Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/De41nDDOr59MMv1LvJz4nbh20S4.roa
File:                     De41nDDOr59MMv1LvJz4nbh20S4.roa (raw, json)
Hash identifier:          yWPn3G2gti0okleeJI0urDhCyL3Ieh+/3ySKct978hM=
Subject key identifier:   0D:EE:35:9C:30:CE:AF:9F:4C:32:FD:4B:BC:9C:F8:9D:B8:76:D1:2E
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01835CE4A072937EDB3D43E6250FDE1F6B86
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/De41nDDOr59MMv1LvJz4nbh20S4.roa
Signing time:             Tue 20 Sep 2022 21:53:50 +0000
ROA not before:           Tue 20 Sep 2022 21:53:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210703
IP address blocks:        193.39.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5c:e4:a0:72:93:7e:db:3d:43:e6:25:0f:de:1f:6b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Sep 20 21:53:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0dee359c30ceaf9f4c32fd4bbc9cf89db876d12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:e3:8d:88:98:76:b2:49:28:17:7f:1c:f4:
                    3d:6f:03:c7:3e:fc:50:01:08:74:68:8c:60:b4:07:
                    87:44:c5:15:7a:46:69:25:c4:21:c7:55:39:18:37:
                    ac:c0:8d:f4:6e:45:8b:87:b7:bc:9f:df:8f:9c:b5:
                    72:9c:16:6d:b7:56:b9:c7:ef:a2:bd:3e:c6:4a:7a:
                    1a:bd:5e:6d:9b:e2:35:95:99:b9:a2:bc:7d:ef:31:
                    15:5f:1b:14:d9:80:bd:43:ac:85:71:99:93:1a:08:
                    d9:a6:42:36:7f:34:e7:05:63:b9:0f:1a:b0:06:00:
                    4f:d9:23:1d:ae:af:1a:9b:32:ce:aa:eb:48:22:ac:
                    b2:c0:e7:91:c7:08:1c:62:6a:d3:2b:a2:59:bb:b8:
                    5f:e0:dd:bb:3c:45:dc:1a:09:cb:f5:b3:ec:76:10:
                    db:aa:64:85:48:17:94:f3:b3:72:90:1f:79:0a:eb:
                    f7:46:ad:8b:08:df:8a:33:68:26:bc:18:d2:05:09:
                    66:9f:d2:d7:f0:48:10:c8:aa:30:6c:ac:03:14:e5:
                    27:8d:06:b2:21:fc:a6:99:e5:4e:0b:cc:fc:71:36:
                    80:b4:33:6f:73:ad:d2:8b:45:8c:35:d2:f2:7c:c6:
                    90:e9:c8:f4:ed:c5:31:c8:3a:1b:6a:b1:62:8d:b3:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:35:9C:30:CE:AF:9F:4C:32:FD:4B:BC:9C:F8:9D:B8:76:D1:2E
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/De41nDDOr59MMv1LvJz4nbh20S4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:f5:2b:8a:8a:d7:f3:87:a7:f3:dd:ec:42:58:40:fe:e2:6a:
         09:b2:7b:87:5a:ae:67:d4:59:c8:f0:96:e3:82:59:7a:23:a2:
         43:97:8e:86:9a:28:6c:3d:96:04:55:26:e7:1b:6a:fd:fc:eb:
         de:7a:ce:36:d0:ec:7a:5c:9e:8f:41:89:f6:bb:cc:21:86:15:
         76:b5:d1:88:81:a5:dc:42:7d:41:5c:16:3a:28:ae:bb:2b:c8:
         05:5b:b2:9b:17:9f:09:a2:40:77:27:17:41:d5:41:81:07:67:
         d8:45:21:d8:a5:9d:a8:6b:67:fa:be:09:6b:0d:8e:3b:a1:b5:
         c2:3d:d6:c2:f7:3e:c5:69:e9:a0:9a:85:f1:3a:61:02:82:6c:
         2f:66:8e:e9:ee:20:40:f3:46:d6:04:39:78:15:9f:1c:01:ee:
         88:d2:4b:25:3f:70:d2:6d:2b:9b:2b:7a:d5:83:cd:b8:6d:b9:
         0a:67:11:30:62:79:06:68:b8:0d:67:bd:41:af:3c:fa:81:8f:
         11:7e:ed:57:51:6b:80:dd:84:60:a3:60:46:2e:fb:6d:0b:3d:
         c3:ff:c6:95:1c:b2:2b:ab:56:33:3e:2c:e9:fd:0a:a1:ff:69:
         e1:b9:17:7b:da:96:85:a8:f2:9e:51:20:e8:39:80:61:eb:82:
         68:1a:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org