Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/R_5JSd8buF27xR-d_Y__YDWd2HQ.roa
File:                     R_5JSd8buF27xR-d_Y__YDWd2HQ.roa (raw, json)
Hash identifier:          pl/KxA0LlNVTmsSTXXlcbokIzIWoDA8uTv5w0x0Dvuo=
Subject key identifier:   47:FE:49:49:DF:1B:B8:5D:BB:C5:1F:9D:FD:8F:FF:60:35:9D:D8:74
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018458F030D619E96AFEE14E9722BF0C41E0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/R_5JSd8buF27xR-d_Y__YDWd2HQ.roa
Signing time:             Tue 08 Nov 2022 20:30:46 +0000
ROA not before:           Tue 08 Nov 2022 20:30:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.38.53.0/24 maxlen: 24
                          185.172.172.0/22 maxlen: 22
                          193.37.239.0/24 maxlen: 24
                          45.137.96.0/24 maxlen: 24
                          85.209.221.0/24 maxlen: 24
                          85.209.222.0/24 maxlen: 24
                          5.181.176.0/23 maxlen: 24
                          5.181.178.0/23 maxlen: 24
                          45.158.56.0/22 maxlen: 24
                          45.158.58.0/24 maxlen: 24
                          2.56.251.0/24 maxlen: 24
                          2.56.248.0/22 maxlen: 24
                          2.59.56.0/23 maxlen: 24
                          2.59.58.0/23 maxlen: 24
                          193.39.9.0/24 maxlen: 24
                          193.39.10.0/24 maxlen: 24
                          171.22.76.0/22 maxlen: 24
                          171.22.76.0/23 maxlen: 24
                          171.22.78.0/23 maxlen: 24
                          45.87.172.0/22 maxlen: 24
                          45.12.81.0/24 maxlen: 24
                          45.12.82.0/24 maxlen: 24
                          45.12.80.0/24 maxlen: 24
                          45.91.136.0/22 maxlen: 24
                          45.91.136.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:58:f0:30:d6:19:e9:6a:fe:e1:4e:97:22:bf:0c:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Nov  8 20:30:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47fe4949df1bb85dbbc51f9dfd8fff60359dd874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:7d:80:41:ce:10:36:2f:89:02:d8:e9:f8:
                    69:bc:60:55:06:8e:16:2e:e7:ba:9d:4a:d8:f9:de:
                    07:81:05:37:c7:e6:03:4a:ea:34:20:16:79:6b:96:
                    a8:af:2e:d1:c5:e5:97:7e:5a:38:9b:f3:b4:7e:34:
                    8c:9e:65:6c:df:5b:91:92:32:ca:6c:15:a3:45:68:
                    39:c6:8c:fa:1d:a9:bd:d5:d8:67:c1:23:61:7d:b9:
                    3f:f1:e2:ea:bf:7a:d3:9b:2e:81:d4:02:a5:2a:02:
                    d0:5a:81:ff:91:b3:91:31:35:64:9a:4d:43:28:9c:
                    77:11:a7:88:22:bd:f2:79:76:7b:a6:3d:3c:21:6d:
                    ba:54:5a:7c:91:58:9e:29:9b:bc:72:ab:e3:bf:1f:
                    1b:91:04:b9:80:1d:07:d7:93:00:3e:12:4d:25:a2:
                    19:77:fb:13:dd:56:dc:c5:18:fd:05:13:a2:26:06:
                    18:86:a4:0c:40:60:43:70:50:b4:7c:31:18:9a:fe:
                    f0:31:5c:de:e2:1e:65:28:b6:89:a6:66:ea:b1:7a:
                    fb:c7:ef:45:ac:87:88:85:2d:68:8d:a3:ba:ed:15:
                    43:81:9a:42:97:cf:d0:2b:3c:82:d5:2a:9d:61:6e:
                    25:74:36:ac:d5:04:9e:86:7e:62:99:b6:90:11:59:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:49:49:DF:1B:B8:5D:BB:C5:1F:9D:FD:8F:FF:60:35:9D:D8:74
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/R_5JSd8buF27xR-d_Y__YDWd2HQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.248.0/22
                  2.59.56.0/22
                  5.181.176.0/22
                  45.12.80.0-45.12.82.255
                  45.87.172.0/22
                  45.91.136.0/22
                  45.137.96.0/24
                  45.158.56.0/22
                  85.209.221.0-85.209.222.255
                  171.22.76.0/22
                  185.172.172.0/22
                  193.37.239.0/24
                  193.38.53.0/24
                  193.39.9.0-193.39.10.255

    Signature Algorithm: sha256WithRSAEncryption
         c5:fc:e4:d1:15:0a:10:50:0b:d0:d7:8f:a8:8c:ec:df:35:2f:
         cf:a8:34:f5:89:0e:af:de:f4:23:1d:a2:e7:09:90:ee:dd:eb:
         3d:8d:8c:0a:03:65:c3:6c:fa:ec:69:81:97:49:52:29:af:e6:
         19:10:3d:68:4a:5f:52:fe:c3:2e:3b:f1:b2:6a:8a:e1:7c:57:
         0b:64:ea:dc:e1:5a:a9:f8:96:1c:42:43:21:6f:82:3e:2c:04:
         75:6c:c1:c2:79:c9:7d:d5:a3:9a:bb:ba:51:f2:95:f3:d7:9a:
         26:9a:ed:26:51:2d:5e:bb:aa:fe:f6:f3:b8:5e:28:6e:cf:ac:
         d3:b2:18:da:f1:58:2a:74:db:68:f7:86:81:1f:5d:51:31:fb:
         69:46:65:8a:78:f6:7e:26:81:c2:84:19:2f:29:26:19:3e:08:
         ef:01:67:0b:1e:c6:60:32:b2:b7:e4:26:84:21:be:b8:4c:36:
         82:59:e9:b0:7d:50:f4:ec:6d:c7:18:f2:d3:3c:ae:6d:b1:50:
         f5:e1:63:79:8c:39:d4:d8:34:18:0e:93:f1:86:0e:8f:37:38:
         36:19:e3:26:b0:38:9a:c0:52:08:24:e6:a4:17:c1:99:d9:7c:
         c8:b1:bc:d4:cf:ae:70:ff:d8:2c:1e:92:69:9e:48:94:7c:af:
         3d:3a:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org