Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa
File:                     1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa (raw, json)
Hash identifier:          l3k3Lh2O5iHj4wR10Uu2X0tHCVc4Ye6Z9QFj6uUWQLA=
Subject key identifier:   D5:66:7D:E5:68:34:B3:DA:4B:A6:F3:3E:8F:3A:FB:FC:C5:9B:22:61
Certificate issuer:       /CN=983dd29a579875009dbc4139668b148b8884b637
Certificate serial:       018CCA99559C26FD4B157C3BCBFC0EBE5410
Authority key identifier: 98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa
Signing time:             Tue 02 Jan 2024 14:34:55 +0000
ROA not before:           Tue 02 Jan 2024 14:34:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41354
IP address blocks:        185.179.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:99:55:9c:26:fd:4b:15:7c:3b:cb:fc:0e:be:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983dd29a579875009dbc4139668b148b8884b637
        Validity
            Not Before: Jan  2 14:34:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d5667de56834b3da4ba6f33e8f3afbfcc59b2261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:7d:30:b1:06:b9:0e:ed:f2:38:48:e8:be:
                    98:62:2c:db:e5:7a:5c:f0:58:5f:63:04:7d:75:97:
                    e0:a9:d1:04:92:87:01:dd:0b:33:06:8d:d8:be:e9:
                    49:78:1b:01:32:c1:be:0c:cd:70:88:d8:da:75:88:
                    c8:b7:0d:9b:4e:f4:1f:8d:93:28:62:c1:3e:8e:af:
                    8c:be:3a:86:be:30:61:e7:8b:5d:84:8b:8a:3c:46:
                    af:ae:b9:a9:6b:d0:85:e4:c3:e2:52:26:ee:71:27:
                    b7:f1:f5:c2:a7:f3:a8:f4:13:a9:a7:0c:f4:ca:da:
                    b2:1b:96:de:8b:8c:b3:dc:14:bf:dd:20:ce:06:f5:
                    b5:b7:0f:44:2f:75:f8:58:60:85:b4:82:41:5a:af:
                    b7:b8:5a:b4:50:8c:d8:a1:5e:85:b6:6f:52:ae:88:
                    9d:b5:73:0f:4d:57:70:e5:5f:5e:d2:6e:90:71:e7:
                    d2:ad:88:df:cd:2f:dd:20:1e:6e:2d:14:9d:dd:eb:
                    1b:20:fe:00:32:a8:b6:39:73:4c:2f:5d:24:95:48:
                    cd:60:fb:67:38:d7:c2:39:bc:23:d1:19:72:8b:dd:
                    ef:af:17:66:7f:8f:cd:0c:68:74:f3:b2:84:8b:5f:
                    70:eb:46:e0:6a:bb:aa:dd:08:59:94:7d:44:dc:a1:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:7D:E5:68:34:B3:DA:4B:A6:F3:3E:8F:3A:FB:FC:C5:9B:22:61
            X509v3 Authority Key Identifier:
                keyid:98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/mD3SmleYdQCdvEE5ZosUi4iEtjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:6c:63:f8:2d:37:16:14:9a:6d:d0:bb:6c:cf:32:3e:c1:
         b2:a5:95:ab:93:fe:cb:ed:b4:fc:b2:1d:0b:69:1e:dc:39:d5:
         04:fa:47:6c:46:94:fa:17:02:d3:2e:9b:d7:e0:c3:64:60:9c:
         27:7b:e7:2c:b8:1f:92:70:1c:fd:88:3f:f3:1e:4e:ae:cf:96:
         07:12:85:d1:0a:9b:ab:ee:34:25:3f:43:cd:b3:ff:d1:09:a6:
         33:16:aa:f2:b0:74:7e:17:81:11:02:de:51:f7:98:1f:44:43:
         6d:2e:29:97:78:b8:07:c4:0e:ee:7c:ac:da:20:c4:ee:02:0d:
         6f:23:04:40:de:cc:49:56:23:65:bf:d1:54:24:43:a7:cd:ec:
         13:c8:c0:9c:cc:3c:cb:1c:fb:28:4b:f8:0e:66:61:74:c6:65:
         35:73:87:c7:ca:ee:c1:15:26:35:10:f2:e3:b0:3c:b2:47:13:
         40:91:d3:03:5a:84:db:c4:8e:a3:63:0e:03:c1:0f:80:5b:18:
         d3:53:68:11:6d:d0:a6:9e:2e:6d:74:a7:07:00:a4:97:2b:97:
         a5:55:c9:8a:a7:1a:77:4d:a2:8c:cd:3e:1a:a6:c5:be:97:bf:
         90:88:cf:c3:4b:38:b9:ab:b2:dc:a8:77:1e:0e:2a:aa:3d:4d:
         71:a6:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 12:11:08 2024 by rpki-client on console-ams.rpki-client.org