Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/pF_jeSmtHO25TwSzxLQ7TKGL4ds.roa
File:                     pF_jeSmtHO25TwSzxLQ7TKGL4ds.roa (raw, json)
Hash identifier:          UujfBJwGgf2xedjxsc4IHIirjOWHo1tId8LuY1GhwUk=
Subject key identifier:   A4:5F:E3:79:29:AD:1C:ED:B9:4F:04:B3:C4:B4:3B:4C:A1:8B:E1:DB
Certificate issuer:       /CN=b3633287b55c76c191774ad54ec7c6fb291c822e
Certificate serial:       01856DDD5E4D8F9F41FA7B9208C3E3046279
Authority key identifier: B3:63:32:87:B5:5C:76:C1:91:77:4A:D5:4E:C7:C6:FB:29:1C:82:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2Myh7VcdsGRd0rVTsfG-ykcgi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/pF_jeSmtHO25TwSzxLQ7TKGL4ds.roa
Signing time:             Sun 01 Jan 2023 15:05:02 +0000
ROA not before:           Sun 01 Jan 2023 15:05:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        130.255.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:dd:5e:4d:8f:9f:41:fa:7b:92:08:c3:e3:04:62:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3633287b55c76c191774ad54ec7c6fb291c822e
        Validity
            Not Before: Jan  1 15:05:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a45fe37929ad1cedb94f04b3c4b43b4ca18be1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:ae:51:f5:55:9c:01:63:d0:c1:4a:ae:ce:
                    ef:f5:6e:d3:21:36:3a:b0:6e:da:0b:94:0e:83:e5:
                    76:07:d6:00:98:ef:41:d3:9b:ce:15:e1:79:50:11:
                    f2:e5:b3:2b:04:9a:51:7c:ff:6a:70:01:9c:ad:e6:
                    33:d2:ab:d9:ce:02:56:33:f8:d7:83:18:7f:58:ab:
                    9a:66:b3:16:86:52:d1:f2:44:84:61:3b:96:c0:7c:
                    e1:16:ba:8b:a4:64:e2:5e:a7:00:43:62:21:86:54:
                    e2:a7:ae:72:11:5e:e1:a1:af:3e:df:25:0c:ce:a9:
                    03:7a:c8:44:e8:8f:06:5d:68:c5:c0:cd:c9:0a:48:
                    cc:78:4d:9b:85:99:ee:6f:dd:6d:f0:1e:c3:7f:e5:
                    7b:2c:85:1c:85:0f:d6:a2:73:92:94:58:c2:f1:00:
                    b0:ad:12:44:39:0d:b4:bf:23:f8:87:ce:10:99:5f:
                    45:46:08:b1:f9:bc:29:cf:b9:f8:4b:d4:8e:ec:d4:
                    6c:22:b3:c6:a1:ef:97:a2:df:7e:75:70:28:b2:f6:
                    f7:71:00:84:32:e3:22:4a:37:75:c9:36:a9:41:7e:
                    05:07:fa:4c:08:81:49:7e:d0:ae:fb:d0:ce:66:fa:
                    64:18:8f:50:76:f4:26:30:25:ac:bc:8f:10:12:b9:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:E3:79:29:AD:1C:ED:B9:4F:04:B3:C4:B4:3B:4C:A1:8B:E1:DB
            X509v3 Authority Key Identifier:
                keyid:B3:63:32:87:B5:5C:76:C1:91:77:4A:D5:4E:C7:C6:FB:29:1C:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2Myh7VcdsGRd0rVTsfG-ykcgi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/pF_jeSmtHO25TwSzxLQ7TKGL4ds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/s2Myh7VcdsGRd0rVTsfG-ykcgi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.255.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:db:64:59:56:29:fd:4a:9a:93:37:85:20:3d:52:97:34:89:
         1d:b8:37:4a:d8:95:81:94:ea:a0:a9:f5:c7:9b:36:ac:cd:f8:
         3e:4d:39:d8:ec:7a:19:62:1c:1e:ab:2f:95:fb:d9:70:61:98:
         bd:30:5d:b7:67:a5:46:2d:67:b1:c4:b8:96:6f:6e:30:b7:14:
         2b:78:6b:42:f2:4c:70:39:bd:7a:e7:6f:ca:f5:6f:ef:0a:16:
         af:37:62:00:d3:61:31:ef:f0:be:1b:88:bc:ba:f5:47:ce:a2:
         5b:0b:38:cf:68:87:4e:35:78:82:30:8d:59:91:b8:56:47:f6:
         a3:a9:71:7f:bf:52:e1:ae:f5:82:51:3c:58:cf:d1:ac:6d:ab:
         3b:c5:1f:e7:97:8c:61:21:e9:95:b0:08:a3:69:98:f8:18:0f:
         9e:28:c8:4d:78:9e:11:83:b3:16:99:e8:ca:9b:35:fb:2f:95:
         1c:d3:c0:78:42:d3:6a:01:e4:a9:0e:f5:7f:98:0b:b3:d9:d5:
         b1:a9:65:94:a9:da:8e:26:50:90:c8:5b:7d:53:9f:5a:12:66:
         7a:60:b3:8a:77:3d:f8:59:f0:cf:a3:f7:9f:eb:a8:f4:57:72:
         59:c5:d3:d6:2e:88:b3:2b:e6:7b:f3:57:50:99:ac:9c:b2:9c:
         a1:eb:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:53 2024 by rpki-client on console-fra.rpki-client.org