Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/W9D_b1exkMKshp1maodkpANSls0.roa
File:                     W9D_b1exkMKshp1maodkpANSls0.roa (raw, json)
Hash identifier:          3upLiolNF6bGTOqOiKgg2YayHZ+hE8y59+wrLh83YFY=
Subject key identifier:   5B:D0:FF:6F:57:B1:90:C2:AC:86:9D:66:6A:87:64:A4:03:52:96:CD
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       0183A7C7D365866D5B3264D9FFF2349EA3FC
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/W9D_b1exkMKshp1maodkpANSls0.roa
Signing time:             Wed 05 Oct 2022 10:53:54 +0000
ROA not before:           Wed 05 Oct 2022 10:53:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        195.178.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a7:c7:d3:65:86:6d:5b:32:64:d9:ff:f2:34:9e:a3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Oct  5 10:53:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bd0ff6f57b190c2ac869d666a8764a4035296cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:f5:50:47:c9:46:bc:b1:93:48:50:e2:26:
                    0f:9d:b1:85:3d:4a:2f:7c:1e:28:5a:2d:b7:a2:51:
                    cd:d3:a7:9c:f1:6b:9a:dd:9e:cd:08:c9:f8:1d:1c:
                    df:1a:ed:8a:e9:a5:71:31:57:71:b7:88:c7:0b:f7:
                    32:7c:14:81:16:ab:89:cb:68:51:70:71:24:7e:a6:
                    51:43:3b:83:c3:04:0c:c8:1a:f3:ea:99:e5:4e:6d:
                    41:0a:4c:09:59:bc:38:47:32:10:84:89:6a:2e:f2:
                    57:41:29:57:cf:6e:43:90:e1:07:27:c5:3a:67:58:
                    44:5e:0b:69:61:60:70:dd:c0:18:7a:e0:fc:d9:b1:
                    05:ad:c8:dc:d0:b7:0b:7c:9b:92:b7:a9:08:40:34:
                    dd:60:96:ce:c0:c1:08:b5:bf:8b:43:bd:79:d4:ac:
                    77:84:7d:18:7c:df:eb:e4:66:89:de:73:a5:74:12:
                    86:34:3b:ab:4c:94:a1:04:30:b3:61:ea:5c:12:40:
                    1f:33:f8:b9:1f:a9:af:56:42:8b:c1:26:e0:77:35:
                    fa:ec:f8:38:ca:59:58:c1:62:f2:05:d9:f1:a3:e5:
                    18:84:89:b1:f4:f0:9f:b3:b3:ff:dc:ce:b7:d9:ad:
                    db:76:8d:66:86:a0:5a:9c:eb:9e:e6:92:70:ea:b0:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:FF:6F:57:B1:90:C2:AC:86:9D:66:6A:87:64:A4:03:52:96:CD
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/W9D_b1exkMKshp1maodkpANSls0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:12:a3:5b:e7:77:83:6e:c5:30:eb:e3:f8:eb:a3:79:af:22:
         4e:1d:ca:6a:f8:75:62:a0:59:61:00:05:e1:4d:33:ef:7b:2f:
         ba:ab:d0:09:13:8b:13:d3:f4:f9:dd:ea:03:e6:b5:cf:04:17:
         0a:a9:71:98:74:27:0b:c1:47:b1:7e:4b:b0:34:ab:9f:72:20:
         c2:73:2d:b7:ad:49:01:b5:70:82:5b:de:6e:28:9e:de:4e:28:
         2b:17:4a:80:3b:47:ba:a4:2c:cb:3f:82:26:e6:bb:57:e1:a2:
         05:17:ee:b9:07:52:df:67:ed:67:f7:38:0b:e7:4a:d0:3a:2a:
         fe:ac:41:31:60:6b:c7:ab:dc:6a:c4:fb:f4:83:eb:0c:2b:62:
         f5:1e:cf:03:ad:8c:bc:39:8d:88:04:f8:58:17:fe:5d:ee:5c:
         8d:3c:64:53:2f:e5:8a:b8:77:c2:9b:61:53:09:0b:ba:c6:54:
         ad:e9:c7:32:e4:87:2a:e3:36:0e:54:65:33:76:4f:5e:82:e4:
         2b:91:9b:b8:4b:9f:65:f5:86:ad:07:0c:67:27:50:ba:9a:71:
         12:fb:84:ad:db:f8:e3:72:1b:22:a8:ac:24:3c:de:62:76:8c:
         f4:71:76:11:39:77:6b:7e:a9:de:03:d8:db:20:25:d1:4c:9c:
         63:43:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org