Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/WbvGqYTlbTHEmiBR0wcu8WhTENA.roa
File:                     WbvGqYTlbTHEmiBR0wcu8WhTENA.roa (raw, json)
Hash identifier:          zuzFThmhV4ux3zOhroV0GhNI94uWgUArzv6JebIfTR8=
Subject key identifier:   59:BB:C6:A9:84:E5:6D:31:C4:9A:20:51:D3:07:2E:F1:68:53:10:D0
Certificate issuer:       /CN=2eeb616915d6e4ad39434e85da0e972b0e681d75
Certificate serial:       01882086B16CD404DBCF14FBB4BFCC8AB748
Authority key identifier: 2E:EB:61:69:15:D6:E4:AD:39:43:4E:85:DA:0E:97:2B:0E:68:1D:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuthaRXW5K05Q06F2g6XKw5oHXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/WbvGqYTlbTHEmiBR0wcu8WhTENA.roa
Signing time:             Mon 15 May 2023 17:47:58 +0000
ROA not before:           Mon 15 May 2023 17:47:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        5.57.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b1:6c:d4:04:db:cf:14:fb:b4:bf:cc:8a:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeb616915d6e4ad39434e85da0e972b0e681d75
        Validity
            Not Before: May 15 17:47:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59bbc6a984e56d31c49a2051d3072ef1685310d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:69:c4:dd:20:58:d0:71:ba:65:61:a6:91:
                    ec:2a:b7:aa:cf:13:4a:40:40:b2:2a:9e:cf:08:62:
                    1e:75:60:25:7a:f1:f4:6f:6f:ed:64:b7:7b:f7:7c:
                    88:b8:be:4f:0a:a9:9d:fa:55:c5:88:96:e1:88:ab:
                    f1:25:8d:0a:13:41:89:28:6e:4b:99:c9:7e:6e:98:
                    42:50:40:b7:16:0b:f8:62:a1:b0:3d:f1:35:88:71:
                    7a:d5:f1:23:b4:65:4b:a5:27:15:a7:e0:48:82:a8:
                    6a:88:4c:2c:89:89:9b:ca:60:b1:33:dd:50:35:56:
                    6a:42:d2:8f:8b:33:95:a3:e8:71:44:cf:d4:ad:27:
                    05:9f:cd:29:0a:42:61:87:e3:3f:9d:c5:86:a3:e0:
                    89:31:c4:4e:46:c7:0e:f7:4d:01:ef:89:ad:1b:d6:
                    08:d3:3e:9b:e2:cc:9c:67:b0:1f:13:b9:54:36:ad:
                    44:67:01:e2:f2:12:d6:fa:52:e8:38:d6:be:01:36:
                    46:b0:b7:9e:35:56:34:c0:7f:78:18:f8:ed:42:ea:
                    43:cb:eb:8e:56:04:9b:3d:4b:c6:d4:d6:1a:92:b1:
                    00:71:71:e2:43:a5:17:0c:af:78:9a:b3:30:b6:c0:
                    20:42:b6:31:bd:e1:b4:56:4b:17:03:20:55:30:57:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BB:C6:A9:84:E5:6D:31:C4:9A:20:51:D3:07:2E:F1:68:53:10:D0
            X509v3 Authority Key Identifier:
                keyid:2E:EB:61:69:15:D6:E4:AD:39:43:4E:85:DA:0E:97:2B:0E:68:1D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuthaRXW5K05Q06F2g6XKw5oHXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/WbvGqYTlbTHEmiBR0wcu8WhTENA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/LuthaRXW5K05Q06F2g6XKw5oHXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:70:d7:9b:60:1d:27:b5:36:a9:53:36:01:cd:71:ec:8d:56:
         09:be:26:4f:6b:42:b8:f0:bf:8b:d7:f9:e1:ff:7b:9b:4e:c5:
         89:16:93:c3:66:58:e6:77:95:be:42:6d:dc:38:37:18:2e:b2:
         45:31:4c:62:1c:32:51:1b:00:ef:27:01:76:cd:9f:17:de:f6:
         6e:e8:ad:1a:7b:2f:ac:b4:c4:ee:27:2f:ad:33:2f:97:b1:31:
         83:dd:b7:ff:8a:69:f3:11:0f:7c:87:65:2c:3d:07:9e:7d:9c:
         85:3e:b9:39:4c:bb:58:b8:cd:8f:41:ac:a4:25:a7:dc:da:29:
         03:08:8d:4f:d8:db:bc:d9:b8:24:c9:f8:ff:91:da:59:49:1d:
         d6:c8:6f:20:a8:44:6d:94:00:6e:cc:05:fa:2e:da:71:b4:87:
         57:98:fc:84:e9:91:34:1c:d5:de:e4:be:c7:86:19:4e:67:e6:
         2e:69:86:53:2d:64:f6:8f:90:3b:42:49:a1:e2:99:22:9c:30:
         3f:c8:51:6c:85:55:dd:74:06:bd:12:26:a6:40:6d:f7:1e:5c:
         26:99:9e:f8:18:36:0e:e4:5b:be:97:b3:68:80:87:11:1a:28:
         1c:2c:53:35:07:cd:e9:2b:c4:ef:13:b2:da:5b:cb:57:7d:31:
         f8:6c:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:43:31 2023 by rpki-client on console-fra.rpki-client.org