Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa
File:                     Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa (raw, json)
Hash identifier:          WV43Q0fMRrdmbJ/25doJcJX14bqSOW9jwak1pR905+s=
Subject key identifier:   0A:DD:55:0D:BD:1B:2A:B5:DF:95:74:35:A0:FF:D1:BE:1D:04:82:50
Certificate issuer:       /CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Certificate serial:       018B86C679105A371CB50F6A96DEBD29F901
Authority key identifier: F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa
Signing time:             Tue 31 Oct 2023 17:27:15 +0000
ROA not before:           Tue 31 Oct 2023 17:27:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41171
IP address blocks:        194.26.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:86:c6:79:10:5a:37:1c:b5:0f:6a:96:de:bd:29:f9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
        Validity
            Not Before: Oct 31 17:27:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0add550dbd1b2ab5df957435a0ffd1be1d048250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:8a:60:4b:d3:fe:f8:46:b5:71:ed:6d:9c:
                    15:70:b7:a3:7f:b6:c3:e8:a2:42:6d:54:5d:96:bd:
                    60:bb:92:1c:74:0d:12:48:95:24:cf:87:3b:27:eb:
                    a1:bc:1e:fe:bf:ed:e7:23:dc:20:14:af:61:a7:0d:
                    8e:cf:d7:ad:ef:d2:a4:4b:e2:f8:d9:da:61:0d:27:
                    2c:76:0a:f5:d2:a0:b0:3f:98:07:9e:2a:05:6a:12:
                    47:2b:b8:e3:3f:cb:84:84:6a:c5:92:fa:a3:18:36:
                    93:a4:7f:ed:50:6e:ed:d9:02:0c:e1:00:e3:e6:b0:
                    c0:35:91:75:a3:ee:a4:a6:b1:87:dc:c5:fe:be:79:
                    1f:6b:b5:78:bc:ea:58:cb:c2:cb:b9:40:37:45:b9:
                    11:05:ed:c7:f6:60:d6:00:cb:98:ee:fb:4e:c2:a6:
                    2c:da:e3:12:2e:4e:b2:4b:55:27:90:82:5b:ee:0e:
                    88:9b:02:92:87:f3:e1:68:4b:60:72:22:2d:76:69:
                    14:e3:d5:d7:21:29:a1:44:c0:6f:33:56:5f:25:95:
                    87:86:67:99:ef:e8:7a:6a:42:6e:a0:79:9a:b4:40:
                    07:06:2d:a0:d8:3b:0d:9f:fe:3b:b6:4d:8d:03:50:
                    61:36:f7:d9:8d:78:78:a0:0c:5e:0f:f6:89:54:da:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:55:0D:BD:1B:2A:B5:DF:95:74:35:A0:FF:D1:BE:1D:04:82:50
            X509v3 Authority Key Identifier:
                keyid:F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:0d:36:97:b3:86:bc:8f:fe:73:4f:c8:fd:c8:56:c8:fa:
         88:9f:a5:76:7b:a0:59:c4:0e:9f:68:64:02:c7:18:95:d9:40:
         55:8b:ac:2f:3c:3d:47:fe:7d:d1:d1:f8:64:8c:d6:29:20:db:
         3d:0a:06:da:6f:d2:73:a9:d3:54:9a:35:94:a1:15:9a:6f:e7:
         05:84:f8:06:71:62:6f:18:1b:33:7d:b6:de:a8:47:f1:c1:b9:
         e2:43:f0:ac:dc:45:9e:d9:be:8a:b8:80:d3:c5:70:fc:59:6c:
         f3:77:41:68:0e:74:57:0a:b6:91:5c:f0:bb:64:ce:40:5b:fe:
         e5:31:76:c8:00:52:05:a8:f0:41:c2:eb:23:22:17:c8:6f:e6:
         c1:07:3f:13:30:31:89:9e:c4:1d:21:44:c1:44:ee:3d:b3:c1:
         03:22:e0:79:6c:fe:36:ec:3c:c8:8b:ad:c9:29:12:25:b8:61:
         e9:9d:b4:57:aa:d8:11:9d:04:3a:cf:fd:2d:3f:f0:fb:b0:2e:
         eb:ee:9e:25:8e:88:ed:bd:5a:05:32:c3:cb:d5:57:39:81:5b:
         02:c3:a8:84:27:cb:b9:74:e0:2a:fd:9c:73:22:01:10:2f:0d:
         b8:a2:8f:64:2a:d9:9a:f0:25:70:75:02:f2:1f:9e:a7:b5:77:
         3b:6e:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:54 2024 by rpki-client on console-ams.rpki-client.org