Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/le_LQVbDVzl9LVrfxd4uR6NZ1yY.roa
File:                     le_LQVbDVzl9LVrfxd4uR6NZ1yY.roa (raw, json)
Hash identifier:          i5ETYpPxLuJwF2X3449YDsdg40LN21E21sOHKYcw4QE=
Subject key identifier:   95:EF:CB:41:56:C3:57:39:7D:2D:5A:DF:C5:DE:2E:47:A3:59:D7:26
Certificate issuer:       /CN=1b5eb04fe15554fdb9a2433a126cad20987a694d
Certificate serial:       01882086B269F45FB0CE6A534815F416826B
Authority key identifier: 1B:5E:B0:4F:E1:55:54:FD:B9:A2:43:3A:12:6C:AD:20:98:7A:69:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G16wT-FVVP25okM6EmytIJh6aU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/le_LQVbDVzl9LVrfxd4uR6NZ1yY.roa
Signing time:             Mon 15 May 2023 17:47:58 +0000
ROA not before:           Mon 15 May 2023 17:47:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        185.184.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b2:69:f4:5f:b0:ce:6a:53:48:15:f4:16:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b5eb04fe15554fdb9a2433a126cad20987a694d
        Validity
            Not Before: May 15 17:47:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95efcb4156c357397d2d5adfc5de2e47a359d726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:95:1c:ed:2c:61:b0:5e:ea:d1:62:57:d9:
                    ae:c9:66:99:80:f9:49:8b:07:8e:71:94:5d:d8:f9:
                    8e:5e:a2:e9:be:64:69:00:80:a3:24:8a:e0:64:6a:
                    bc:74:ca:5a:6d:77:37:55:cd:b7:ba:8e:3c:c8:88:
                    fb:17:f9:08:71:83:a9:10:da:3a:94:f1:de:89:4b:
                    e0:f3:4b:b3:43:5b:7a:72:99:bf:b5:7d:f3:f0:f8:
                    df:5a:33:94:3b:0d:61:6f:e1:bd:8f:4e:6a:e3:58:
                    46:be:a6:ee:ee:9e:9a:dd:fd:a1:4f:fd:7c:df:96:
                    f8:af:49:11:e3:b3:44:f4:83:19:e0:bd:57:ee:3a:
                    1c:62:89:99:96:e3:50:f8:ad:f6:3e:36:0d:e9:80:
                    c9:00:6f:64:18:81:be:60:fc:72:5e:89:4b:e3:cd:
                    6f:b2:87:fa:ee:a1:b3:23:c3:52:00:6a:4c:ce:f8:
                    87:0d:32:f8:97:86:76:03:85:a6:1f:cb:e0:df:6d:
                    5d:5a:1b:64:53:8c:e0:57:b8:d0:5e:1a:14:be:ae:
                    c3:a8:2f:2d:17:45:4a:ac:e8:96:1b:bf:88:85:5f:
                    d4:66:38:9f:72:a9:9a:59:06:e8:00:78:9e:12:93:
                    80:35:6e:0d:45:51:d9:5c:ab:b1:08:c5:2c:b8:e3:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EF:CB:41:56:C3:57:39:7D:2D:5A:DF:C5:DE:2E:47:A3:59:D7:26
            X509v3 Authority Key Identifier:
                keyid:1B:5E:B0:4F:E1:55:54:FD:B9:A2:43:3A:12:6C:AD:20:98:7A:69:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G16wT-FVVP25okM6EmytIJh6aU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/le_LQVbDVzl9LVrfxd4uR6NZ1yY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/G16wT-FVVP25okM6EmytIJh6aU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:88:d8:7f:57:9d:8c:d2:13:f5:c1:1a:69:65:b2:b6:41:
         bf:c5:52:8c:ec:77:24:e6:5b:9d:28:86:09:6c:5b:92:84:64:
         6c:b3:4c:65:38:48:cf:7a:ca:a4:7a:6e:b5:8b:40:f9:ad:55:
         5f:4b:fe:20:7d:db:d3:b2:8d:ed:a2:39:26:1f:3b:3a:63:be:
         bb:96:c8:a4:7d:95:89:31:d8:f2:87:a6:0e:a1:1b:e9:bd:7e:
         ff:f4:6d:10:22:54:e7:8e:71:b1:11:20:b2:4c:8a:4f:b2:43:
         29:c7:60:8a:15:9e:60:56:c7:3b:42:cd:cf:0b:dd:34:61:81:
         81:62:a9:47:71:53:d7:a8:65:b5:9c:f7:15:12:04:68:45:fa:
         5c:b2:2e:5b:66:5b:31:be:ff:f9:2c:bb:ee:3b:12:8d:b2:f0:
         f1:49:ac:b9:f2:de:95:aa:5e:66:18:84:07:ae:89:91:e5:e9:
         50:10:6c:f9:34:d6:8f:74:d4:20:6d:f5:9d:e3:f4:e4:0e:3e:
         77:13:13:3a:b3:6b:66:8a:54:1c:13:6e:13:fd:97:6f:09:18:
         be:aa:be:29:c8:8d:0d:95:61:25:56:61:92:d9:c8:e0:a2:69:
         3f:eb:82:a2:cf:e6:b0:a2:79:fb:47:3d:00:f5:72:c0:1a:b1:
         9b:99:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org