Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/mWiAna7aLnQmNOy_1CR3YmbBJ2o.roa
File:                     mWiAna7aLnQmNOy_1CR3YmbBJ2o.roa (raw, json)
Hash identifier:          Ts4doYgQlz2rDtsWbHl4vBwIvfJRfoILIId0ERVWaWQ=
Subject key identifier:   99:68:80:9D:AE:DA:2E:74:26:34:EC:BF:D4:24:77:62:66:C1:27:6A
Certificate issuer:       /CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
Certificate serial:       018570DE486978835B5D622ED0B254C02DC0
Authority key identifier: 2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/mWiAna7aLnQmNOy_1CR3YmbBJ2o.roa
Signing time:             Mon 02 Jan 2023 05:04:53 +0000
ROA not before:           Mon 02 Jan 2023 05:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        178.23.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:de:48:69:78:83:5b:5d:62:2e:d0:b2:54:c0:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
        Validity
            Not Before: Jan  2 05:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9968809daeda2e742634ecbfd424776266c1276a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:15:60:cb:21:e6:46:e6:ca:ae:0a:9f:51:
                    4e:01:de:2c:6b:c8:f1:f3:b5:e8:14:df:77:96:ea:
                    7c:ea:9a:78:67:e7:58:cf:8c:df:17:0a:a5:12:4c:
                    6c:34:fd:ba:1d:04:21:e4:2d:0f:d1:03:89:60:6b:
                    e5:9c:f0:56:0c:f4:42:9b:25:7d:19:95:2a:bf:ac:
                    e8:6b:0f:55:ec:cd:f1:05:17:a6:72:c7:b8:14:05:
                    51:60:2b:b1:26:e0:7f:a5:fe:95:7c:ad:3f:be:62:
                    6c:ba:52:9d:2e:c2:ba:ae:b8:29:0c:a5:48:88:49:
                    a1:53:45:f7:53:4f:c8:3e:17:d0:ac:ad:67:4c:be:
                    5c:90:7f:ba:85:c9:b2:a3:37:4c:25:c5:7c:83:3a:
                    6f:6a:d6:36:1f:19:c8:14:3f:5a:50:8c:e1:f4:b8:
                    d1:9b:f6:df:00:24:17:13:c3:42:2a:8d:06:d9:2a:
                    53:1e:ce:14:ab:c2:71:81:8c:f6:1c:ee:f4:42:ce:
                    3d:3d:e4:fb:ba:23:48:29:b7:c3:70:60:c0:df:dd:
                    9b:bb:06:50:03:28:84:9d:d7:b0:61:3f:a6:4e:76:
                    9c:59:20:32:9b:13:5d:1b:b9:fe:08:0b:b4:5d:ad:
                    bb:23:fa:f8:d8:c8:f0:2a:02:1d:ce:a6:46:f8:15:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:80:9D:AE:DA:2E:74:26:34:EC:BF:D4:24:77:62:66:C1:27:6A
            X509v3 Authority Key Identifier:
                keyid:2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/mWiAna7aLnQmNOy_1CR3YmbBJ2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:08:8d:a1:58:fc:6d:da:aa:a6:f0:18:7b:8a:a9:11:23:5d:
         c8:ae:e9:99:12:5a:ed:4f:ce:b5:ff:8c:08:d3:6b:d8:37:ed:
         69:79:45:e4:f8:6f:63:2c:2c:e1:86:5c:de:95:6b:7d:f7:1d:
         12:a4:01:f3:28:58:a6:96:eb:8e:28:47:79:13:a2:e7:7d:d2:
         85:5c:18:0b:0c:e2:63:84:09:26:26:34:31:9a:94:64:77:fe:
         06:ff:5c:8d:6c:85:30:72:fc:22:f8:3f:d8:df:a0:5f:28:c8:
         ed:b9:8a:be:39:55:1f:da:08:7b:b3:b8:e1:a8:53:71:5a:3f:
         fc:a5:85:b5:9c:7d:b0:ae:75:9f:73:31:de:c7:3e:d6:8d:31:
         30:16:f4:14:09:79:17:7a:7f:e5:46:0c:4e:18:29:b6:37:59:
         df:ff:61:76:12:de:fa:ef:5c:3f:41:18:78:9a:10:fa:00:e7:
         2e:9d:1d:30:ed:b8:c7:4f:c6:b3:a6:ed:7a:80:46:db:f6:5a:
         fa:13:f0:fa:ec:3c:9a:1d:03:18:6d:de:a4:3d:16:ed:91:24:
         22:0b:1d:f8:cf:56:d6:c8:ea:e9:c6:9b:43:54:83:d6:9d:fc:
         fe:f2:92:e0:1b:df:f6:08:07:68:76:b3:53:c9:8c:29:72:dc:
         d0:3b:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:29 2024 by rpki-client on console-ams.rpki-client.org