Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/JUlZzfZuZp5o3NwAbxRZWWmn8l4.roa
File:                     JUlZzfZuZp5o3NwAbxRZWWmn8l4.roa (raw, json)
Hash identifier:          xXq348BV9d4m8FP9U9sPfrb/FrBYvwioYogODi6g71Y=
Subject key identifier:   25:49:59:CD:F6:6E:66:9E:68:DC:DC:00:6F:14:59:59:69:A7:F2:5E
Certificate issuer:       /CN=0d3c383b2d395162314b034871b8e94c92384e13
Certificate serial:       01856C1388CEEADE1AA44DCB9544331CAF4A
Authority key identifier: 0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/JUlZzfZuZp5o3NwAbxRZWWmn8l4.roa
Signing time:             Sun 01 Jan 2023 06:44:57 +0000
ROA not before:           Sun 01 Jan 2023 06:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34939
IP address blocks:        193.110.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:88:ce:ea:de:1a:a4:4d:cb:95:44:33:1c:af:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3c383b2d395162314b034871b8e94c92384e13
        Validity
            Not Before: Jan  1 06:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=254959cdf66e669e68dcdc006f14595969a7f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:42:64:51:ac:9d:39:1d:97:0e:48:3b:89:
                    d8:36:40:a7:93:a7:71:db:6b:3b:8f:57:c2:62:da:
                    77:a3:88:55:88:37:58:7c:e3:c1:9e:8a:20:64:4f:
                    e8:90:bf:67:32:d9:cf:22:78:6d:c3:03:d2:a0:4a:
                    14:93:74:b8:77:26:de:d8:ce:70:08:29:0e:e0:87:
                    54:a3:57:43:a4:0e:22:bb:e6:0d:fe:0f:b3:91:99:
                    87:ff:24:9e:3a:74:26:e4:e6:e1:1c:ca:e6:a9:6a:
                    ea:ac:00:6f:26:4e:2f:75:47:53:1c:0b:d9:a6:a9:
                    04:fa:23:a8:c8:89:48:44:c7:5f:61:b8:6e:f8:99:
                    32:1a:c9:1f:19:4d:84:8d:f3:b6:2f:33:0d:c4:25:
                    fb:16:ac:27:8f:b0:22:e3:d8:e8:9c:71:a2:b7:da:
                    39:54:1a:94:a3:6f:b3:6b:f8:40:65:da:8f:2e:ca:
                    82:58:8e:04:67:1c:67:20:aa:20:6b:c1:03:9a:35:
                    9a:54:62:d9:05:9b:e5:d6:66:31:10:d2:77:1b:d7:
                    52:6d:f2:f8:36:98:9a:29:49:e8:11:24:ab:6c:ec:
                    20:91:46:8d:69:6a:71:e6:7c:4c:2a:87:2c:bc:48:
                    8a:79:6b:16:81:5f:ca:88:41:1f:64:3d:c5:8c:57:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:59:CD:F6:6E:66:9E:68:DC:DC:00:6F:14:59:59:69:A7:F2:5E
            X509v3 Authority Key Identifier:
                keyid:0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/JUlZzfZuZp5o3NwAbxRZWWmn8l4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:54:21:65:63:15:a3:c1:86:cb:91:f2:4d:6d:db:6f:52:47:
         41:f4:a2:61:46:2e:28:21:63:be:cd:a5:95:6e:2f:60:5b:b4:
         72:67:1d:32:bf:11:2d:de:57:a9:d2:0c:d5:5d:d3:5a:23:84:
         ed:12:e1:8e:e3:d4:00:7c:e2:43:83:d6:79:a0:27:7c:48:98:
         2a:1a:e7:4a:9c:63:16:24:ae:f7:73:73:0a:ac:5f:79:bf:80:
         dd:ca:a9:56:b0:6a:9f:47:d2:63:b1:f6:0c:54:38:5a:98:a9:
         4e:14:fb:5f:26:07:88:b6:f6:b2:89:ea:45:68:a6:e4:5b:9a:
         35:de:3e:9e:83:15:97:e0:b0:3e:f9:d9:e2:c3:a5:4f:7a:bc:
         42:55:ff:98:66:ab:af:90:f4:94:6e:85:f0:2a:d8:04:01:8b:
         05:b2:89:24:7b:67:1f:72:a9:70:65:6a:08:93:4e:0c:38:a5:
         cd:e9:ca:eb:00:06:9f:2d:bf:ae:db:c3:b0:11:7e:0b:c0:9c:
         d3:76:23:ae:05:91:75:7e:a6:1f:d4:e4:95:4b:09:ea:9a:30:
         86:d2:c7:55:19:16:01:d1:5d:32:70:fd:18:f7:d7:11:d2:35:
         c9:dd:b6:c8:2d:36:5f:50:f1:5e:93:b6:dd:b4:be:bc:1e:91:
         69:9b:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org