Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/m99BR6fUQOFLibgPwegkep7DvF4.roa
File:                     m99BR6fUQOFLibgPwegkep7DvF4.roa (raw, json)
Hash identifier:          N7jlAHBSLAc7eVCfUqHLDUzS+ov+pVE/0DHC4fWe2BU=
Subject key identifier:   9B:DF:41:47:A7:D4:40:E1:4B:89:B8:0F:C1:E8:24:7A:9E:C3:BC:5E
Certificate issuer:       /CN=bc93a013ccd46c24d80f9062f098c07d22f513ed
Certificate serial:       01856F8B60087C02E793DA09C989A5964DDD
Authority key identifier: BC:93:A0:13:CC:D4:6C:24:D8:0F:90:62:F0:98:C0:7D:22:F5:13:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJOgE8zUbCTYD5Bi8JjAfSL1E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/m99BR6fUQOFLibgPwegkep7DvF4.roa
Signing time:             Sun 01 Jan 2023 22:54:42 +0000
ROA not before:           Sun 01 Jan 2023 22:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57417
IP address blocks:        185.130.49.0/24 maxlen: 24
                          185.130.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8b:60:08:7c:02:e7:93:da:09:c9:89:a5:96:4d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc93a013ccd46c24d80f9062f098c07d22f513ed
        Validity
            Not Before: Jan  1 22:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bdf4147a7d440e14b89b80fc1e8247a9ec3bc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:0a:ad:57:e0:20:83:31:20:d9:5a:17:46:
                    a7:fb:7e:00:9a:cb:60:6b:a9:c8:ea:8a:7e:a2:c2:
                    c7:56:5a:d9:f4:1f:6d:0e:a6:35:bc:2b:67:f6:58:
                    55:af:0d:62:58:c6:d4:0d:02:58:20:0f:69:4c:05:
                    45:e2:04:5b:fa:f6:c6:72:a2:de:84:f8:e8:7a:b2:
                    51:d7:18:f9:6a:03:e5:96:96:00:43:6d:6d:6d:b5:
                    65:4f:de:09:6b:36:f7:50:fe:ed:08:75:b3:c9:0d:
                    e4:2a:b2:a0:54:e2:8a:94:34:b5:03:07:18:6c:ab:
                    94:77:6a:22:74:79:e1:31:a3:45:a1:cb:87:36:cd:
                    6f:60:88:d3:61:9f:7f:ab:a8:73:04:cd:70:1a:01:
                    09:82:d0:80:56:65:62:c6:32:29:95:3b:af:79:27:
                    b9:c6:63:0d:20:08:b2:a4:24:d0:f3:3e:db:ea:04:
                    c8:4b:ab:21:3a:f3:75:62:8c:a5:00:ab:cd:3b:a4:
                    ea:d6:8a:25:7d:10:7c:66:f3:d4:5c:ca:49:46:13:
                    41:32:0e:87:09:27:70:b1:34:c4:c0:fa:b2:a9:1e:
                    b3:bc:00:ea:e9:17:d6:a0:92:7c:3f:e9:4d:7a:9f:
                    16:9e:ad:40:b2:70:07:a4:9c:de:9f:72:5b:f3:f7:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:41:47:A7:D4:40:E1:4B:89:B8:0F:C1:E8:24:7A:9E:C3:BC:5E
            X509v3 Authority Key Identifier:
                keyid:BC:93:A0:13:CC:D4:6C:24:D8:0F:90:62:F0:98:C0:7D:22:F5:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJOgE8zUbCTYD5Bi8JjAfSL1E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/m99BR6fUQOFLibgPwegkep7DvF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/vJOgE8zUbCTYD5Bi8JjAfSL1E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:dc:94:81:33:b8:94:9e:7b:1d:9b:d0:7c:fd:de:ed:1c:
         61:e1:a3:28:e4:bf:ce:2c:de:a7:10:7a:5e:f0:aa:4d:1d:0b:
         cc:3f:c1:b8:40:7f:fc:48:41:89:8c:fa:03:d3:00:4c:34:fc:
         06:82:ad:ac:b6:71:5d:85:1d:8b:55:d6:5d:94:ad:38:75:f7:
         34:9c:9e:dd:75:68:40:a9:54:3d:79:5e:a2:82:13:54:5f:eb:
         ef:4b:b2:5f:84:06:6d:5a:6d:c9:e8:38:36:d2:21:cf:fb:8e:
         1a:49:bf:ca:83:cc:cc:56:2b:33:f0:d0:33:8e:0a:81:34:8a:
         18:49:05:bd:e5:60:4e:7e:7f:e0:e3:19:9f:3b:91:86:c3:8e:
         85:5b:b1:28:0b:9c:16:36:fa:21:84:a1:7b:4d:3c:e5:20:ab:
         67:46:86:3b:af:5a:70:07:8c:7b:aa:2a:d2:c9:e9:41:cb:ac:
         ea:d9:41:be:92:ec:88:63:33:fc:ce:35:61:e5:17:23:3a:a8:
         bf:4d:16:c4:b4:f5:b7:5e:12:9d:54:f5:b3:67:40:75:3c:bc:
         e4:23:0d:c9:54:1b:a2:f9:e1:ee:69:31:db:98:3b:d7:b2:6a:
         8a:16:f7:8b:fd:ad:02:f1:38:91:af:8c:7b:d0:68:70:28:f8:
         a3:b1:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org