Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/HVts5V3IzcKmjNFA4ITINsBeyJ0.roa
File:                     HVts5V3IzcKmjNFA4ITINsBeyJ0.roa (raw, json)
Hash identifier:          10UlokfPrJcvh1NM5VwsLBMMs3vPtbnsZnt+XFM698M=
Subject key identifier:   1D:5B:6C:E5:5D:C8:CD:C2:A6:8C:D1:40:E0:84:C8:36:C0:5E:C8:9D
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       0183E973A20EF1195F9CEFC7D2FC0EC90F2D
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/HVts5V3IzcKmjNFA4ITINsBeyJ0.roa
Signing time:             Tue 18 Oct 2022 04:56:52 +0000
ROA not before:           Tue 18 Oct 2022 04:56:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        195.178.110.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e9:73:a2:0e:f1:19:5f:9c:ef:c7:d2:fc:0e:c9:0f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Oct 18 04:56:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1d5b6ce55dc8cdc2a68cd140e084c836c05ec89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:93:91:d9:9c:d4:00:f2:4c:84:bf:f5:e1:
                    a0:bf:64:9f:3b:b2:50:dd:21:9f:a8:ec:d0:0c:2c:
                    4f:4e:8c:c5:0e:fc:57:89:a4:c3:2d:7a:bc:d2:b5:
                    3e:09:b1:5e:d9:74:b6:94:e1:cb:b0:c2:d3:56:af:
                    41:09:3c:06:70:25:2c:f3:81:f3:13:c9:73:94:21:
                    dc:3d:8f:04:07:43:0b:d0:8a:a8:48:76:94:98:12:
                    2d:45:c8:68:34:eb:5c:89:d7:76:76:3c:cd:cb:cc:
                    fe:c2:6f:23:25:1b:73:bb:b1:b3:40:68:62:a4:0c:
                    26:1a:55:33:1e:51:0c:e0:1d:84:02:30:72:5a:6a:
                    ff:85:73:6f:c4:9c:19:4b:fd:a8:8a:ce:f0:58:da:
                    74:ee:90:1d:55:2c:17:11:70:52:ac:c2:7f:52:ec:
                    c9:2f:39:65:6e:3b:b2:93:9d:9d:03:d8:76:22:a3:
                    59:01:fc:1b:61:a6:b7:1a:59:76:a9:93:8f:bc:28:
                    86:0b:90:6e:ef:26:a4:12:b4:00:88:96:a0:b8:58:
                    72:fc:19:31:4a:18:01:9c:76:ee:64:3a:02:30:02:
                    b3:e1:9c:f2:c5:c8:50:3f:09:32:1d:22:5b:c4:26:
                    db:1c:06:0d:81:be:6c:30:37:96:2c:d4:4e:57:4a:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5B:6C:E5:5D:C8:CD:C2:A6:8C:D1:40:E0:84:C8:36:C0:5E:C8:9D
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/HVts5V3IzcKmjNFA4ITINsBeyJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:86:79:16:4b:32:22:dc:6d:5e:37:47:98:2d:98:a3:dc:cb:
         fa:54:aa:58:dc:52:68:7c:ab:27:d4:44:f5:d8:a3:4c:f9:08:
         08:2e:cb:8d:bb:76:97:76:84:e7:a6:c8:e8:54:a3:50:88:cd:
         91:eb:1c:90:b5:96:ab:20:e3:9c:f8:56:11:a6:34:7d:1d:56:
         f0:fb:9f:8e:7c:6c:4a:09:90:db:e7:91:e1:f1:3d:c6:3a:92:
         d6:15:49:ca:6d:b9:0c:1c:16:57:be:84:f9:7a:7e:03:08:8f:
         f3:2a:5a:9f:50:e4:07:69:65:4a:1c:18:a1:ae:a5:85:d5:c9:
         11:4a:b6:b8:85:1a:d4:f1:69:c7:c2:2a:30:70:d2:11:7a:30:
         ae:30:04:4d:c1:c0:6e:2a:4c:4d:03:94:38:3f:65:40:09:7a:
         64:89:90:a9:02:69:8f:53:05:e4:c6:7e:2c:cd:7f:b6:a4:11:
         05:65:ab:c4:b6:83:92:28:0c:91:3e:14:8f:e0:f2:50:1c:89:
         30:71:2c:f1:07:91:c4:f3:dc:cb:26:d8:c9:12:81:c0:44:88:
         50:ad:d6:6c:12:bc:e2:04:63:71:0c:2f:0f:30:2c:40:4e:d4:
         9a:97:f7:5f:df:2f:da:9d:10:1e:17:66:33:1a:16:7a:cd:d6:
         19:1c:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org