Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/CgJAt7ruZg3wrWrOXI7Wxh6ti8Q.roa
File:                     CgJAt7ruZg3wrWrOXI7Wxh6ti8Q.roa (raw, json)
Hash identifier:          qfMAJ3B08DbK6uyUzMyPc4r9V776OSy0zrFypE4jXu0=
Subject key identifier:   0A:02:40:B7:BA:EE:66:0D:F0:AD:6A:CE:5C:8E:D6:C6:1E:AD:8B:C4
Certificate issuer:       /CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Certificate serial:       03A2F72D
Authority key identifier: D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/CgJAt7ruZg3wrWrOXI7Wxh6ti8Q.roa
Signing time:             Mon 04 Apr 2022 10:10:52 +0000
ROA not before:           Mon 04 Apr 2022 10:10:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213301
IP address blocks:        93.180.132.0/24 maxlen: 24
                          93.180.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61011757 (0x3a2f72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
        Validity
            Not Before: Apr  4 10:10:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a0240b7baee660df0ad6ace5c8ed6c61ead8bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:28:f6:64:bc:ee:6e:51:f8:ae:78:ff:b7:
                    de:c9:98:88:ad:ce:d1:85:4e:5f:05:3c:5f:25:a9:
                    93:ff:65:59:72:3d:34:29:a6:f9:48:39:6d:63:39:
                    2b:64:4f:e5:15:38:f4:3d:ee:43:c6:4d:73:f3:d6:
                    db:ff:c8:37:df:2f:98:05:0a:87:d3:cb:c8:ab:6c:
                    02:b0:1c:75:60:10:f7:38:05:3e:55:4f:cd:bb:28:
                    e1:cc:54:d4:7e:48:94:25:80:35:66:21:6a:fb:7d:
                    94:12:71:6b:9c:b4:c2:f6:32:26:d8:8b:c8:2f:a5:
                    69:ce:2a:cc:59:28:fb:1a:8a:46:e5:66:97:86:5b:
                    66:fa:e4:54:60:bf:cb:b5:de:9f:b8:8b:12:a0:9a:
                    dd:79:34:a5:cc:3d:0a:30:2c:de:f9:6a:2d:57:39:
                    07:f2:d6:7d:87:d2:2a:d7:f2:88:b9:df:cc:dd:94:
                    51:da:0d:4f:98:6d:48:3f:e3:09:28:03:67:c5:d1:
                    68:a1:73:a8:72:82:bc:1d:6e:50:b6:92:d7:cf:63:
                    dd:59:5b:ef:7b:e4:0e:55:54:27:91:bc:d6:f0:ed:
                    ea:4f:e3:a6:ed:23:2c:a8:b9:2d:48:4f:3e:89:99:
                    43:f7:91:22:81:93:f1:b1:40:14:19:47:1e:4f:8d:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:40:B7:BA:EE:66:0D:F0:AD:6A:CE:5C:8E:D6:C6:1E:AD:8B:C4
            X509v3 Authority Key Identifier:
                keyid:D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/CgJAt7ruZg3wrWrOXI7Wxh6ti8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:ac:54:f6:40:0f:5a:ac:a4:3e:68:fd:c6:5d:62:75:cd:
         b7:ff:e2:91:28:20:22:2a:16:46:b5:51:2f:2c:40:c4:db:07:
         b7:39:83:e0:b7:55:14:15:14:8a:ed:ea:19:2e:c1:f9:cf:0a:
         c6:a5:ff:03:32:19:74:d2:73:fe:9d:26:a4:1a:88:17:7f:05:
         38:28:3d:92:fa:af:7a:37:1f:d4:f1:02:10:0d:4e:87:05:5b:
         66:ec:21:2b:0b:53:ed:14:0a:cd:c5:7a:fe:2b:b0:87:48:73:
         40:7c:9b:67:cc:39:60:1f:d2:db:e6:9c:b0:2c:fb:5a:a4:47:
         c2:75:b5:0b:37:a3:f2:80:65:a9:8a:f7:71:82:25:22:7f:72:
         f6:87:f3:43:32:83:49:42:c2:50:4b:75:9b:4d:ae:38:75:da:
         2c:8c:9c:65:e8:92:d8:1e:52:a1:83:cd:87:83:80:b5:88:10:
         58:e0:6c:ec:d2:dc:e3:95:d9:2b:56:ec:0c:ec:96:f5:7a:36:
         88:1e:32:93:a1:63:13:61:95:ba:36:33:9d:ca:3b:43:21:f0:
         1d:a3:0e:89:10:86:d5:e6:96:cb:d6:94:80:3e:81:f3:cf:50:
         7c:37:06:f5:aa:a7:9d:e3:d3:d8:3f:76:16:8e:52:03:d7:1a:
         2b:cc:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:27 2024 by rpki-client on console-ams.rpki-client.org