Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/iPvNt2gZwNRpOX6m5M_3fbKEVNE.roa
File:                     iPvNt2gZwNRpOX6m5M_3fbKEVNE.roa (raw, json)
Hash identifier:          m18nLUlh0egaoy0GufW7kRmeHPHBCvQLM4RTSn5A2uI=
Subject key identifier:   88:FB:CD:B7:68:19:C0:D4:69:39:7E:A6:E4:CF:F7:7D:B2:84:54:D1
Certificate issuer:       /CN=782668f3ba477de2052acc110b19ed4b611309db
Certificate serial:       01882E6C5F1F4A2997F793371ECA69A7E797
Authority key identifier: 78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/iPvNt2gZwNRpOX6m5M_3fbKEVNE.roa
Signing time:             Thu 18 May 2023 10:33:54 +0000
ROA not before:           Thu 18 May 2023 10:33:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59771
IP address blocks:        193.105.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2e:6c:5f:1f:4a:29:97:f7:93:37:1e:ca:69:a7:e7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782668f3ba477de2052acc110b19ed4b611309db
        Validity
            Not Before: May 18 10:33:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88fbcdb76819c0d469397ea6e4cff77db28454d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:41:91:1e:f1:58:d5:79:10:a3:80:2c:69:
                    ea:31:2d:50:ec:25:66:d1:6b:3b:3b:a2:ca:b2:a5:
                    b1:cc:39:db:92:3c:73:cf:c0:5f:66:64:21:1c:2b:
                    e0:fc:6e:e6:af:93:43:24:06:ad:8c:76:74:96:2d:
                    8f:99:ca:45:70:bf:8b:06:b8:47:44:9e:ed:82:68:
                    64:80:0c:16:fa:32:6e:35:f9:45:c2:d5:13:1e:84:
                    e6:41:04:59:ee:e2:11:a9:21:45:56:1b:6b:97:69:
                    c6:79:26:df:97:07:7b:96:f9:a3:61:04:50:b2:0f:
                    e3:b6:b7:0d:74:df:91:11:0a:ca:85:c4:39:50:c7:
                    51:82:d7:1c:98:fe:82:76:16:e4:5e:2d:96:23:76:
                    b5:40:1d:a7:37:d7:42:9f:26:69:45:80:0e:f7:fe:
                    01:27:45:e6:7b:b3:34:fa:d0:19:fb:3d:c1:c4:7d:
                    c1:53:75:2a:5f:9e:3e:50:bb:3b:43:ff:f6:1f:d9:
                    e3:0d:e3:c4:20:e1:19:fb:ad:ec:93:fc:d3:af:98:
                    ac:4b:c8:83:43:12:e0:39:7a:c1:9a:c9:e9:0c:5e:
                    b4:5c:14:08:77:07:0c:23:14:a3:b7:2e:f8:a1:4f:
                    dc:2a:6c:e9:67:7d:5b:27:8a:52:f3:54:86:ee:0b:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:CD:B7:68:19:C0:D4:69:39:7E:A6:E4:CF:F7:7D:B2:84:54:D1
            X509v3 Authority Key Identifier:
                keyid:78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/iPvNt2gZwNRpOX6m5M_3fbKEVNE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:cc:01:47:c7:00:fa:77:47:2e:48:8f:77:0f:b8:a6:7c:
         f7:05:bc:fe:38:90:f7:12:83:4a:78:e5:ba:83:82:39:cd:a6:
         88:30:5a:29:44:44:b8:8b:c5:3a:3e:9f:ef:11:0c:73:1c:78:
         7a:02:fb:22:86:ba:d4:29:5e:99:7e:fc:d8:92:b7:46:44:3c:
         4b:39:3a:3d:10:c9:3e:2a:79:dd:a2:44:9c:56:a8:93:75:04:
         59:ff:3f:0d:64:f4:53:79:65:9f:7f:65:c6:55:31:c0:ee:20:
         d2:48:c5:d6:e0:85:1b:f1:67:69:d8:0d:3b:42:06:9f:fe:4e:
         31:d6:d6:5c:d2:91:8f:70:47:14:df:34:41:4a:69:63:57:c5:
         ff:aa:4d:b1:ff:ac:cd:53:47:1e:c6:c5:25:b5:64:9f:21:7f:
         3d:60:d3:ae:31:16:cd:9d:99:52:f8:29:1e:21:6d:64:d0:95:
         c6:48:f9:89:67:d7:27:b4:b2:bc:6f:28:18:8f:a6:24:b6:3f:
         40:bf:71:f2:e8:ab:20:e0:a7:63:4a:97:67:e3:3d:e3:38:20:
         12:16:cf:b9:1b:03:eb:48:05:d5:df:02:5b:93:26:63:ee:ed:
         cb:9c:3f:21:2c:9b:f6:88:c2:d6:42:87:57:01:94:bf:9c:b5:
         2e:db:1c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org