Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/g9ax9coQE3r2e--TdFnBODWNzuA.roa
File:                     g9ax9coQE3r2e--TdFnBODWNzuA.roa (raw, json)
Hash identifier:          W2DwSjOIDfEKYni8/xaEe8tWjBDP52xNylWBugdGbsA=
Subject key identifier:   83:D6:B1:F5:CA:10:13:7A:F6:7B:EF:93:74:59:C1:38:35:8D:CE:E0
Certificate issuer:       /CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
Certificate serial:       0182207A02D6F5BB29747870085C57288B88
Authority key identifier: 57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/g9ax9coQE3r2e--TdFnBODWNzuA.roa
Signing time:             Thu 21 Jul 2022 11:17:23 +0000
ROA not before:           Thu 21 Jul 2022 11:17:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        194.9.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:7a:02:d6:f5:bb:29:74:78:70:08:5c:57:28:8b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
        Validity
            Not Before: Jul 21 11:17:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83d6b1f5ca10137af67bef937459c138358dcee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:b3:8a:5c:db:07:75:ef:11:bf:5c:37:7a:
                    90:ab:1f:2d:f7:bf:50:85:ac:17:e1:86:99:7b:50:
                    43:2b:9c:b3:35:91:ba:7d:52:fe:a6:aa:74:6b:d0:
                    28:c9:9b:fd:59:a7:53:f3:3a:19:54:df:09:09:5a:
                    33:45:7d:b9:7b:a1:90:2b:e5:fe:32:3b:a7:7d:e2:
                    12:6c:8f:18:f6:63:32:f9:14:b9:d7:5b:26:b8:dc:
                    15:84:77:b8:da:dc:de:a9:63:3b:a2:68:1e:03:7a:
                    d2:01:cf:e9:bd:e7:71:dd:26:41:50:89:9e:42:49:
                    d7:12:49:46:78:35:73:00:68:04:db:3a:dd:6a:17:
                    91:71:61:9b:e3:1c:5a:41:b3:bb:4b:6d:a0:6a:33:
                    22:58:e5:55:b1:53:c8:e3:a5:52:29:13:59:da:7f:
                    6c:f7:e5:64:bb:d2:3c:4c:db:c8:39:ee:4a:9b:d6:
                    c0:c8:a4:c8:c0:55:a1:83:58:2b:d0:47:7e:96:db:
                    fd:d4:d0:a9:57:16:82:80:73:32:44:6b:44:4a:ca:
                    82:6d:2b:7b:82:9a:33:37:0e:81:da:5a:99:d7:91:
                    c8:4d:b7:37:e3:02:5e:44:d2:67:ea:10:de:27:76:
                    8a:27:d6:c2:89:88:d3:6d:00:6c:98:b2:fc:ea:d9:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D6:B1:F5:CA:10:13:7A:F6:7B:EF:93:74:59:C1:38:35:8D:CE:E0
            X509v3 Authority Key Identifier:
                keyid:57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/g9ax9coQE3r2e--TdFnBODWNzuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/V8XopP5NnpGMSdsYOxFUs_ICxg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:72:6b:16:be:4d:74:f8:7d:30:94:1e:3c:33:d4:c5:e5:6e:
         01:c6:76:72:57:03:89:92:73:50:a6:b4:04:af:cc:b7:ab:c0:
         6d:24:f5:48:7c:23:6a:d5:3b:f1:0f:e5:bc:1d:03:bf:3f:b3:
         ea:58:68:5c:28:ed:89:e1:75:46:c5:0d:ad:e7:6e:7d:67:e2:
         1e:d2:76:fa:88:00:2c:14:89:5d:25:d8:ec:27:f9:6a:f7:0f:
         0f:e5:68:29:fe:0c:d8:e6:4d:30:4c:f9:ff:c6:92:68:23:9f:
         34:99:e7:9b:ec:ea:21:0c:d4:35:83:a7:00:ef:1e:d0:88:8f:
         e7:75:7a:32:ef:27:2a:bf:76:c4:05:81:bf:f3:82:9e:74:d8:
         c1:20:0a:01:77:36:4a:e4:ab:ea:0c:43:65:ea:37:3a:0a:0f:
         7f:1a:c2:1c:39:be:f4:c2:a6:eb:b1:a4:63:88:0d:27:7f:14:
         22:f4:cc:8b:92:c9:1f:78:84:34:09:c8:94:c5:32:73:c5:4f:
         1a:3c:9e:0d:95:f9:6a:cc:88:a1:e5:83:e0:d4:49:a1:4c:2e:
         18:df:77:a2:a3:1f:b9:b0:10:ee:94:c4:b6:e8:a4:94:56:3c:
         10:ac:10:c5:7d:39:b1:12:36:08:92:ab:c5:1a:b4:52:d1:a6:
         ae:bd:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:40 2024 by rpki-client on console-fra.rpki-client.org