Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/e5RJ0E5xWPLB-TB9WdcMS1Ak8D4.roa
File:                     e5RJ0E5xWPLB-TB9WdcMS1Ak8D4.roa (raw, json)
Hash identifier:          0uvL0kAraJ90IUNJaoCdFErZ8wnXN2iKt4UNA5tA8q0=
Subject key identifier:   7B:94:49:D0:4E:71:58:F2:C1:F9:30:7D:59:D7:0C:4B:50:24:F0:3E
Certificate issuer:       /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial:       018805937382B8E05B91B9EAB07D14D3AAE9
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/e5RJ0E5xWPLB-TB9WdcMS1Ak8D4.roa
Signing time:             Wed 10 May 2023 12:12:09 +0000
ROA not before:           Wed 10 May 2023 12:12:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15969
IP address blocks:        194.187.75.0/24 maxlen: 24
                          194.187.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:93:73:82:b8:e0:5b:91:b9:ea:b0:7d:14:d3:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
        Validity
            Not Before: May 10 12:12:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b9449d04e7158f2c1f9307d59d70c4b5024f03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:e0:f7:d1:a7:52:70:c7:27:87:e2:25:3a:
                    81:74:65:03:1f:b0:f0:c5:e7:fc:1d:25:95:81:69:
                    27:c0:5c:17:d6:93:61:cb:3a:04:48:16:4c:4f:11:
                    2a:68:69:72:5c:d4:a4:e3:8c:54:bd:b7:b1:8a:6d:
                    1b:07:0a:81:05:4d:a1:60:34:32:fa:30:6e:57:10:
                    b8:b8:fa:e8:32:71:9e:1f:4b:01:d8:36:1c:f8:26:
                    09:9f:10:3e:f9:08:23:0d:da:4a:44:ac:3c:4c:3e:
                    dd:6a:78:16:75:1e:92:ce:84:31:39:24:7f:1e:26:
                    0f:7a:c1:59:31:74:56:ea:fd:bf:18:1e:86:34:4b:
                    b3:95:00:f2:a3:09:76:e1:02:d4:b0:f7:a8:ee:1b:
                    d3:5b:a4:48:e2:7d:a2:a0:75:f1:c7:d9:8e:94:e0:
                    43:eb:be:5a:47:8f:dd:f3:71:62:02:b7:af:92:9b:
                    d6:ea:6f:80:47:d5:a5:ab:1e:ea:2c:a8:35:50:dc:
                    e8:e9:bd:a2:a9:bb:3c:87:f9:5f:6d:40:e9:c5:e5:
                    fb:5a:a9:50:f7:ad:90:3e:9d:df:9d:a5:1f:a1:d6:
                    d3:cf:47:04:30:5b:0b:73:db:b5:b3:23:f0:da:7b:
                    e3:58:82:0f:2b:57:4b:c7:a3:3e:71:a3:65:3a:1e:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:49:D0:4E:71:58:F2:C1:F9:30:7D:59:D7:0C:4B:50:24:F0:3E
            X509v3 Authority Key Identifier:
                keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/e5RJ0E5xWPLB-TB9WdcMS1Ak8D4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.187.72.0/24
                  194.187.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:fe:39:4d:23:be:14:78:9c:74:c0:9d:ae:ad:b8:b9:af:
         ea:e2:4d:65:66:4d:d5:93:d2:5f:80:a8:5d:2e:d6:2e:7b:67:
         e1:8a:58:dc:e9:4a:3c:cb:e4:17:4c:54:2c:e2:86:8d:93:5d:
         09:cf:c3:87:51:f8:3d:29:df:c5:33:ec:74:3b:5b:cb:8a:6f:
         76:3b:b4:1e:5d:d0:c7:19:7b:11:b2:da:a8:53:31:19:47:13:
         fc:a8:ad:8e:c8:9f:33:aa:03:d0:68:c1:77:32:68:49:9e:99:
         55:f1:5b:0b:cb:20:a0:97:99:4f:77:34:70:71:58:af:be:1d:
         4f:94:b7:b0:24:3d:0e:ce:34:91:d8:10:85:45:94:ae:eb:85:
         e9:3c:5a:8e:11:80:80:ac:4f:e0:2e:3e:09:b7:fc:3e:52:38:
         e9:25:e6:d8:94:ad:6d:c4:77:c7:78:7c:37:04:85:04:18:3a:
         a4:53:97:16:e6:b3:3b:3c:6e:fc:4f:35:ec:d7:c3:a5:44:67:
         06:73:28:4a:da:de:81:c9:88:64:e6:fe:bb:23:5e:cf:a6:b3:
         1a:17:40:b5:86:35:c9:59:4f:47:bf:9a:ec:2f:41:ab:df:03:
         55:a1:34:10:2e:07:22:63:0c:1b:1a:a7:20:96:57:95:3d:a6:
         41:3d:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:10 2024 by rpki-client on console-ams.rpki-client.org