Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/rUnVZzAbIECV-QAXDspKzAoAPqw.roa
File:                     rUnVZzAbIECV-QAXDspKzAoAPqw.roa (raw, json)
Hash identifier:          ef/qOCLhrcpJNnyISzBBJgKB2FqiDOOaJDtWdHVBZB0=
Subject key identifier:   AD:49:D5:67:30:1B:20:40:95:F9:00:17:0E:CA:4A:CC:0A:00:3E:AC
Certificate issuer:       /CN=0d3c383b2d395162314b034871b8e94c92384e13
Certificate serial:       01856C1389CF67C1FEA06F9EF1C69417C383
Authority key identifier: 0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/rUnVZzAbIECV-QAXDspKzAoAPqw.roa
Signing time:             Sun 01 Jan 2023 06:44:57 +0000
ROA not before:           Sun 01 Jan 2023 06:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50902
IP address blocks:        193.110.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:89:cf:67:c1:fe:a0:6f:9e:f1:c6:94:17:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3c383b2d395162314b034871b8e94c92384e13
        Validity
            Not Before: Jan  1 06:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad49d567301b204095f900170eca4acc0a003eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:bc:54:80:a0:0e:e7:08:5c:c6:4a:78:be:
                    44:08:37:b4:76:28:4c:60:0b:c9:e1:50:db:69:92:
                    f0:5b:61:76:a0:35:53:e7:4e:d5:dd:e5:12:14:ed:
                    92:76:78:75:db:6d:d8:fa:99:4f:2b:d8:03:bd:8e:
                    49:a3:0c:e5:9f:47:de:f4:54:ef:f0:b4:14:e7:7d:
                    00:4a:7e:82:73:f8:fb:6b:0d:d4:43:ee:18:31:0e:
                    13:4c:42:35:73:e5:b3:0a:80:75:e1:41:7d:ac:78:
                    cc:7c:0f:54:08:3b:f5:4d:5a:4d:ac:60:5e:52:85:
                    15:67:f6:97:7d:ac:9e:d6:85:6d:ee:0b:f3:95:78:
                    eb:f0:86:cf:06:cb:00:9b:03:a7:70:43:bc:e6:01:
                    ad:cc:d9:4f:3a:c8:e5:e2:6e:d7:15:52:40:01:89:
                    08:71:51:bb:09:1c:e8:45:72:78:6b:0a:9b:33:1a:
                    82:85:4e:f4:90:78:df:b0:b6:be:94:51:d9:5f:2c:
                    6c:4e:d8:46:e7:cc:9a:26:2f:0a:43:bd:34:50:00:
                    ec:c2:be:d1:50:d2:56:90:b6:f9:02:de:0a:c6:67:
                    27:3b:d9:f7:29:88:08:39:71:b5:64:e7:2d:3c:9b:
                    76:de:19:cc:be:91:90:bb:32:38:0e:fc:4b:24:fa:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:D5:67:30:1B:20:40:95:F9:00:17:0E:CA:4A:CC:0A:00:3E:AC
            X509v3 Authority Key Identifier:
                keyid:0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/rUnVZzAbIECV-QAXDspKzAoAPqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f9:ae:46:9a:4a:34:fd:f6:55:95:03:5b:d1:ea:85:52:12:
         1c:a9:7c:c4:39:85:9c:b1:3f:bd:8c:ab:0d:61:8e:42:92:46:
         37:5b:5a:53:24:0f:48:87:c3:5d:95:cd:a2:96:30:18:6a:74:
         41:a4:0f:f6:83:07:18:c6:52:26:62:0c:3e:ef:9b:c1:f9:86:
         c4:98:eb:2f:de:f2:9e:10:68:74:98:0e:06:32:53:38:f6:9c:
         61:ed:75:d0:56:e5:dc:94:f0:c7:c9:9b:fb:40:a6:2e:cb:55:
         3e:33:49:e2:79:04:f6:c6:37:a4:c8:7a:06:c1:bc:df:ec:62:
         16:cc:c1:23:f6:b0:d0:a8:d3:69:c8:a3:69:48:76:bc:f0:bd:
         54:b3:d4:57:1d:26:02:bc:78:f0:68:3e:5d:f1:80:21:0a:36:
         23:0f:12:7a:9e:b1:29:f5:16:3a:47:c8:07:09:eb:8c:15:77:
         64:5d:e6:4f:71:c1:ba:07:94:8c:71:b6:1e:19:81:24:66:ea:
         e7:df:e3:fd:1a:5b:9a:8f:d8:f6:a7:e9:d1:3f:f1:7f:b9:49:
         99:c8:b9:ff:d6:ff:52:49:31:46:26:b0:2b:78:33:32:43:86:
         c0:f3:29:0c:66:5d:a0:ba:37:db:ac:43:b4:28:34:0d:b3:40:
         b3:04:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org