Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/C50qQEZFrBCUqEL2cBKQfepwmrk.roa
File:                     C50qQEZFrBCUqEL2cBKQfepwmrk.roa (raw, json)
Hash identifier:          DPcnvMvMt8MxCba+l/mn9WU2+uNrQdW4TUfl5aPzQuM=
Subject key identifier:   0B:9D:2A:40:46:45:AC:10:94:A8:42:F6:70:12:90:7D:EA:70:9A:B9
Certificate issuer:       /CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
Certificate serial:       017F25
Authority key identifier: 9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/C50qQEZFrBCUqEL2cBKQfepwmrk.roa
Signing time:             Fri 25 Mar 2022 07:39:41 +0000
ROA not before:           Fri 25 Mar 2022 07:39:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6939
IP address blocks:        195.8.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98085 (0x17f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
        Validity
            Not Before: Mar 25 07:39:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b9d2a404645ac1094a842f67012907dea709ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:78:d0:a5:18:fa:90:d3:e4:57:9c:fc:62:
                    09:81:66:80:ac:54:4a:93:f5:e9:61:5b:75:88:5f:
                    31:b1:3e:0f:1f:6e:0b:d6:c9:b4:eb:ea:95:96:68:
                    09:ed:10:9c:fd:ce:ae:fe:d3:02:e1:58:3c:81:14:
                    9f:2c:0d:94:73:67:fe:5d:58:93:50:6d:fb:29:29:
                    06:a5:7f:2d:98:9f:d8:fc:f7:c7:92:fc:82:10:90:
                    06:e7:f1:a4:13:e2:1e:30:ae:d7:25:97:fb:b2:f3:
                    1a:f6:6f:0a:af:5e:f5:9c:61:41:8c:b1:b6:23:13:
                    21:c5:38:14:80:6a:34:9f:82:70:50:49:f3:cb:15:
                    42:36:f5:8c:54:f6:3c:c3:ee:e3:71:b6:22:6b:93:
                    bb:6d:00:94:f9:7f:be:33:42:d7:f3:1d:f6:dc:fb:
                    09:b8:ea:65:db:35:db:35:6f:08:ba:5c:85:07:bc:
                    ca:5e:68:d5:2c:cb:31:c3:72:de:ff:36:39:5f:94:
                    0b:5a:00:88:07:21:76:5d:9e:6a:fc:1a:09:31:ad:
                    00:75:c0:17:5d:1b:d8:bc:d4:45:4c:3c:71:bd:bb:
                    82:36:10:c4:d4:38:02:63:bc:e9:8e:c0:51:74:7f:
                    48:ca:bb:45:5b:1c:cc:6f:b9:d7:f5:2f:0b:24:be:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9D:2A:40:46:45:AC:10:94:A8:42:F6:70:12:90:7D:EA:70:9A:B9
            X509v3 Authority Key Identifier:
                keyid:9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/C50qQEZFrBCUqEL2cBKQfepwmrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/nGjViy1lj_IP3QpEJywdtvPPf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:72:9f:49:41:4b:c4:97:c0:4c:87:cd:cd:88:fd:a6:0a:
         97:1f:1f:c9:36:89:fa:3c:c0:d0:1a:40:6b:42:42:03:83:73:
         3c:b8:ca:3e:5e:16:8d:14:5e:8c:95:4a:13:7e:e3:20:ed:bf:
         a1:eb:ea:c2:83:f3:09:b0:7f:f5:3a:cd:b5:19:76:d7:7b:ec:
         8f:53:62:5f:ea:87:ea:92:2b:6c:d6:42:fe:59:9b:ce:a3:64:
         c2:5b:b2:21:7b:41:02:16:2d:be:93:9a:5d:11:f8:35:a4:78:
         de:0a:a9:69:3c:b6:f9:1f:01:06:70:14:bf:04:b9:75:31:77:
         c9:53:0a:1b:9d:0d:c8:05:23:07:38:29:0d:82:07:e7:19:13:
         9e:17:1b:18:28:00:72:1b:ea:4c:58:1b:c1:8c:f7:c9:f7:b1:
         7c:5a:42:e5:fb:93:35:ea:66:f3:07:eb:4b:da:25:1c:8f:41:
         4d:ec:08:fa:5e:f2:cb:cf:a9:a5:6d:9a:7c:db:05:cb:93:28:
         ad:8e:8a:40:aa:d7:bd:07:ff:80:95:87:a5:4b:ea:9d:53:a8:
         96:0b:f7:49:7b:59:7b:e0:bb:7b:e2:83:73:a7:39:fa:63:35:
         3f:3f:cd:8e:b0:c8:8f:8a:8f:49:c8:e8:39:7b:6b:52:14:dd:
         02:e5:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:39 2023 by rpki-client on console-ams.rpki-client.org