Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/qw0E78qVwCW3UzdBH62aXMb4IpA.roa
File:                     qw0E78qVwCW3UzdBH62aXMb4IpA.roa (raw, json)
Hash identifier:          eGqzs4NjkYsBZJUnHKAjPbelIgiBi2E6RjCEp+xoORk=
Subject key identifier:   AB:0D:04:EF:CA:95:C0:25:B7:53:37:41:1F:AD:9A:5C:C6:F8:22:90
Certificate issuer:       /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial:       0186E6C099358B202CEB2E4B87BB1E6DE1D6
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/qw0E78qVwCW3UzdBH62aXMb4IpA.roa
Signing time:             Wed 15 Mar 2023 19:30:27 +0000
ROA not before:           Wed 15 Mar 2023 19:30:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200017
IP address blocks:        194.69.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e6:c0:99:35:8b:20:2c:eb:2e:4b:87:bb:1e:6d:e1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
        Validity
            Not Before: Mar 15 19:30:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab0d04efca95c025b75337411fad9a5cc6f82290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:8f:6f:4d:4d:c1:5d:f3:66:b7:09:4b:6f:
                    12:60:53:ca:0c:3a:39:c8:09:4d:cb:f7:bb:ce:f4:
                    14:31:67:f8:81:4e:00:e2:0a:0d:9d:a7:23:a7:87:
                    29:a1:41:60:20:71:c1:89:3a:f1:fb:98:25:e4:25:
                    cf:e1:b1:2e:0b:3c:2b:b7:f0:61:67:0b:72:51:7a:
                    52:50:e7:2a:f7:80:ca:58:38:07:a6:0b:87:6b:1e:
                    25:51:8e:ff:be:2a:23:4e:c2:ae:64:cf:24:43:33:
                    f5:4a:13:f1:a8:a7:aa:11:21:e2:5c:3d:37:0e:1e:
                    2c:71:9b:9a:b2:06:ae:ec:3e:33:ae:cf:4f:63:67:
                    fb:3e:91:3a:cb:1f:c7:7d:af:0c:87:38:1f:84:7b:
                    ed:ca:e4:3f:d0:b7:48:34:f9:68:3e:5e:39:30:9c:
                    93:e2:d4:75:5c:13:ff:ec:0c:44:e4:d5:78:c4:42:
                    61:ce:ad:ed:9a:67:47:f9:42:fd:53:9a:d3:fd:92:
                    a5:f3:86:d9:e6:ef:17:a8:3b:6b:3e:53:da:df:51:
                    df:4f:3b:02:6d:ae:bc:1f:0c:a1:bf:50:fa:6c:ea:
                    02:83:8b:85:f3:34:12:0e:79:8a:81:57:51:3a:0f:
                    31:f7:10:97:df:60:03:99:40:da:e7:f3:42:fa:9c:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:04:EF:CA:95:C0:25:B7:53:37:41:1F:AD:9A:5C:C6:F8:22:90
            X509v3 Authority Key Identifier:
                keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/qw0E78qVwCW3UzdBH62aXMb4IpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:df:b5:9a:c8:72:45:a1:64:d6:0f:3b:65:0c:fe:85:d2:92:
         a9:32:a0:91:12:bb:e9:a0:db:4c:a3:65:9a:ea:c0:92:43:8c:
         a0:5f:8c:88:d6:30:5b:9c:25:b7:61:99:c7:27:94:5f:28:9c:
         01:eb:5f:dc:f7:3c:fc:05:30:da:75:84:e8:12:47:60:14:4c:
         e8:55:65:8a:63:83:5a:97:fe:ea:49:02:5d:20:5a:51:94:3a:
         ea:da:3f:b1:c5:f2:1a:be:4c:1e:55:44:b9:76:a3:b9:40:17:
         0a:3c:28:de:f4:11:4e:6a:77:53:ad:7c:7f:0e:ac:60:d5:bc:
         8c:3c:f8:e3:08:09:82:d4:ea:d1:d9:90:62:ef:95:79:ca:0f:
         c8:23:91:40:5d:a5:d0:23:f7:b8:8e:d7:b7:2f:f5:ac:ee:06:
         7c:59:5c:2c:77:44:2a:3f:75:af:3f:d2:f6:0d:57:39:b5:11:
         a0:43:3e:5b:00:a4:1f:83:a0:ea:da:86:95:95:2e:0a:88:52:
         69:19:8d:4a:84:73:5a:d2:cf:c0:dc:76:82:b5:84:cf:0b:0e:
         2f:f9:1e:c5:d8:67:9a:94:72:c0:56:1b:f7:15:c7:cc:01:a9:
         a6:66:16:ff:07:79:42:03:09:ef:da:cb:e5:d3:6d:a1:20:98:
         90:3d:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:46 2024 by rpki-client on console-ams.rpki-client.org