Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/UK5PZ7flIksY-6tEbQ-ptF0qzVA.roa
File:                     UK5PZ7flIksY-6tEbQ-ptF0qzVA.roa (raw, json)
Hash identifier:          xKZvNpHWEJ4oBApH1yV7qFDzgdOVQzuaD4LTPkCVsH8=
Subject key identifier:   50:AE:4F:67:B7:E5:22:4B:18:FB:AB:44:6D:0F:A9:B4:5D:2A:CD:50
Certificate issuer:       /CN=c01e01a400975975ce86b15f59a652a80dc3509c
Certificate serial:       01856B4A34A9E83A1E52ADFC738543BFCECD
Authority key identifier: C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/UK5PZ7flIksY-6tEbQ-ptF0qzVA.roa
Signing time:             Sun 01 Jan 2023 03:05:03 +0000
ROA not before:           Sun 01 Jan 2023 03:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39082
IP address blocks:        195.60.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:4a:34:a9:e8:3a:1e:52:ad:fc:73:85:43:bf:ce:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01e01a400975975ce86b15f59a652a80dc3509c
        Validity
            Not Before: Jan  1 03:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50ae4f67b7e5224b18fbab446d0fa9b45d2acd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:a0:91:a0:4f:73:38:c5:5a:0b:64:58:ce:
                    63:09:99:af:c1:65:ec:5f:2c:e1:cf:32:80:90:ac:
                    ef:e0:9e:1e:11:0f:e6:27:7d:b5:fc:3e:ce:db:70:
                    19:ea:b1:6f:94:7a:f0:c9:78:d0:b4:b5:e6:29:ea:
                    aa:67:8c:44:d1:87:39:35:9b:a2:ea:87:79:33:56:
                    60:0a:b2:25:16:a6:32:ef:77:b0:15:40:98:6e:fe:
                    bf:4e:4b:33:53:cf:6f:78:71:c8:2f:3b:80:49:71:
                    59:aa:c4:c6:df:65:54:78:8d:f0:59:7d:db:49:b8:
                    73:f6:58:8c:03:16:d2:ef:1b:ee:e6:35:10:4b:5a:
                    5e:ae:ad:8c:79:34:5b:c6:d7:15:74:18:0e:c2:a2:
                    ad:57:9d:18:5d:54:4c:54:ba:6a:7a:41:d8:28:ca:
                    0e:33:6d:47:ed:0b:4b:bf:b7:c8:35:45:f9:4a:52:
                    84:80:a2:2c:38:d9:ab:10:4b:8c:5a:a8:21:58:5c:
                    86:d9:58:6a:66:04:75:30:83:ef:43:4b:ab:1c:02:
                    0d:58:28:10:78:ee:c4:89:78:7b:21:78:90:7a:51:
                    7c:c2:cd:88:78:79:6b:c5:19:80:4a:84:d6:57:16:
                    93:f6:38:ff:b6:7f:c1:94:73:0f:ee:3e:55:d0:fa:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:4F:67:B7:E5:22:4B:18:FB:AB:44:6D:0F:A9:B4:5D:2A:CD:50
            X509v3 Authority Key Identifier:
                keyid:C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/UK5PZ7flIksY-6tEbQ-ptF0qzVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/wB4BpACXWXXOhrFfWaZSqA3DUJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:e8:e8:11:b3:20:c6:e6:1f:bb:af:90:c1:c4:2f:8e:4b:1d:
         05:f2:93:6c:e8:e8:f9:74:3d:75:29:b2:52:fa:9f:e7:38:3b:
         26:86:0b:87:d6:d4:47:b1:a8:60:4c:87:1b:19:ff:8c:3a:cf:
         df:47:5e:63:6d:83:9b:82:fc:ea:6c:d8:79:c0:a7:4b:31:32:
         b3:cc:9b:c6:fd:8a:a1:c8:7e:fa:86:53:f5:1a:c0:c8:f2:7e:
         44:0d:c4:e9:84:a4:76:6e:f8:98:48:ef:7a:24:c0:87:51:a7:
         6a:12:52:a6:cb:8f:91:1a:90:f7:70:fb:ec:9e:29:85:52:5f:
         62:de:d0:9f:53:53:fb:05:d1:a6:92:5d:7b:8a:9d:d1:3e:47:
         ff:38:8e:0f:f8:c7:4f:bb:80:d0:86:2f:1d:93:15:04:7b:28:
         b6:f9:1f:54:c2:d0:2c:91:8a:3b:42:6b:7b:05:46:e7:4b:e7:
         a3:2b:15:c2:8a:02:a8:de:51:b4:4f:cb:ad:d5:5f:b5:15:61:
         84:1e:61:98:96:0f:ef:31:34:2a:8b:1f:a6:41:1f:8a:40:45:
         91:03:45:97:22:ec:53:e9:62:c7:41:d3:89:50:26:a9:b9:11:
         40:52:36:a9:19:f6:44:3f:80:99:70:a5:56:0b:fe:8f:9e:c8:
         17:28:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org