Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0-PWNh5qZT_xD3uESMvsiAJdO8o.roa
File:                     0-PWNh5qZT_xD3uESMvsiAJdO8o.roa (raw, json)
Hash identifier:          bImvYMFrEBZdvGyoY7rn2AEAdna1Vchn0sEnRdO68A8=
Subject key identifier:   D3:E3:D6:36:1E:6A:65:3F:F1:0F:7B:84:48:CB:EC:88:02:5D:3B:CA
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       01855CBBB0080468B113DFB65D81664412B5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0-PWNh5qZT_xD3uESMvsiAJdO8o.roa
Signing time:             Thu 29 Dec 2022 07:14:42 +0000
ROA not before:           Thu 29 Dec 2022 07:14:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207279
IP address blocks:        193.151.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5c:bb:b0:08:04:68:b1:13:df:b6:5d:81:66:44:12:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Dec 29 07:14:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3e3d6361e6a653ff10f7b8448cbec88025d3bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:42:87:b6:ce:c0:1b:c8:9f:8d:5a:c2:c3:
                    bd:9c:c4:29:a6:8f:05:88:b2:2f:59:8f:ac:85:71:
                    8d:97:18:41:b2:aa:e7:75:1b:05:08:85:21:56:69:
                    89:7a:19:bc:b8:91:4a:77:54:06:1b:b2:bf:16:4d:
                    a8:c0:b9:38:26:d9:ec:ed:31:cd:63:73:5f:2e:ed:
                    41:b7:9f:3a:3e:3d:f8:81:0f:38:7f:51:6d:5a:03:
                    99:7a:52:17:fc:83:47:7a:23:29:30:9e:b1:8b:03:
                    38:c3:9a:30:ef:53:83:a7:b8:1f:1e:15:61:52:38:
                    b1:c9:ae:a8:0a:98:da:96:46:4c:b4:91:0a:41:3f:
                    12:00:20:87:eb:fb:f1:c5:2a:a7:2c:5c:b4:7c:9f:
                    2a:ac:39:ef:3c:93:a0:05:a2:7a:60:aa:94:97:a1:
                    fd:5d:24:01:d0:7b:6b:15:96:da:1f:ee:25:86:dd:
                    b2:94:c4:79:06:2d:d6:f1:ac:1d:1b:2d:34:53:81:
                    e8:7f:57:5c:f2:d8:cf:12:26:ea:48:9b:11:45:b1:
                    9a:c8:70:f2:85:fb:3d:98:1c:01:5a:a7:6a:d7:00:
                    fc:41:5b:d6:1c:af:bc:f1:9f:47:81:ca:d8:05:fb:
                    53:d8:07:a7:2d:2e:96:b8:64:e3:db:f1:22:86:6c:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:D6:36:1E:6A:65:3F:F1:0F:7B:84:48:CB:EC:88:02:5D:3B:CA
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0-PWNh5qZT_xD3uESMvsiAJdO8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:b3:30:a4:2f:ec:b3:c9:1a:ce:0c:f7:85:3e:14:ee:0f:e0:
         fa:50:d8:d6:ce:c5:f7:47:34:af:9d:92:5e:91:e3:95:c2:4a:
         d3:df:f1:75:6c:d6:41:7d:59:a9:69:6f:57:75:25:c0:b4:3d:
         a4:c8:bc:b5:b8:08:ec:22:26:8f:f3:b5:05:47:31:28:3c:83:
         ff:f8:3b:9e:a4:d8:05:bf:4c:99:ae:5b:72:a2:94:6a:55:f1:
         ee:89:0c:db:d3:50:77:48:7d:b4:1b:9a:e7:b3:ff:85:b3:89:
         07:c2:17:72:1d:a2:03:cb:a8:00:03:56:54:bc:45:a0:cf:db:
         00:78:f9:43:95:49:fb:33:36:4d:02:08:3a:8a:52:b1:54:0e:
         61:7d:1b:8d:ac:a1:98:6b:4b:e7:96:0c:17:0a:17:3d:a6:c9:
         fb:df:e0:c0:d4:36:31:63:27:67:3c:00:8c:30:19:55:5b:3f:
         1c:1f:6a:ec:59:f0:88:97:36:f4:8d:e6:7e:ff:29:02:7b:7b:
         fe:ab:bc:6d:d4:61:3a:e8:f9:5d:cd:cc:39:94:96:d3:13:0d:
         97:91:30:fa:17:78:4a:e6:16:fa:51:2f:9f:51:03:71:04:20:
         85:f8:d7:49:42:2e:3f:31:46:52:d5:cc:b4:93:b3:3b:a9:62:
         65:a7:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:51 2024 by rpki-client on console-ams.rpki-client.org