Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/uwujyHRra4BhUrjReX46JSJjTH8.roa
File:                     uwujyHRra4BhUrjReX46JSJjTH8.roa (raw, json)
Hash identifier:          DPZiD6lKegC1CsIli6SvbY+nhMgHPj8OrHlDoCSA768=
Subject key identifier:   BB:0B:A3:C8:74:6B:6B:80:61:52:B8:D1:79:7E:3A:25:22:63:4C:7F
Certificate issuer:       /CN=983dd29a579875009dbc4139668b148b8884b637
Certificate serial:       01856EA6821AA15C9E333B725A816C9332F0
Authority key identifier: 98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/uwujyHRra4BhUrjReX46JSJjTH8.roa
Signing time:             Sun 01 Jan 2023 18:44:44 +0000
ROA not before:           Sun 01 Jan 2023 18:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41354
IP address blocks:        185.179.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:82:1a:a1:5c:9e:33:3b:72:5a:81:6c:93:32:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983dd29a579875009dbc4139668b148b8884b637
        Validity
            Not Before: Jan  1 18:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb0ba3c8746b6b806152b8d1797e3a2522634c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:ba:14:29:65:eb:4b:5a:dc:fc:3d:64:3f:
                    ad:3d:49:24:3a:a6:6f:2c:47:e4:24:a1:d6:25:89:
                    67:ed:a3:ad:2a:59:62:16:6c:ad:2b:e1:c2:e1:f7:
                    5f:bd:f7:07:70:be:59:ae:71:96:ee:8a:bc:b8:cc:
                    cb:6e:1b:a1:cf:5b:7a:03:84:44:b1:c8:34:90:61:
                    75:90:20:19:c8:c0:c8:9f:ef:33:b5:08:e9:73:c0:
                    b0:3b:f3:84:4f:de:57:cd:99:4d:67:07:89:e5:74:
                    70:2e:0e:a6:44:d0:c0:2e:5f:af:36:9f:81:b8:08:
                    c1:46:47:2a:7e:56:8e:ff:74:ef:9a:6a:e9:21:75:
                    6c:e3:87:4a:16:60:ac:3f:cd:99:a1:7c:01:10:59:
                    6d:31:e8:42:99:08:bd:fb:3f:6f:e9:e1:84:c2:f8:
                    93:24:2c:23:f2:e8:7b:b0:57:ed:f8:6a:f4:d6:a3:
                    64:1b:ae:da:05:37:6d:05:5c:26:54:dd:c7:47:bb:
                    3c:26:be:22:7f:cf:2a:68:10:9b:21:25:f9:dd:06:
                    d0:f0:47:65:99:19:d3:81:cb:d5:6c:41:24:7c:9f:
                    7c:5a:6e:dc:ac:24:28:30:29:52:32:be:57:10:e8:
                    d3:dd:05:cc:53:2b:2e:31:c2:fb:7a:59:9a:42:1c:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:A3:C8:74:6B:6B:80:61:52:B8:D1:79:7E:3A:25:22:63:4C:7F
            X509v3 Authority Key Identifier:
                keyid:98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/uwujyHRra4BhUrjReX46JSJjTH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/mD3SmleYdQCdvEE5ZosUi4iEtjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:cf:8b:5c:b3:78:ba:5f:05:b1:e6:1a:cf:bb:df:fe:13:
         76:9d:7f:69:27:65:05:ac:81:b3:78:2f:28:49:fb:b3:5f:df:
         cf:a2:e1:99:2d:71:ac:fb:9e:b3:ee:5e:30:c9:e3:e0:d4:4a:
         35:7f:6e:b5:59:1f:7d:bc:98:a6:19:47:87:80:a8:8a:85:85:
         37:de:ec:4b:e0:3c:fd:ab:28:f6:b8:da:81:63:74:89:45:b0:
         ae:14:36:f0:58:ce:ff:90:ec:75:8c:8d:e2:eb:0f:07:7e:29:
         3f:a7:08:17:56:d8:f2:40:d0:a6:4d:fb:d9:c2:32:cd:43:d6:
         00:97:34:07:f5:d7:a2:30:79:7c:46:b6:a1:90:6e:ae:e3:dc:
         5b:e6:79:0d:a7:ed:dc:a0:02:b5:28:19:12:33:e3:ab:d6:58:
         23:41:0f:fd:79:d0:d9:12:7f:7a:69:d3:a1:3d:0a:ef:70:70:
         b6:bd:e4:77:a7:7e:d2:1f:a2:2d:b7:f2:a1:ab:84:33:85:db:
         53:10:d0:06:f5:57:89:36:4d:b9:8d:d9:c7:a5:a8:d6:42:2d:
         1c:d9:99:12:f4:8e:d8:15:ad:27:0c:30:1c:25:8f:9d:27:e2:
         1e:bb:76:32:c2:4e:36:2b:c4:db:99:20:25:d8:d3:1b:29:32:
         a7:18:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:30 2024 by rpki-client on console-ams.rpki-client.org