Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/WaVRaonSMj_Ssh0J1trjIqkdn-s.roa
File:                     WaVRaonSMj_Ssh0J1trjIqkdn-s.roa (raw, json)
Hash identifier:          45H0gN6yATyqD9ajtv5DHTcRRMGBy1zHM7rz4C5NScc=
Subject key identifier:   59:A5:51:6A:89:D2:32:3F:D2:B2:1D:09:D6:DA:E3:22:A9:1D:9F:EB
Certificate issuer:       /CN=de123b3e99c26ce4b5d68b6f120c328db176fb7a
Certificate serial:       0722EC1D
Authority key identifier: DE:12:3B:3E:99:C2:6C:E4:B5:D6:8B:6F:12:0C:32:8D:B1:76:FB:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hI7PpnCbOS11otvEgwyjbF2-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/WaVRaonSMj_Ssh0J1trjIqkdn-s.roa
Signing time:             Sat 01 Jan 2022 13:01:48 +0000
ROA not before:           Sat 01 Jan 2022 13:01:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31631
IP address blocks:        193.178.112.0/23 maxlen: 23
                          193.178.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119729181 (0x722ec1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de123b3e99c26ce4b5d68b6f120c328db176fb7a
        Validity
            Not Before: Jan  1 13:01:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59a5516a89d2323fd2b21d09d6dae322a91d9feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:23:dc:8c:ee:29:6b:51:18:39:b1:f2:7f:
                    4e:d2:33:10:de:08:72:6c:ea:29:bc:14:6e:af:4b:
                    56:c3:42:f2:18:82:61:70:80:1a:11:63:f8:93:67:
                    67:64:9d:0d:9d:22:29:5b:16:ac:b9:f8:fd:78:55:
                    95:16:f3:72:1a:66:64:09:a6:4f:b7:cf:a0:80:aa:
                    63:27:f5:4c:d0:c4:50:75:fa:a1:5c:5e:cd:f1:8f:
                    be:9d:be:95:bc:ff:c7:31:40:b1:0a:91:f4:52:3f:
                    94:6e:10:04:da:db:ae:fe:dd:d1:f3:44:45:d8:b4:
                    5a:51:b1:84:77:b9:f0:82:a4:01:e7:a4:1f:4a:c0:
                    ec:21:cf:2f:37:3b:84:95:4a:f1:25:0e:18:ae:4d:
                    ef:c3:29:db:3c:6e:3e:bf:fd:41:17:fd:8e:30:6c:
                    c6:38:d1:ef:66:bc:ad:fb:e5:25:e8:93:4c:d9:47:
                    6a:42:91:aa:b5:02:66:88:83:2e:d8:49:85:b7:b2:
                    e3:a3:77:ff:a5:ac:b1:92:10:a5:0d:be:55:98:31:
                    20:05:eb:8e:6c:3c:3b:0d:6f:a4:f0:03:b3:cc:1a:
                    46:56:17:51:18:59:58:af:b4:84:32:d6:61:5f:79:
                    a1:45:c9:71:20:af:f8:bd:94:d3:7a:44:a2:1d:b6:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:51:6A:89:D2:32:3F:D2:B2:1D:09:D6:DA:E3:22:A9:1D:9F:EB
            X509v3 Authority Key Identifier:
                keyid:DE:12:3B:3E:99:C2:6C:E4:B5:D6:8B:6F:12:0C:32:8D:B1:76:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hI7PpnCbOS11otvEgwyjbF2-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/WaVRaonSMj_Ssh0J1trjIqkdn-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.54.0/23
                  193.178.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:11:4d:30:99:b5:31:85:56:b1:65:db:6a:d8:cc:2a:d4:1b:
         ff:0c:22:72:1e:d4:b0:42:2f:1f:ed:e1:97:82:af:38:16:87:
         16:d1:79:c3:e1:49:ef:94:3b:a6:a2:65:99:60:81:6b:9d:5a:
         83:cf:0c:7f:da:f2:f6:60:a4:e1:65:68:62:be:db:76:87:a1:
         b1:84:69:ba:c8:27:e5:a1:74:75:b0:30:ea:6c:bc:b2:69:be:
         81:20:3b:b5:f6:8d:86:c4:d0:ce:9f:01:ca:ea:77:3a:7e:32:
         db:d7:75:1a:ec:ef:a0:c3:f1:08:91:9d:f5:4f:b5:d0:f0:9e:
         a4:a0:65:40:8f:89:72:57:6e:b7:4b:56:cd:f3:20:db:a1:48:
         78:c4:18:8d:fe:7e:33:fc:3f:81:b5:a9:a5:d9:8f:b9:a1:e5:
         73:47:3f:4b:b6:bd:3b:50:db:6c:11:e0:96:d2:55:a2:a9:fb:
         4a:db:53:6e:30:e4:51:8f:d3:9f:06:d6:b9:09:76:fc:89:96:
         e7:1e:bb:d0:8a:b6:96:1d:08:84:60:5b:60:93:52:69:89:9a:
         79:20:49:71:be:a3:d6:08:11:d6:f4:32:64:8b:a0:37:87:4a:
         93:6a:18:81:8c:e6:09:66:8a:a4:68:b9:09:69:ad:80:e9:0f:
         8c:c7:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org