Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/C2HJXjbYFOF3iWYRHsyrLS4OErw.roa
File:                     C2HJXjbYFOF3iWYRHsyrLS4OErw.roa (raw, json)
Hash identifier:          zkea8K2VHESmrYpIuPTF5kkyFvKncNzIKsI/FTiCm1U=
Subject key identifier:   0B:61:C9:5E:36:D8:14:E1:77:89:66:11:1E:CC:AB:2D:2E:0E:12:BC
Certificate issuer:       /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial:       010505E9
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/C2HJXjbYFOF3iWYRHsyrLS4OErw.roa
Signing time:             Sat 01 Jan 2022 13:05:33 +0000
ROA not before:           Sat 01 Jan 2022 13:05:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        188.93.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17106409 (0x10505e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
        Validity
            Not Before: Jan  1 13:05:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b61c95e36d814e1778966111eccab2d2e0e12bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:f4:64:92:05:a0:92:5f:9c:62:63:02:16:
                    65:8b:99:a8:a3:bc:49:e2:02:14:ef:99:7e:c4:47:
                    a5:34:b8:28:63:67:ba:8a:6f:28:fd:13:c2:75:be:
                    20:60:be:30:0e:44:1c:f3:bb:d6:ff:28:06:b0:67:
                    9e:e8:21:70:e1:b4:2a:e0:25:01:69:ca:b0:bd:bb:
                    fb:f4:39:f3:65:85:ed:c1:32:11:a0:87:df:95:66:
                    2a:a9:ca:25:a4:7c:55:f9:59:59:ef:cc:14:8e:2f:
                    02:65:bc:38:35:4c:39:c2:5f:56:3a:87:5b:59:aa:
                    5f:dc:0d:fb:13:71:2c:0a:0d:55:19:68:0a:21:e5:
                    b2:97:6f:18:74:1b:4b:08:be:4e:e7:fe:23:5c:15:
                    65:33:ce:fa:a1:d1:64:44:e1:6d:c2:65:e9:fa:8c:
                    29:c4:fa:f0:8e:57:72:f2:aa:28:e1:41:f1:bc:ab:
                    e0:e9:f6:17:46:56:ae:41:cb:64:f7:97:7e:c9:1a:
                    aa:b9:44:5a:8c:33:75:a6:bd:a6:41:50:d5:d2:ee:
                    52:0a:5a:8a:1b:6e:3f:bb:52:59:b1:bc:aa:77:95:
                    37:6b:b5:97:17:4e:71:03:70:48:2e:fc:33:d6:66:
                    e0:f1:23:4a:1e:91:99:ef:96:45:c7:40:d7:ce:85:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:C9:5E:36:D8:14:E1:77:89:66:11:1E:CC:AB:2D:2E:0E:12:BC
            X509v3 Authority Key Identifier:
                keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/C2HJXjbYFOF3iWYRHsyrLS4OErw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:b1:cd:5f:ad:bf:b7:a9:3f:e9:42:d1:4b:73:e6:b9:14:
         61:65:3e:3e:86:94:1f:35:f2:c6:1c:8b:74:8e:8c:23:70:09:
         14:26:18:78:48:b7:bc:6e:56:a9:b1:c9:3d:01:76:27:60:3b:
         82:89:6d:a0:ef:1a:9f:59:ff:7e:a8:f5:2f:a7:f3:5c:25:bb:
         c4:e1:27:ef:ba:8c:4d:d7:95:9e:a8:12:ac:7a:f1:a2:24:23:
         f4:40:d6:23:4a:de:b9:3b:b0:ad:f4:c3:21:44:d2:0c:d9:e0:
         84:09:36:4e:a3:35:45:f5:e2:e8:c5:c0:9b:63:16:d5:9d:9d:
         2a:e6:b4:5a:34:63:e9:6d:51:d6:6e:57:1e:f0:ed:05:d7:aa:
         5c:f3:46:09:8e:00:4d:42:78:ab:24:4d:7b:bb:de:ed:f9:39:
         7a:92:ff:f3:fe:21:3f:69:2f:d9:2e:f6:e8:3d:ce:58:44:5e:
         9c:e6:2f:f1:e6:0c:8d:c2:49:10:63:0b:d7:76:fd:26:9e:ea:
         ee:c6:be:bb:10:e5:d3:11:53:4a:ac:87:f4:d0:60:19:c4:7e:
         39:13:69:dd:34:2b:af:81:c2:6d:5c:7a:81:b3:29:66:ee:63:
         73:cd:14:bf:3e:c8:41:20:d3:f2:38:7a:31:e7:30:5d:8e:4f:
         7a:5c:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:42 2024 by rpki-client on console-fra.rpki-client.org