Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/T_2f95dt_MbWu8kgOS9SlQpG7IQ.roa
File:                     T_2f95dt_MbWu8kgOS9SlQpG7IQ.roa (raw, json)
Hash identifier:          CnUUCEY8KpX6Rkdn7NJjJcd+F1XjnweWHt2GfLM3oYE=
Subject key identifier:   4F:FD:9F:F7:97:6D:FC:C6:D6:BB:C9:20:39:2F:52:95:0A:46:EC:84
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       0185D39AD338F32B246C8343CA8FD2F9C350
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/T_2f95dt_MbWu8kgOS9SlQpG7IQ.roa
Signing time:             Sat 21 Jan 2023 09:13:37 +0000
ROA not before:           Sat 21 Jan 2023 09:13:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59432
IP address blocks:        213.139.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:d3:9a:d3:38:f3:2b:24:6c:83:43:ca:8f:d2:f9:c3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Jan 21 09:13:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ffd9ff7976dfcc6d6bbc920392f52950a46ec84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:6a:41:ac:e7:34:01:ef:81:ec:4f:fd:e6:
                    46:91:9f:82:0a:72:35:5e:29:41:80:b5:6f:3f:e0:
                    13:fb:e3:0b:fc:9d:4a:4d:79:2f:e8:13:8c:71:44:
                    9f:b4:e0:31:9f:f6:c1:2d:80:fe:4a:86:1e:b7:2f:
                    63:9a:56:51:f9:ab:c2:f1:b4:84:19:41:97:fa:9a:
                    06:6f:73:a2:e1:ce:24:e6:32:05:d3:cb:38:89:cf:
                    69:b3:7f:c5:45:50:42:9a:aa:2a:26:62:93:13:01:
                    8a:59:bf:83:c1:41:bd:74:34:fc:42:ed:46:ce:8b:
                    96:9e:0a:0a:1d:bb:77:b9:a0:74:cd:5b:c5:46:56:
                    90:f5:5f:0e:6c:af:1e:57:88:10:99:10:48:c2:53:
                    ec:65:e0:2a:e0:a4:d1:cc:88:ea:0a:5b:88:26:c3:
                    e5:d5:8e:44:5e:13:4c:36:98:48:ac:1f:e1:f2:76:
                    0a:c6:e4:9b:26:18:53:bc:21:45:8e:9f:be:9d:3b:
                    7b:df:bb:45:14:04:a5:7d:26:74:ed:ce:1a:41:23:
                    35:c4:f0:0d:96:1b:44:73:8b:2e:13:38:15:d2:bc:
                    13:aa:c3:35:f2:34:e7:b5:d6:17:c8:ba:f1:b6:87:
                    66:02:71:2e:0b:73:a8:f8:ca:61:49:97:fe:37:a1:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:9F:F7:97:6D:FC:C6:D6:BB:C9:20:39:2F:52:95:0A:46:EC:84
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/T_2f95dt_MbWu8kgOS9SlQpG7IQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:6e:ce:2f:99:c4:34:91:76:05:af:5f:3b:e6:97:39:7d:
         0a:96:23:e7:46:6f:8d:17:ae:ac:cd:ab:79:bd:8d:91:2b:f6:
         98:6e:d8:f0:11:46:15:da:79:6a:56:7c:f7:36:e2:5c:5e:a3:
         2f:81:cd:c5:ed:53:1f:ec:1e:c9:cc:0b:11:4e:90:63:87:5e:
         8c:fc:7c:6c:1e:fc:ad:4f:73:01:89:bc:42:49:45:b9:bb:cb:
         dc:8e:3c:10:af:63:cd:79:4d:2f:59:41:79:9e:97:01:a0:3d:
         7b:df:ff:d9:63:a3:6d:b7:dc:92:75:10:1a:da:e9:98:73:42:
         40:46:1f:60:11:fd:c8:cd:36:07:b3:eb:11:0c:f6:0b:21:bd:
         09:8a:b1:21:bb:61:c0:ff:b0:49:72:41:89:5a:1d:5e:42:53:
         16:89:34:54:0d:59:17:0f:f9:ff:e7:fa:a5:76:aa:22:ca:1d:
         72:e8:c8:70:32:4f:bf:f0:a4:b4:c0:b2:be:e4:d9:ad:86:70:
         f2:ef:35:80:29:f7:fb:8a:84:40:97:c4:12:a0:5a:17:bc:fc:
         e3:9b:0d:35:35:7a:48:b1:e9:91:3d:d2:44:98:8b:5a:77:c5:
         e5:2e:52:9d:69:75:e1:6a:23:64:31:58:46:7e:d2:e0:64:c7:
         46:d0:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org