Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/msPsP_4U2GqIsJvKOPVM1oOYJCY.roa
File:                     msPsP_4U2GqIsJvKOPVM1oOYJCY.roa (raw, json)
Hash identifier:          WJ2O1knhug/9DYXL/mJz5KsdrXrAIi2A+CLH8K7FWp4=
Subject key identifier:   9A:C3:EC:3F:FE:14:D8:6A:88:B0:9B:CA:38:F5:4C:D6:83:98:24:26
Certificate issuer:       /CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Certificate serial:       0185720C3E78904E9FE41AAAC7013BB9A966
Authority key identifier: E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/msPsP_4U2GqIsJvKOPVM1oOYJCY.roa
Signing time:             Mon 02 Jan 2023 10:34:42 +0000
ROA not before:           Mon 02 Jan 2023 10:34:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.253.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:3e:78:90:4e:9f:e4:1a:aa:c7:01:3b:b9:a9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
        Validity
            Not Before: Jan  2 10:34:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ac3ec3ffe14d86a88b09bca38f54cd683982426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:2a:f3:c7:96:80:84:f5:97:82:e8:d2:c6:
                    2a:63:7c:8e:65:ed:f7:63:90:54:b5:8b:64:7a:85:
                    c1:0d:06:41:a7:d5:26:61:bb:b2:22:ec:e7:cc:dc:
                    f6:71:ab:aa:93:fb:18:74:67:f8:3c:fd:b5:ef:ac:
                    24:a2:b8:8e:6c:c0:cd:05:6e:7d:1c:cf:3a:42:75:
                    a7:b4:3f:f4:73:c2:9a:5a:15:85:f8:1e:6a:a5:70:
                    3f:64:39:81:2a:93:22:67:ce:c7:b4:8a:87:7a:89:
                    c8:2f:7d:c9:53:06:25:2c:ef:e7:f9:72:c6:ef:01:
                    3e:36:2b:2c:3e:80:2b:3a:c3:a9:89:99:b0:61:67:
                    90:a0:77:6e:f6:96:de:fc:80:90:e7:8b:49:cf:cb:
                    7d:95:1b:fb:ee:6c:cf:73:83:49:4a:59:98:eb:fa:
                    52:c3:ca:74:ea:6e:79:1b:80:68:50:ab:a5:2e:96:
                    59:47:c3:2e:4c:83:c7:52:d7:c9:15:63:ba:8c:1b:
                    46:bb:3f:26:bd:c1:dd:53:a8:1e:9f:c2:57:9a:0f:
                    9b:e1:44:c9:de:32:eb:9b:75:1a:e2:2b:38:e0:c9:
                    91:3c:02:e7:90:73:d8:57:6c:66:70:a0:10:64:24:
                    67:d4:64:7c:0e:56:1c:57:12:8f:40:34:89:c2:7e:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:EC:3F:FE:14:D8:6A:88:B0:9B:CA:38:F5:4C:D6:83:98:24:26
            X509v3 Authority Key Identifier:
                keyid:E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/msPsP_4U2GqIsJvKOPVM1oOYJCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:9b:05:0f:bf:11:3f:96:0f:5d:a8:37:c5:04:7c:1b:a4:
         d8:37:0a:34:15:21:78:46:c2:29:91:43:14:a6:2b:51:8e:ec:
         8a:6a:27:85:46:fa:67:e7:b4:76:f0:85:9c:93:91:cb:4b:32:
         49:91:48:c2:47:cb:b2:99:08:b9:f0:f6:2f:77:8e:22:8d:2e:
         1e:72:4d:13:8c:6a:2c:68:99:4e:91:fc:e0:55:f4:52:0e:d3:
         b9:d2:c6:d7:a4:80:9b:a2:08:ee:57:bc:7e:db:f5:8f:53:ec:
         61:8d:44:a9:56:74:9c:ce:98:fe:ae:a0:36:60:03:db:c0:f0:
         5c:6a:1f:91:ce:a1:ed:19:a4:6e:e3:f0:76:36:b6:a5:58:5c:
         34:98:a4:0c:57:8a:a2:bf:51:29:3f:a8:28:4b:8d:16:bf:ee:
         44:75:48:ff:17:a4:cb:10:aa:6e:35:df:4e:da:24:b3:13:a8:
         28:84:62:a5:b0:65:a0:92:33:a9:24:93:34:95:8f:98:6e:e5:
         3a:9f:75:95:29:a3:d6:0b:19:33:f5:63:54:1a:53:55:13:45:
         20:86:f2:0b:6d:dc:3e:5c:28:15:f8:d3:0c:db:f0:8f:13:e3:
         d0:65:68:eb:10:55:b7:a8:18:d7:d1:55:df:7b:57:89:2c:f7:
         4e:c6:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org