Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/fDrpOcZszCUSlDU3I152fZ1Jo0Q.roa
File:                     fDrpOcZszCUSlDU3I152fZ1Jo0Q.roa (raw, json)
Hash identifier:          lyeYkR83un2EGI2PgeegAHojnl+Wo/A4H+n2514cN7c=
Subject key identifier:   7C:3A:E9:39:C6:6C:CC:25:12:94:35:37:23:5E:76:7D:9D:49:A3:44
Certificate issuer:       /CN=47f2e3102a41792525d4bd6a8a6c2ff4aa8f6d71
Certificate serial:       018805C977105EE0E014C4245654E173064A
Authority key identifier: 47:F2:E3:10:2A:41:79:25:25:D4:BD:6A:8A:6C:2F:F4:AA:8F:6D:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_LjECpBeSUl1L1qimwv9KqPbXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/fDrpOcZszCUSlDU3I152fZ1Jo0Q.roa
Signing time:             Wed 10 May 2023 13:11:09 +0000
ROA not before:           Wed 10 May 2023 13:11:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5511
IP address blocks:        212.18.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:c9:77:10:5e:e0:e0:14:c4:24:56:54:e1:73:06:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f2e3102a41792525d4bd6a8a6c2ff4aa8f6d71
        Validity
            Not Before: May 10 13:11:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c3ae939c66ccc2512943537235e767d9d49a344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:e6:7c:d6:7b:d0:7f:c0:18:6f:9d:f9:63:
                    d9:0e:95:80:8d:f8:de:87:44:6b:8a:26:1d:e3:6f:
                    83:60:18:5c:a1:9f:09:b0:32:2b:43:62:14:75:06:
                    63:08:67:8a:e6:ff:64:67:aa:f5:66:f4:41:b4:3d:
                    5e:a4:79:d2:4f:a9:82:e3:9a:44:a5:df:49:5a:38:
                    f4:7f:44:56:b8:2d:af:2e:af:46:99:4f:2b:91:14:
                    cd:45:31:f3:1a:3b:2e:35:51:c6:d0:cf:b2:bc:0b:
                    b5:21:49:a3:60:95:5d:3e:71:33:08:29:28:23:15:
                    b4:00:0c:b3:95:a3:2c:2c:ae:b8:de:c5:12:8f:95:
                    cc:7e:c6:7e:3f:6e:45:e3:47:e8:9e:29:1b:9c:61:
                    82:87:36:5f:ba:d3:de:f1:0a:29:23:0a:87:d6:d9:
                    bf:d8:df:05:3b:6f:95:2c:12:af:19:f8:35:47:d4:
                    54:28:91:c0:fd:ae:39:af:cf:1e:7e:cc:e2:82:4d:
                    ac:45:1e:91:4e:4f:6d:5f:df:14:03:57:f6:0b:ed:
                    69:78:1b:ac:d9:b5:d2:b5:7c:a6:a2:45:61:79:b8:
                    f5:91:7c:5c:06:64:cd:fc:1d:1c:42:ab:b2:2b:1f:
                    bf:35:09:6b:56:36:54:32:df:7b:4d:db:22:4d:48:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3A:E9:39:C6:6C:CC:25:12:94:35:37:23:5E:76:7D:9D:49:A3:44
            X509v3 Authority Key Identifier:
                keyid:47:F2:E3:10:2A:41:79:25:25:D4:BD:6A:8A:6C:2F:F4:AA:8F:6D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_LjECpBeSUl1L1qimwv9KqPbXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/fDrpOcZszCUSlDU3I152fZ1Jo0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/R_LjECpBeSUl1L1qimwv9KqPbXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:13:ec:10:10:25:b5:07:81:25:8a:53:d1:aa:bb:7d:ce:84:
         0f:ff:54:11:0f:3e:22:9d:66:3a:b8:86:49:0b:cb:ff:48:6b:
         10:81:c8:68:4a:56:50:6f:d5:01:cb:86:f8:31:32:48:3f:96:
         50:19:d9:82:1f:a1:ac:9a:91:b3:a5:cb:3a:8e:44:3c:7e:5f:
         92:17:77:0a:e3:c1:c5:26:b5:6a:9a:06:9b:2b:7e:f6:75:cf:
         b2:81:d0:45:53:d2:03:5d:0e:49:43:8f:38:97:78:56:ec:4e:
         f4:d0:7f:09:89:e9:40:3c:71:ba:9d:63:cc:d7:58:e3:fb:3e:
         40:ab:1b:27:eb:16:e5:b9:05:9e:c2:0d:13:c3:42:ca:5b:20:
         7a:c7:b2:65:d1:34:22:42:5f:64:f2:77:f9:58:ca:99:74:3e:
         c6:b4:af:ee:f6:45:e3:ca:eb:31:9d:b9:f0:93:0a:95:df:42:
         d0:8d:d1:4a:63:e7:0f:eb:76:14:92:ac:c1:a5:cd:73:2b:57:
         58:3f:58:8b:82:2e:8c:ef:29:74:19:1d:72:d7:93:59:3c:3b:
         d5:08:76:0f:bd:36:43:37:1f:63:8e:0f:af:cf:6e:30:75:05:
         bd:57:40:56:d0:a8:8a:de:4d:ed:72:80:03:64:1a:58:3e:7b:
         49:f9:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:33 2024 by rpki-client on console-fra.rpki-client.org