:5b:ee:4e:5f:bc:bd:42:27:2a:a0:
         40:8d:5e:11:35:d8:ab:29:11:5d:18:0a:5d:74:12:63:6b:dd:
         ae:51:b9:26:d7:f5:79:c5:d2:12:a6:67:2f:30:8e:04:04:04:
         66:4b:11:86:d8:c9:81:f0:c6:a9:5a:41:12:e7:d5:89:e2:2f:
         62:e2:bb:89:b8:78:93:55:1c:2e:44:76:c1:5a:68:a2:0b:e0:
         13:d7:c2:f4:c9:72:f7:02:94:55:6a:88:6e:58:0c:d7:7b:e4:
         86:0f:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:46 2024 by rpki-client on console-ams.rpki-client.org