Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/5ptU5ZJBBFO01FFNvCGUOU9XQZU.roa
File:                     5ptU5ZJBBFO01FFNvCGUOU9XQZU.roa (raw, json)
Hash identifier:          wHYCPbs8/k/qVFH5SnWRV63iR9U/FJ37Hk2DxdKjs6k=
Subject key identifier:   E6:9B:54:E5:92:41:04:53:B4:D4:51:4D:BC:21:94:39:4F:57:41:95
Certificate issuer:       /CN=c13ebd29c69ff0a2b33dac6d86b488ba50c9e888
Certificate serial:       018CC79359C7E135B8D3F01753783F8190C9
Authority key identifier: C1:3E:BD:29:C6:9F:F0:A2:B3:3D:AC:6D:86:B4:88:BA:50:C9:E8:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT69Kcaf8KKzPaxthrSIulDJ6Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/5ptU5ZJBBFO01FFNvCGUOU9XQZU.roa
Signing time:             Tue 02 Jan 2024 00:29:31 +0000
ROA not before:           Tue 02 Jan 2024 00:29:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50344
IP address blocks:        193.104.236.0/24 maxlen: 24
                          2001:67c:26fc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:59:c7:e1:35:b8:d3:f0:17:53:78:3f:81:90:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13ebd29c69ff0a2b33dac6d86b488ba50c9e888
        Validity
            Not Before: Jan  2 00:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e69b54e592410453b4d4514dbc2194394f574195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:4d:19:8e:76:46:83:6c:f8:9e:f4:b9:75:
                    c2:18:a9:6b:6a:ec:51:d7:4b:8a:0d:93:92:bc:d9:
                    c9:7b:b8:48:63:5a:05:87:9b:6b:e0:74:5e:2a:b6:
                    1d:14:8c:ce:85:2f:6e:47:1e:3a:f7:5f:a1:f9:34:
                    3f:63:86:62:59:42:da:d4:db:87:f8:c7:03:52:b2:
                    e3:5c:5b:65:fa:eb:92:30:b8:19:0f:53:18:ec:d6:
                    d0:c8:93:19:52:90:f2:55:d2:c1:38:d2:cf:71:62:
                    80:ae:b7:ed:59:b2:f2:4b:2a:af:64:d4:71:14:1a:
                    46:0b:83:00:fc:94:3e:81:60:28:23:63:28:65:cc:
                    b0:32:02:99:9e:31:55:4f:ce:4c:4a:78:4c:f7:30:
                    84:8a:35:93:68:51:fb:26:ea:7f:4d:b0:66:e1:35:
                    d1:1c:4e:f2:57:80:05:92:05:00:a4:19:5b:96:65:
                    74:a2:7f:df:93:24:b2:b6:52:e2:bf:15:f7:7f:df:
                    59:9a:d8:89:d9:0d:24:47:b1:cb:92:63:be:46:80:
                    90:61:35:f5:fd:fe:0e:13:73:73:43:60:26:a3:50:
                    ee:7e:d9:a9:2b:b4:83:f8:84:25:fc:1b:86:bb:29:
                    67:57:1e:3b:f1:81:c0:3a:34:e5:09:b0:a8:55:63:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:54:E5:92:41:04:53:B4:D4:51:4D:BC:21:94:39:4F:57:41:95
            X509v3 Authority Key Identifier:
                keyid:C1:3E:BD:29:C6:9F:F0:A2:B3:3D:AC:6D:86:B4:88:BA:50:C9:E8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT69Kcaf8KKzPaxthrSIulDJ6Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/5ptU5ZJBBFO01FFNvCGUOU9XQZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/wT69Kcaf8KKzPaxthrSIulDJ6Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.236.0/24
                IPv6:
                  2001:67c:26fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:82:4c:70:ee:b6:95:2a:9b:09:ed:92:86:9b:89:60:32:19:
         42:39:92:62:6d:b2:d4:d2:94:d9:ed:14:30:30:54:34:9f:3c:
         04:6d:de:e5:58:5c:64:72:49:af:36:e9:f6:d6:10:60:84:80:
         a4:8e:8c:2b:37:ce:dc:69:ea:bf:f8:73:9e:25:d2:c9:47:59:
         27:f8:02:1d:8b:f4:84:6f:fd:9f:92:46:ef:05:70:1f:28:ae:
         22:ca:ba:e5:fb:38:ab:d0:e0:33:fa:6a:13:e8:f0:da:cf:35:
         1d:7d:29:64:04:0e:3f:89:ce:b3:5b:92:2d:cd:62:71:30:29:
         3a:12:a5:1d:48:fc:67:52:d7:bc:7a:eb:fb:86:8a:76:ce:b1:
         00:35:d9:d0:14:6e:80:70:be:d2:4d:16:55:a4:79:05:9b:22:
         14:ca:0a:db:ac:a4:09:64:39:de:ba:32:3c:5d:33:ea:25:2f:
         72:38:52:91:d1:a6:e4:ae:06:70:b5:1c:11:4c:27:e7:9e:fa:
         62:1d:2f:f3:23:bb:95:c8:ac:df:fa:0e:1e:18:4b:3a:df:2b:
         9e:8e:cf:ad:05:d9:1c:72:e8:61:02:7f:1b:3b:ce:3e:d4:cd:
         e5:e1:e7:5e:e0:56:14:2b:fc:b6:5b:f5:38:6d:67:e8:ba:16:
         cc:88:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:13 2024 by rpki-client on console-fra.rpki-client.org