Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/LRD8VJZX6hcVFBAgUCu8vZ2KE_Q.roa
File:                     LRD8VJZX6hcVFBAgUCu8vZ2KE_Q.roa (raw, json)
Hash identifier:          ovSQvLBhviLtm6gCdEkVWL19SVgg4G4Vrhp2xR5whQY=
Subject key identifier:   2D:10:FC:54:96:57:EA:17:15:14:10:20:50:2B:BC:BD:9D:8A:13:F4
Certificate issuer:       /CN=c40939a28c4b00489a92b42161aa82366acdc453
Certificate serial:       018964C05B2AFCB63968ABA2B37FB7E115F2
Authority key identifier: C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/LRD8VJZX6hcVFBAgUCu8vZ2KE_Q.roa
Signing time:             Mon 17 Jul 2023 16:47:54 +0000
ROA not before:           Mon 17 Jul 2023 16:47:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        178.212.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:5b:2a:fc:b6:39:68:ab:a2:b3:7f:b7:e1:15:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40939a28c4b00489a92b42161aa82366acdc453
        Validity
            Not Before: Jul 17 16:47:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d10fc549657ea1715141020502bbcbd9d8a13f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:aa:7b:03:9d:22:a9:9e:f4:62:5c:2e:ec:
                    07:a4:e0:d3:c0:89:b2:23:cf:63:47:0a:c3:a5:ed:
                    16:e2:79:a3:78:fd:57:ec:9f:3c:ea:37:8f:9e:29:
                    88:4e:ef:bd:12:33:95:57:37:1c:7c:1d:18:f4:6e:
                    dd:a5:9c:a6:7b:8a:aa:92:90:e4:61:79:72:ca:40:
                    aa:5b:0f:7d:f6:e7:b3:db:a1:62:d0:55:0f:48:58:
                    d7:fc:36:42:02:20:e0:24:33:3b:21:fd:9a:01:50:
                    60:9a:e7:2f:b3:0b:c5:0e:9c:c5:8b:21:39:c2:45:
                    9e:8f:9c:2a:f1:3b:ec:ef:1f:90:2e:9e:dd:c8:e3:
                    0a:79:04:1a:a1:dc:92:a4:c8:8c:1c:81:44:e8:63:
                    66:e9:b8:ff:09:29:bd:26:f2:34:ae:27:01:34:bc:
                    62:5c:7a:a5:4f:fe:3d:98:7a:53:79:11:45:7b:d9:
                    1c:22:83:ff:af:d8:6c:5b:db:24:7c:09:10:fb:b2:
                    b2:eb:4d:e6:83:f7:ff:0c:b8:36:34:a6:c6:3a:3c:
                    28:66:40:9c:ee:41:d5:f6:71:b7:e5:ab:ae:16:a6:
                    71:19:ec:10:e3:0f:6d:b1:90:f2:9d:c8:73:10:7e:
                    04:3e:b6:c4:97:ef:51:88:8c:36:0e:5b:12:c5:6c:
                    91:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:FC:54:96:57:EA:17:15:14:10:20:50:2B:BC:BD:9D:8A:13:F4
            X509v3 Authority Key Identifier:
                keyid:C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/LRD8VJZX6hcVFBAgUCu8vZ2KE_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/xAk5ooxLAEiakrQhYaqCNmrNxFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:08:89:e3:a3:43:f0:c2:3a:87:18:e3:25:6f:38:e8:03:ec:
         fc:75:a1:c3:4c:69:16:76:3f:55:c1:c1:13:f3:75:bf:71:4d:
         79:f2:ce:14:7e:5b:d3:a8:86:fe:85:9e:06:72:81:34:4d:0f:
         c4:7b:a4:9d:f8:a7:30:58:53:bc:92:41:ce:20:42:c2:c5:a0:
         73:6a:7a:c0:1a:34:9d:51:42:42:20:24:6d:c8:63:2d:2d:f7:
         de:54:ce:0c:56:31:bc:0b:62:f8:3e:11:0e:ff:36:fc:31:e3:
         f7:bd:a9:79:b3:6c:bd:e1:00:ee:9e:0d:8b:bb:f6:1e:0f:4f:
         f7:d5:12:fd:5c:db:2c:0f:d3:d2:a1:ae:69:bb:65:ed:e7:90:
         e0:b2:b7:40:97:d7:4b:e3:5c:cf:f1:e5:54:1c:85:9a:2d:a4:
         7c:8c:77:e8:13:de:a0:d2:4a:39:b0:cf:f8:95:f5:46:25:7f:
         ff:32:61:d7:30:bc:a3:dc:31:b2:3f:49:67:5e:cb:bf:30:4a:
         06:79:25:63:ea:c6:9e:75:76:47:4e:4f:80:60:fa:75:fe:c2:
         9d:f4:25:de:9d:67:54:f3:0e:e6:a2:f2:70:8f:18:fc:91:8b:
         9f:ac:dd:6b:7b:54:f5:07:7f:8c:6a:04:0e:5c:a4:b8:d7:1f:
         39:66:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:03 2024 by rpki-client on console-fra.rpki-client.org