Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/stH1rtxWk08oFQSR5od5mitXms4.roa
File:                     stH1rtxWk08oFQSR5od5mitXms4.roa (raw, json)
Hash identifier:          EJujyjE826OITTi0BR4FaVjOCTyd1DplEzbLM8wH+IU=
Subject key identifier:   B2:D1:F5:AE:DC:56:93:4F:28:15:04:91:E6:87:79:9A:2B:57:9A:CE
Certificate issuer:       /CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
Certificate serial:       0188303D76995688349FAA8C5FD209B62998
Authority key identifier: A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/stH1rtxWk08oFQSR5od5mitXms4.roa
Signing time:             Thu 18 May 2023 19:01:54 +0000
ROA not before:           Thu 18 May 2023 19:01:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202656
IP address blocks:        83.138.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:30:3d:76:99:56:88:34:9f:aa:8c:5f:d2:09:b6:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
        Validity
            Not Before: May 18 19:01:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2d1f5aedc56934f28150491e687799a2b579ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:85:9f:cc:f1:f3:7d:70:e4:48:42:e2:95:
                    e6:e3:ce:c7:4e:a1:9a:9f:dc:55:70:c1:3f:36:15:
                    91:22:ee:5e:4e:c2:3c:fe:74:c4:cc:ba:ef:df:ba:
                    c7:20:6c:ea:1b:fb:3b:b3:d8:63:9c:f8:fc:d7:13:
                    94:2a:56:58:9f:2d:5a:69:34:04:19:29:03:18:13:
                    c9:1a:17:a5:c1:2b:7d:d8:47:36:46:13:4f:73:90:
                    85:73:a1:49:81:7c:d1:08:75:14:58:ce:92:ce:08:
                    7f:0c:dc:ad:53:43:65:2b:78:24:5d:74:ef:1f:ea:
                    51:52:00:63:b6:7b:7c:38:d1:e7:8a:a8:8e:36:83:
                    4f:3b:86:e3:83:d3:36:93:c3:ab:05:47:89:16:7c:
                    80:8f:9e:23:b0:44:57:e1:96:63:9d:ac:6c:30:70:
                    b7:02:2e:45:79:c0:28:e2:bc:57:9d:ae:f5:5a:a2:
                    23:9c:74:65:80:ae:14:5d:06:6f:aa:1a:f7:d7:f4:
                    c2:60:be:a7:a0:cf:81:ce:e9:97:3a:f5:cb:26:74:
                    2b:68:7d:30:88:cf:5e:18:9a:cd:b7:db:83:0d:b5:
                    fb:79:18:68:00:75:60:3f:da:8d:29:2c:69:e5:f7:
                    17:d8:12:db:df:fc:7c:50:66:d9:2a:4c:43:80:ff:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:F5:AE:DC:56:93:4F:28:15:04:91:E6:87:79:9A:2B:57:9A:CE
            X509v3 Authority Key Identifier:
                keyid:A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/stH1rtxWk08oFQSR5od5mitXms4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:b0:d7:13:05:61:ac:1b:c5:b7:ea:d9:82:99:c0:f9:fd:
         5a:fd:ac:dd:64:fe:bd:38:3b:e1:d9:ca:7e:57:8d:6b:86:b6:
         a9:7b:85:17:34:ab:93:7b:ff:e8:37:79:bd:df:b2:c3:65:2a:
         05:e7:b6:2c:2d:b3:3d:a6:a2:be:5c:82:36:5f:b5:80:1b:47:
         c8:af:4b:62:c1:ed:6a:7d:81:59:38:6a:78:0b:99:b5:f2:26:
         cd:04:85:ac:05:f4:93:a6:5e:b3:ca:04:84:b3:f5:f1:71:87:
         a3:54:35:ba:f9:e4:7d:05:9f:5e:50:f3:b1:f9:81:d4:e8:b0:
         e4:fc:03:67:99:1d:f0:10:bc:4d:67:a0:e2:a1:f8:31:9b:63:
         1b:0d:c6:40:0e:4f:d1:56:a4:70:0f:ac:69:02:12:02:e3:e0:
         54:65:f9:95:29:4c:16:ff:20:4d:d5:4b:ca:da:9f:b9:3c:0e:
         f9:25:76:20:15:e3:65:b8:15:34:3e:da:e2:f3:9c:5e:4e:2b:
         c9:f8:29:4c:e5:e4:29:f7:f7:96:c2:95:4c:4a:e2:c8:26:84:
         94:7f:b2:6b:09:b0:17:d0:2c:6b:a3:3b:eb:f6:fb:bd:9a:a7:
         0e:52:ed:6d:ff:51:fd:ec:b7:65:d8:7e:98:3f:37:15:18:89:
         df:1f:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:58 2024 by rpki-client on console-ams.rpki-client.org