Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/ch7h5Y_F0mpbLWd5Tt8DHnbWHz8.roa
File:                     ch7h5Y_F0mpbLWd5Tt8DHnbWHz8.roa (raw, json)
Hash identifier:          gjbbtP+b/0xXEDydjCAg1lGnUZUKc5xzPYOznfqh/KA=
Subject key identifier:   72:1E:E1:E5:8F:C5:D2:6A:5B:2D:67:79:4E:DF:03:1E:76:D6:1F:3F
Certificate issuer:       /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial:       018A87FFE9277EFB0A96C8B7C738738832FA
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/ch7h5Y_F0mpbLWd5Tt8DHnbWHz8.roa
Signing time:             Tue 12 Sep 2023 06:06:50 +0000
ROA not before:           Tue 12 Sep 2023 06:06:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22653
IP address blocks:        188.93.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:ff:e9:27:7e:fb:0a:96:c8:b7:c7:38:73:88:32:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
        Validity
            Not Before: Sep 12 06:06:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=721ee1e58fc5d26a5b2d67794edf031e76d61f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:80:ad:89:3e:0d:30:ac:d8:13:d0:cf:dd:
                    08:e4:0b:14:49:2c:e9:9b:d8:47:38:e7:1c:78:f4:
                    29:e1:56:65:a9:38:60:65:4f:3f:54:7a:d3:6d:14:
                    4c:7c:00:2c:16:5d:7f:0e:71:ab:17:4b:2a:9f:03:
                    0a:bf:47:97:39:e1:7c:c0:fb:4f:60:c0:d6:ef:b1:
                    37:b5:45:c6:28:39:c5:5c:4d:1d:1d:71:65:31:99:
                    25:58:da:83:56:33:e9:b6:64:ac:fb:c8:44:c5:58:
                    ca:a0:68:40:d5:18:15:56:02:2e:b0:b8:7c:81:db:
                    db:d4:d3:3e:5d:11:a2:6e:dc:05:b5:f0:e4:97:ce:
                    97:6b:73:36:69:c8:37:39:6a:d4:9e:3d:5a:48:d0:
                    65:9b:d4:cd:72:60:6d:0c:58:53:4c:90:fd:01:bd:
                    7d:d6:b2:9d:c1:10:89:1d:7c:2c:bd:5c:38:d5:2b:
                    ac:de:9e:8e:35:f5:1d:70:46:6a:ca:e0:c1:da:0d:
                    57:57:6a:b3:22:02:a0:db:69:a2:67:3d:b8:5a:3f:
                    c4:cf:c0:3b:7d:e9:da:02:39:72:3a:60:c2:ee:af:
                    63:11:45:52:fc:33:0b:12:10:c0:a9:04:77:a3:8a:
                    8d:8b:74:e2:33:50:45:df:de:ca:e3:22:94:23:af:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:E1:E5:8F:C5:D2:6A:5B:2D:67:79:4E:DF:03:1E:76:D6:1F:3F
            X509v3 Authority Key Identifier:
                keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/ch7h5Y_F0mpbLWd5Tt8DHnbWHz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:d9:17:c6:07:fb:b8:bf:d3:c9:29:07:24:5e:67:88:b3:
         14:35:86:f0:93:11:1c:13:b3:0b:bf:4e:9f:81:7c:8d:ac:bb:
         39:0c:f8:d1:0c:ba:4f:18:6f:c2:73:e4:a8:ee:4a:bd:5e:1f:
         e4:f6:e1:a6:a6:ab:f6:b5:c7:70:2f:02:7b:ae:4b:80:c1:81:
         cf:68:85:12:4e:ad:b7:fa:b8:25:a4:57:29:8a:14:5d:8f:64:
         f0:1c:e4:9e:a9:32:85:53:92:fd:ac:22:9f:05:cf:1a:da:68:
         fb:69:43:ed:2d:46:3f:33:13:05:54:0a:4f:70:22:e5:4f:26:
         1c:60:64:46:a8:b8:e1:a6:de:99:a2:ec:35:71:b7:15:68:97:
         21:2c:5f:f8:4c:aa:e9:80:fd:e7:ee:19:e3:a7:46:55:92:07:
         b8:1f:0b:9e:bc:58:00:e9:7d:b0:41:b2:fd:d7:d0:3c:22:c1:
         02:e0:94:eb:9f:d5:16:fb:24:83:c2:15:30:68:3d:c5:c5:61:
         9a:38:ac:0c:d9:d2:b8:92:11:58:8c:df:05:d8:c3:4c:3b:13:
         cd:ea:3d:9b:f3:25:e5:3a:55:1a:e7:1c:f7:41:3b:d5:2a:73:
         2f:c6:5b:e8:af:3e:92:8a:29:b0:25:93:42:d7:fa:de:39:f6:
         43:d5:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:58 2024 by rpki-client on console-ams.rpki-client.org