Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lbBOeaceuNVwY3cb_-sdt4EYEKo.roa
File:                     lbBOeaceuNVwY3cb_-sdt4EYEKo.roa (raw, json)
Hash identifier:          c6rYCG/FwQrS3IuNZLiRBif0E+ZXwFcISipErsemY8w=
Subject key identifier:   95:B0:4E:79:A7:1E:B8:D5:70:63:77:1B:FF:EB:1D:B7:81:18:10:AA
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A134507
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lbBOeaceuNVwY3cb_-sdt4EYEKo.roa
Signing time:             Sat 12 Mar 2022 22:12:48 +0000
ROA not before:           Sat 12 Mar 2022 22:12:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        193.37.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169035015 (0xa134507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 12 22:12:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=95b04e79a71eb8d57063771bffeb1db7811810aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:91:6a:5e:97:15:71:28:95:3f:52:7a:ec:
                    ec:d3:1b:3d:cd:4e:15:3d:e3:4f:85:2b:be:9b:e5:
                    7c:fc:fa:4f:c4:d5:f7:81:6f:c4:70:bf:1b:fc:3f:
                    2c:62:89:7d:77:a2:ad:50:46:73:9a:9d:88:2b:53:
                    f9:06:a9:09:70:95:4a:62:fd:83:95:ba:5f:a7:d4:
                    32:49:fc:6d:45:06:59:c4:03:1a:df:a8:a6:58:97:
                    76:b7:ba:e4:78:96:48:62:57:45:2d:25:9d:53:4c:
                    16:6d:a4:cf:25:fe:0a:02:11:eb:73:20:57:8a:aa:
                    3b:00:11:18:fa:7b:f1:2f:47:cc:53:32:a0:b2:dd:
                    02:1b:47:c0:63:cc:ae:86:59:06:e5:65:45:5a:62:
                    c7:e5:cd:00:18:41:91:77:3a:ac:9a:ab:7d:0f:2c:
                    64:62:a0:ad:98:cd:4a:40:ef:89:2e:02:22:fe:51:
                    e9:5e:7c:66:c9:a0:3a:58:41:46:b4:f8:9d:46:54:
                    a4:06:e3:38:7c:be:56:14:3b:68:b6:0e:09:8d:1e:
                    e0:fb:d2:5d:63:f6:13:66:d9:87:f9:14:7c:fd:a1:
                    af:b7:26:6c:cf:83:43:a9:6d:c2:2a:fa:66:6c:6f:
                    ac:a5:17:36:69:5e:07:2e:e2:ca:bb:fe:74:7b:42:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:4E:79:A7:1E:B8:D5:70:63:77:1B:FF:EB:1D:B7:81:18:10:AA
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lbBOeaceuNVwY3cb_-sdt4EYEKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:72:cc:4a:b7:cb:32:76:91:2a:f8:78:a6:f0:1a:cc:be:
         67:cc:aa:20:53:0d:95:54:de:b3:28:55:b0:df:58:4c:5d:d3:
         a5:a0:dd:b5:42:54:94:57:7b:65:1b:05:d8:77:b8:3f:c4:ac:
         a9:0f:a2:9a:b1:66:73:69:2f:e7:27:d5:ec:34:21:c6:29:4b:
         b8:d9:9d:d8:25:10:1b:6c:7c:15:29:ce:3b:84:8f:35:e0:8d:
         7d:49:85:66:88:72:3e:78:e8:a3:69:a6:99:c7:44:e4:f0:06:
         52:4d:29:56:b4:43:47:ac:c1:c6:20:4d:1c:66:35:df:6c:51:
         93:7e:b6:34:b2:f9:71:15:93:c2:a6:7d:9f:f0:47:11:90:2e:
         e1:bd:50:81:c8:b5:35:59:d0:f0:86:b9:2c:08:a4:59:d6:79:
         47:33:b2:12:0c:ee:c1:6f:4c:0a:ed:08:77:c1:f6:cb:79:60:
         d3:77:73:be:88:8b:e5:70:7e:ac:08:91:5b:26:35:d2:d2:91:
         1b:eb:36:6b:15:d7:1e:cb:0c:15:2c:24:31:b6:d3:84:5b:d7:
         0a:5c:b3:1d:19:94:0c:cb:e4:16:89:9f:28:77:94:ac:a6:8f:
         ad:1e:af:27:a5:f9:a9:51:81:39:fc:7f:b4:64:8f:ad:b0:91:
         b3:d6:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org