Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/ELmrJckxqASRHRkKFIOYmnFM5Dw.roa
File:                     ELmrJckxqASRHRkKFIOYmnFM5Dw.roa (raw, json)
Hash identifier:          Z1pVaUbjSujsJe6joG2p0fKvRqf/zuc4whQTKvxoJBw=
Subject key identifier:   10:B9:AB:25:C9:31:A8:04:91:1D:19:0A:14:83:98:9A:71:4C:E4:3C
Certificate issuer:       /CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Certificate serial:       018FB96088D2F42592481AF8F062CA522F1C
Authority key identifier: F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/ELmrJckxqASRHRkKFIOYmnFM5Dw.roa
Signing time:             Mon 27 May 2024 09:27:42 +0000
ROA not before:           Mon 27 May 2024 09:27:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204818
IP address blocks:        194.88.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b9:60:88:d2:f4:25:92:48:1a:f8:f0:62:ca:52:2f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
        Validity
            Not Before: May 27 09:27:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10b9ab25c931a804911d190a1483989a714ce43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:dd:9a:2d:78:9b:5e:35:66:2c:76:05:b5:
                    5b:5c:8d:84:96:33:54:c1:e8:5d:08:e9:a5:c8:76:
                    ca:03:9c:a4:af:e7:c6:20:57:ca:3e:b0:89:91:73:
                    7f:39:77:6e:05:c5:78:72:62:a3:bb:6a:47:b7:a1:
                    0b:5b:99:1a:3c:90:23:d9:ce:d8:e4:9f:54:8f:25:
                    96:cd:ac:9a:d3:ab:77:89:21:68:c7:dd:6a:b3:89:
                    0a:e7:97:df:d5:b3:31:d6:ec:0f:d3:84:30:ac:af:
                    d6:61:82:f3:1f:90:57:f2:e7:e4:88:13:a1:cd:77:
                    6a:59:cc:45:71:9c:5a:20:d8:43:2a:06:f9:90:61:
                    f5:5e:6f:dc:64:07:08:86:12:5a:8a:51:b8:35:44:
                    c3:9a:cd:31:8d:6b:f5:44:d4:11:09:1d:9f:36:9c:
                    0b:6b:1d:2a:94:50:c6:1c:4c:a5:c9:c4:69:36:03:
                    83:48:c8:4b:73:1d:d3:b1:19:55:70:90:62:d2:de:
                    74:1b:d9:6e:96:b6:b1:55:95:d2:5b:55:a1:44:d1:
                    83:08:84:c0:d0:38:1f:ba:20:ef:28:98:6e:43:ad:
                    6a:a2:8e:e1:e6:5b:ae:fa:54:0d:8f:30:60:10:0b:
                    ad:e3:99:43:34:44:8b:36:99:b1:85:c1:c0:69:dc:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B9:AB:25:C9:31:A8:04:91:1D:19:0A:14:83:98:9A:71:4C:E4:3C
            X509v3 Authority Key Identifier:
                keyid:F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/ELmrJckxqASRHRkKFIOYmnFM5Dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.88.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:dc:b8:c8:90:7b:a2:53:82:62:69:37:f4:f8:be:4b:82:
         24:89:25:0c:25:8a:54:40:ee:21:03:2a:36:c3:a0:03:48:85:
         9b:be:2c:db:82:f3:36:93:e1:bd:eb:33:03:89:24:59:83:0f:
         8f:fb:e4:26:86:f0:61:0d:6d:14:7f:5b:d3:4f:d3:a2:4a:e0:
         11:8b:dd:3f:f0:c8:ad:57:74:e3:cb:5e:6f:bf:2b:e1:e2:b6:
         bd:53:90:42:5e:87:9c:9e:c6:a2:38:12:d9:ab:84:23:3d:25:
         a6:7a:20:25:56:d3:01:cf:6e:24:10:52:2b:e0:43:67:50:dd:
         06:83:a3:0e:39:9e:72:2d:6b:01:c4:26:0e:28:c7:8e:f5:f9:
         21:f2:a8:a8:4e:24:02:74:21:5f:d0:2d:c3:98:44:db:06:0f:
         1b:f2:5c:11:12:2c:db:60:f6:27:74:e2:01:75:63:c9:58:29:
         84:05:05:1a:ae:66:67:6f:13:08:d8:e5:54:a4:43:75:5c:a0:
         cf:15:d6:85:13:84:9d:71:ef:3f:6e:f5:25:f2:31:c7:c8:3b:
         af:0f:64:0d:fa:87:8c:d0:4d:74:8c:26:50:ac:3f:b3:9b:2a:
         3c:10:05:f7:46:14:4a:03:63:c9:04:35:ec:2c:21:cc:83:ad:
         fe:9c:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:09:03 2024 by rpki-client on console-ams.rpki-client.org