Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/ne4LsTw9XQKo98DW4fxapxZMWsc.roa
File:                     ne4LsTw9XQKo98DW4fxapxZMWsc.roa (raw, json)
Hash identifier:          /F61j81jcd3c1Y0YlyvC1oEB+dqXOwegnv9zclAE6tw=
Subject key identifier:   9D:EE:0B:B1:3C:3D:5D:02:A8:F7:C0:D6:E1:FC:5A:A7:16:4C:5A:C7
Certificate issuer:       /CN=0d3c383b2d395162314b034871b8e94c92384e13
Certificate serial:       0183ECE544EE267049ABB345FCF5B68BAFC0
Authority key identifier: 0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/ne4LsTw9XQKo98DW4fxapxZMWsc.roa
Signing time:             Tue 18 Oct 2022 20:59:51 +0000
ROA not before:           Tue 18 Oct 2022 20:59:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50902
IP address blocks:        193.110.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ec:e5:44:ee:26:70:49:ab:b3:45:fc:f5:b6:8b:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3c383b2d395162314b034871b8e94c92384e13
        Validity
            Not Before: Oct 18 20:59:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9dee0bb13c3d5d02a8f7c0d6e1fc5aa7164c5ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:c7:d5:81:b6:72:42:d1:51:14:6a:48:94:
                    c4:75:3a:54:e8:24:04:a7:9a:5b:e7:62:5a:61:a8:
                    3c:6d:30:17:19:14:a5:2e:f8:76:23:27:f6:81:e8:
                    e4:04:34:67:17:ef:e8:5e:e3:34:a0:ef:e8:05:9a:
                    2d:bd:d4:84:29:90:dd:b8:41:14:63:a1:1a:6c:55:
                    36:95:85:96:3d:66:4a:45:c9:38:74:51:20:b4:fd:
                    5d:8f:6d:29:84:3e:57:06:39:4a:9a:7d:31:85:b7:
                    1b:1a:94:ab:a9:04:f4:e2:a3:ef:6b:82:c1:65:d4:
                    78:c3:8a:e9:7d:d6:4e:41:fb:59:a8:0c:0b:6d:e8:
                    c6:80:f7:af:a1:a5:fe:39:d9:f7:4e:11:52:b8:32:
                    3e:8a:1f:fc:5b:57:cf:07:01:3e:cc:b1:c9:27:7e:
                    c3:af:53:53:a7:59:20:6c:1e:52:06:34:25:c3:0e:
                    10:58:b2:80:d7:bd:61:3b:1e:11:24:e2:f1:c8:d4:
                    52:63:9c:88:1b:b2:53:76:98:dd:6a:9b:36:10:84:
                    5e:d0:11:9f:aa:bd:2c:96:b9:d0:60:b9:73:f8:80:
                    55:4a:4d:42:45:fb:85:1a:46:b5:ec:c7:4f:83:0e:
                    9c:41:bf:4f:50:4b:02:ac:94:2f:d4:f0:69:7f:a1:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:0B:B1:3C:3D:5D:02:A8:F7:C0:D6:E1:FC:5A:A7:16:4C:5A:C7
            X509v3 Authority Key Identifier:
                keyid:0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/ne4LsTw9XQKo98DW4fxapxZMWsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:06:bc:db:fc:26:0f:6c:34:0f:c0:40:2f:73:61:7c:d8:b4:
         75:76:6b:b0:05:ce:89:6b:bb:56:32:1d:3d:6e:41:ae:72:c4:
         8b:69:b6:26:ec:e4:81:41:61:c9:ef:b0:bf:a3:b4:f8:77:c4:
         e3:7c:34:e9:78:dd:23:d7:e5:38:66:c6:59:e9:1c:60:03:24:
         6c:6a:d7:29:a5:92:0d:56:ba:b5:4c:a5:0b:1c:a2:6e:75:39:
         75:16:1d:65:39:ec:24:34:45:15:df:b0:a0:fa:9c:09:ba:35:
         3a:2f:68:10:ad:40:4e:39:42:67:6d:7a:58:b5:72:48:03:9f:
         f1:f6:81:b0:05:98:a1:90:30:84:10:5e:71:7f:4c:72:f7:0c:
         f5:a4:41:ed:4b:b6:18:8d:06:1d:7f:dc:28:62:29:d6:21:2e:
         30:0a:4e:93:fa:02:47:09:4d:57:3b:54:ca:ab:9d:3e:8d:20:
         d2:a0:44:7d:3d:88:83:33:6a:10:35:bd:99:08:2e:e4:a4:53:
         64:2a:83:84:93:f7:e7:31:3f:81:3c:45:dd:77:90:69:f8:c5:
         41:f0:6f:56:16:06:07:e8:87:4b:37:24:8d:2d:aa:77:88:08:
         d2:39:18:23:aa:e1:f2:36:ae:1a:ae:93:b3:d1:14:c7:78:1f:
         77:a7:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org