Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa
File:                     V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa (raw, json)
Hash identifier:          kaukggR9QYWen6wtzdufLeYU4xhRtyEwDFibiTPVNFo=
Subject key identifier:   57:FF:B1:D9:A2:8B:85:C4:BD:31:21:4C:75:5E:57:84:93:7A:65:25
Certificate issuer:       /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial:       018C343A8D8540B905DB1068F88B194EE58E
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa
Signing time:             Mon 04 Dec 2023 09:48:21 +0000
ROA not before:           Mon 04 Dec 2023 09:48:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42366
IP address blocks:        193.9.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:34:3a:8d:85:40:b9:05:db:10:68:f8:8b:19:4e:e5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
        Validity
            Not Before: Dec  4 09:48:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57ffb1d9a28b85c4bd31214c755e5784937a6525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:a4:f9:2e:68:c6:45:c8:40:34:12:1c:db:
                    d4:36:04:dc:f4:8a:1b:56:86:95:93:8b:e9:d1:f8:
                    73:22:18:c8:ac:5c:8c:f8:04:c7:f7:ba:61:73:98:
                    d2:37:d5:2b:58:f3:87:5b:4a:a4:7f:58:f4:8b:02:
                    b6:a9:62:29:47:60:cf:5a:c0:3f:f4:7c:fc:23:aa:
                    b6:e6:88:5b:26:bd:8c:ac:f9:67:1b:40:1c:38:82:
                    a4:5d:dd:71:c9:78:a5:07:bf:79:ff:1d:7e:75:ee:
                    bb:34:6b:60:02:39:5e:e1:ef:c6:c0:94:4b:2b:d7:
                    05:23:fc:2e:08:01:90:9b:ed:fb:ac:74:37:67:0b:
                    bd:c5:3d:48:4f:03:3c:19:35:77:4b:cf:bb:68:05:
                    f0:b1:96:45:98:62:93:52:14:cf:3a:c4:dd:fa:65:
                    76:d5:40:6f:fa:6e:42:47:07:fe:f5:9b:02:9b:1a:
                    8b:a8:77:d6:9b:7c:ae:d5:4b:b2:a6:27:03:f5:5e:
                    3a:a3:88:8a:65:41:05:c1:9f:33:16:8f:60:03:b9:
                    88:dc:d1:e6:4a:fc:66:8c:7c:d4:b3:fd:64:0d:95:
                    54:82:bc:fe:d1:62:19:51:d4:84:b1:3c:5f:88:63:
                    af:e1:e6:26:9d:48:d5:2c:90:b6:08:91:7e:04:d3:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:B1:D9:A2:8B:85:C4:BD:31:21:4C:75:5E:57:84:93:7A:65:25
            X509v3 Authority Key Identifier:
                keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:6d:d9:91:aa:84:a7:4f:6e:1d:d7:55:78:14:55:9e:db:
         7b:04:1a:4d:f2:90:c3:80:33:12:2c:86:5b:e8:5d:b3:90:b5:
         53:5d:ce:d8:6f:d0:d6:f3:92:04:d4:3e:43:e8:32:71:91:d5:
         a4:80:63:38:c8:19:cc:02:32:e0:a3:f4:e0:f6:c3:92:e2:2e:
         18:db:60:e5:53:ab:32:a0:91:ac:91:ef:14:65:e5:00:2e:0a:
         86:3b:71:c0:fb:17:24:70:ea:13:ae:99:56:f4:bd:5f:5f:8b:
         72:f8:7b:2b:ab:9d:a8:11:90:8a:5e:dd:39:5a:36:a2:1e:05:
         55:6c:0c:35:ff:0f:1e:43:32:8e:ba:e3:80:fb:2a:55:0c:d8:
         df:94:3a:8e:6f:dc:35:ac:fc:e2:86:66:b3:e0:45:c7:64:7b:
         cf:60:2a:b2:bf:77:fe:7d:3b:3b:ed:02:ac:17:63:f5:96:9f:
         03:28:78:0a:f7:be:36:13:69:de:61:a1:22:59:79:26:22:c6:
         27:15:32:84:ba:6b:94:ce:20:ed:16:e9:36:cc:6b:dd:d4:16:
         99:43:5b:a6:ab:56:d5:e3:14:11:ff:f7:5a:16:60:c9:5a:3f:
         b8:64:77:45:5d:66:4e:55:8c:2e:de:9f:a5:84:fc:3a:11:db:
         40:a1:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org