Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/zTWe7ysvG1Jd6zy2ZYpAJC5tv4Y.roa
File:                     zTWe7ysvG1Jd6zy2ZYpAJC5tv4Y.roa (raw, json)
Hash identifier:          rch3UEex8yxKMpZQo2sp/7sJSGJt7Es0IRvTG9qwVUY=
Subject key identifier:   CD:35:9E:EF:2B:2F:1B:52:5D:EB:3C:B6:65:8A:40:24:2E:6D:BF:86
Certificate issuer:       /CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Certificate serial:       018CC86F58EB2792A5F67D99BEE2C1BE9FE2
Authority key identifier: 47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/zTWe7ysvG1Jd6zy2ZYpAJC5tv4Y.roa
Signing time:             Tue 02 Jan 2024 04:29:49 +0000
ROA not before:           Tue 02 Jan 2024 04:29:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        193.202.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:58:eb:27:92:a5:f6:7d:99:be:e2:c1:be:9f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4725e461a868fcb30f740b9d838c8b425f8a229f
        Validity
            Not Before: Jan  2 04:29:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cd359eef2b2f1b525deb3cb6658a40242e6dbf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:e6:52:16:00:c8:f4:6c:9d:c6:f5:b4:b0:
                    77:b1:ee:34:0a:3b:38:47:2e:e6:60:38:7d:67:04:
                    38:f9:cb:17:be:c3:a0:ad:86:9c:de:fc:d9:03:08:
                    3f:47:55:b8:5f:1e:79:8e:11:47:77:f5:20:85:88:
                    f7:92:c9:6f:3c:5e:49:af:16:e7:a6:c5:8d:35:ff:
                    70:a1:80:e3:ec:4e:9e:cf:72:8e:d1:42:74:bc:1f:
                    c2:aa:31:1a:67:99:b0:7d:d8:53:ca:73:6a:05:e2:
                    9e:09:c9:d0:59:b6:35:b7:18:c5:99:6d:34:2b:dc:
                    19:0a:ac:26:15:bd:bc:e4:3f:ef:8a:b4:33:03:38:
                    d3:88:b7:58:ad:5a:c4:ac:2b:f6:3c:6d:eb:d9:94:
                    08:b8:36:a5:29:b1:c5:08:c1:8f:f0:f5:44:75:a6:
                    5b:7d:df:a8:f3:9b:05:04:dd:01:d3:88:ab:82:49:
                    8e:e4:80:af:aa:dd:32:06:72:95:1a:90:3e:5a:4c:
                    f5:2b:98:1d:af:74:91:cc:95:b5:4e:c1:e1:91:c0:
                    1d:41:73:d8:47:51:f0:99:3d:97:e9:7d:de:3c:cb:
                    2f:1a:34:10:a8:7d:1c:b4:ef:ce:56:93:98:0f:a5:
                    20:d2:52:99:04:89:4f:44:ed:e9:85:5e:48:52:26:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:35:9E:EF:2B:2F:1B:52:5D:EB:3C:B6:65:8A:40:24:2E:6D:BF:86
            X509v3 Authority Key Identifier:
                keyid:47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/zTWe7ysvG1Jd6zy2ZYpAJC5tv4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:54:54:d0:e4:0d:d9:b2:6b:e2:a9:e9:53:89:3a:3c:45:
         04:27:c4:1d:39:b7:6d:94:b9:88:e7:ef:f3:45:1f:d2:ba:49:
         d3:d0:e9:47:5a:ca:c7:28:23:aa:78:94:8e:42:33:00:72:b4:
         62:57:9b:d1:03:ef:64:3f:35:c6:ae:de:22:af:58:43:92:11:
         c9:ae:1b:23:d8:ef:59:36:51:dd:fa:5e:b2:86:a1:4e:fd:a0:
         c2:99:bf:fa:5b:3f:19:0a:4f:66:53:c2:74:23:47:22:aa:40:
         87:e4:d9:0f:f2:55:c5:f5:f9:89:27:d2:97:55:fb:5d:55:3e:
         1d:ed:e9:71:11:14:94:63:13:30:e9:9f:2b:af:f5:73:de:15:
         b4:2c:a6:8e:b4:d9:74:05:c2:fb:cb:04:aa:65:b2:e2:57:e6:
         16:4b:0d:96:f2:e9:c0:48:d9:6f:05:54:8c:4c:7a:a6:49:2d:
         43:f4:a6:73:e2:f0:03:32:1f:b2:48:9e:a4:e3:7b:e0:31:02:
         dc:1a:84:df:9b:cf:25:14:5b:67:53:cc:1f:3d:38:d5:86:53:
         65:ca:6c:c8:c4:15:6c:4f:34:4b:c2:f8:9b:3d:bc:0b:10:4d:
         fe:80:1f:e4:d7:f7:35:af:d2:a1:89:1d:b7:07:8e:65:3f:58:
         45:9d:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:14 2024 by rpki-client on console-fra.rpki-client.org