Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kTlQ3pGfBXNlBybM3mNy4SMzebA.roa
File:                     kTlQ3pGfBXNlBybM3mNy4SMzebA.roa (raw, json)
Hash identifier:          BklFPI3JiWMYK3I8Er7AJuvydcqhOwMHMOtPBDcTkTw=
Subject key identifier:   91:39:50:DE:91:9F:05:73:65:07:26:CC:DE:63:72:E1:23:33:79:B0
Certificate issuer:       /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial:       018B958F441CB79A71A7C92C9031CEC8339D
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kTlQ3pGfBXNlBybM3mNy4SMzebA.roa
Signing time:             Fri 03 Nov 2023 14:21:16 +0000
ROA not before:           Fri 03 Nov 2023 14:21:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57043
IP address blocks:        193.162.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:95:8f:44:1c:b7:9a:71:a7:c9:2c:90:31:ce:c8:33:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
        Validity
            Not Before: Nov  3 14:21:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=913950de919f0573650726ccde6372e1233379b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:98:b6:cf:d6:e7:8e:32:a8:42:83:6b:59:
                    84:e6:3e:c0:cf:98:7f:f2:60:16:ef:5a:3e:16:51:
                    06:17:40:54:18:62:1e:65:bb:99:00:2e:01:63:bb:
                    61:d0:5b:c1:fa:19:f6:f3:0b:c0:05:7a:d4:88:68:
                    1a:b3:80:a0:22:3a:4d:ee:01:99:93:93:1c:9b:c3:
                    2a:61:e0:8d:e5:49:7a:fc:f9:24:7c:7e:39:f6:6b:
                    89:28:67:9e:3d:90:38:40:dc:8e:a6:39:dc:a2:a5:
                    5f:38:5f:19:3b:58:41:f3:28:98:e1:10:5f:cc:4a:
                    0d:59:b3:73:28:b8:ac:dd:46:69:cb:b3:7d:d4:4f:
                    7b:5c:3f:fd:29:4e:2e:bc:29:a6:34:51:80:a7:b6:
                    ca:3a:5d:47:41:79:76:30:79:d8:35:08:e6:3c:3b:
                    a5:f6:fa:12:b2:bc:93:ab:03:5d:b8:29:a5:62:9b:
                    c4:aa:c6:b1:fd:c5:a3:5b:3a:eb:c3:0e:3d:ad:91:
                    4e:8d:2f:df:c4:d3:d8:cc:5d:a5:43:de:60:60:e2:
                    ec:2b:cf:94:31:9c:62:f4:21:8b:39:73:98:03:47:
                    ee:63:81:31:57:88:ad:43:9a:93:61:f0:86:48:66:
                    50:ec:17:cb:0c:25:49:1d:16:2b:30:f4:7e:35:17:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:50:DE:91:9F:05:73:65:07:26:CC:DE:63:72:E1:23:33:79:B0
            X509v3 Authority Key Identifier:
                keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kTlQ3pGfBXNlBybM3mNy4SMzebA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:f4:01:e8:6d:3b:76:ad:84:42:e7:e4:cd:4b:88:b3:1f:
         8c:26:2c:20:9c:66:55:79:72:fe:c1:97:ae:ef:b4:dc:8d:5c:
         61:85:e7:69:03:10:1b:a3:38:03:3c:bc:60:b2:02:5a:3c:08:
         b0:14:17:09:c7:e4:27:17:9b:c9:80:b5:5b:5f:7a:63:a8:32:
         0c:6d:06:8e:28:7e:50:67:40:6d:e9:fd:9b:c0:2f:ab:af:d9:
         0f:11:25:38:28:18:b4:5c:22:fe:7e:88:2a:0d:3b:67:aa:9e:
         79:31:06:46:3d:43:bd:16:4f:55:fd:59:19:d6:9b:13:52:a3:
         47:86:61:c8:d5:23:04:77:32:5e:50:63:17:d1:61:3b:6c:b6:
         29:07:86:5a:3f:17:49:c4:ef:18:b6:ec:9a:b1:82:ad:54:81:
         5d:80:bf:ff:fb:0f:fa:7b:da:8a:7e:5a:fe:1f:ac:ea:2b:8a:
         01:e3:1d:fa:ad:a9:7b:fe:13:7b:75:e0:8d:2d:8b:ac:11:4c:
         6d:24:e3:9c:51:cb:a8:02:9f:2c:8c:1d:1e:40:43:3e:15:be:
         e1:04:4f:0d:e7:7e:a8:05:b5:30:d0:72:7b:12:4a:e1:aa:07:
         db:47:41:27:bc:88:45:67:94:7e:d4:b6:a5:aa:e8:5f:c6:61:
         05:b7:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:48 2024 by rpki-client on console-ams.rpki-client.org