Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/WCU1eJbvAgYVr9EEba911KC5-pQ.roa
File:                     WCU1eJbvAgYVr9EEba911KC5-pQ.roa (raw, json)
Hash identifier:          TeuAih9Vm9hkYXzEi0cseD5zQNItZe1TI93ElossoYc=
Subject key identifier:   58:25:35:78:96:EF:02:06:15:AF:D1:04:6D:AF:75:D4:A0:B9:FA:94
Certificate issuer:       /CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
Certificate serial:       EA2963
Authority key identifier: 57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/WCU1eJbvAgYVr9EEba911KC5-pQ.roa
Signing time:             Sat 01 Jan 2022 00:55:46 +0000
ROA not before:           Sat 01 Jan 2022 00:55:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        194.9.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15346019 (0xea2963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
        Validity
            Not Before: Jan  1 00:55:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5825357896ef020615afd1046daf75d4a0b9fa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:14:fa:00:7b:d1:f9:32:dc:54:88:85:30:
                    cc:15:2f:44:57:34:d5:c1:2b:fe:a0:2d:a8:12:fb:
                    a6:3e:24:38:4a:c1:75:44:27:31:d7:c9:12:8f:86:
                    52:f7:70:85:1a:df:57:8f:47:ad:df:54:51:e1:fe:
                    8c:3a:cf:6a:aa:6f:d8:4e:e4:ab:24:67:e0:80:fc:
                    d2:e6:0c:64:b8:24:c2:32:ca:99:15:d4:dc:d9:73:
                    26:7d:e9:0b:fd:39:d4:97:eb:78:df:44:44:9a:2a:
                    a7:f7:4b:f8:dc:c3:47:ee:27:83:9d:9a:3d:15:8c:
                    10:07:0d:84:a3:fb:a5:06:df:a5:a5:ff:5f:28:98:
                    39:66:00:5e:b4:cc:24:bb:4d:a2:74:c7:d0:92:32:
                    85:a4:78:80:b3:e1:76:97:2f:23:1f:41:d2:f8:55:
                    f7:2a:f0:aa:59:b2:81:e9:1f:ac:72:ce:e5:87:0b:
                    e6:9a:95:f1:75:54:c1:59:53:05:59:77:e9:26:f3:
                    8c:4a:c2:ba:18:6d:6b:36:bd:32:8e:02:17:43:57:
                    67:08:b1:51:88:1d:dc:7a:88:4a:ca:06:97:6c:68:
                    32:84:f0:8f:8d:7d:20:07:ec:d8:e7:81:88:23:0b:
                    c0:d9:95:2c:7d:1b:c4:38:6a:e2:96:75:05:5d:3f:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:25:35:78:96:EF:02:06:15:AF:D1:04:6D:AF:75:D4:A0:B9:FA:94
            X509v3 Authority Key Identifier:
                keyid:57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/WCU1eJbvAgYVr9EEba911KC5-pQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/V8XopP5NnpGMSdsYOxFUs_ICxg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:01:a1:0d:94:67:c6:aa:f1:89:7c:fb:c5:c4:c5:8b:12:ad:
         99:89:12:ed:4b:b8:e2:63:96:ca:e6:ec:b3:a4:46:ec:fb:02:
         a7:db:63:1c:76:f9:d4:06:e5:0b:6c:8f:10:60:ff:2f:53:4f:
         51:7e:46:88:64:61:a3:88:c3:60:da:c6:dd:9a:74:b4:fc:4e:
         46:5d:36:5f:69:a9:ec:c5:0f:a5:0f:66:e6:11:39:de:13:de:
         e0:60:e8:8d:fd:0b:23:29:53:2d:b7:d5:1b:c1:92:6c:ab:fa:
         26:40:c1:17:d9:4b:f2:b4:69:32:22:ae:c0:cc:e0:59:8e:e3:
         08:36:6d:3c:97:ec:09:e1:13:03:aa:9c:ac:b0:be:5d:8b:93:
         e3:e7:d4:46:a4:f1:e1:96:4c:25:73:89:1a:db:ef:c2:7b:a9:
         25:77:a8:ef:78:6d:98:4d:74:98:be:b2:9f:93:db:e4:51:15:
         6e:11:d7:f3:d3:70:b5:e3:cb:2e:a5:c8:87:31:60:68:50:78:
         27:2e:13:b7:75:ac:c6:b6:72:7a:7c:b1:e8:42:7b:4f:3d:ae:
         0c:31:ec:d2:6e:80:4b:9d:54:86:50:de:2d:23:d2:c1:97:1f:
         a2:7b:a5:bb:7f:da:0c:cd:c3:65:32:7f:94:3b:cd:74:eb:c6:
         97:42:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:43 2024 by rpki-client on console-ams.rpki-client.org