Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/D6OctVoD_JHpx3Zlx761SnzH2ks.roa
File:                     D6OctVoD_JHpx3Zlx761SnzH2ks.roa (raw, json)
Hash identifier:          hvRYEmxPzTGZbNxP7pfMoYLGU54mdS4TafUbTcvjrT8=
Subject key identifier:   0F:A3:9C:B5:5A:03:FC:91:E9:C7:76:65:C7:BE:B5:4A:7C:C7:DA:4B
Certificate issuer:       /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial:       018A384CEA2F55667BAA4889157B590BDDEA
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/D6OctVoD_JHpx3Zlx761SnzH2ks.roa
Signing time:             Sun 27 Aug 2023 18:41:19 +0000
ROA not before:           Sun 27 Aug 2023 18:41:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46573
IP address blocks:        93.95.112.0/24 maxlen: 24
                          93.95.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:38:4c:ea:2f:55:66:7b:aa:48:89:15:7b:59:0b:dd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
        Validity
            Not Before: Aug 27 18:41:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0fa39cb55a03fc91e9c77665c7beb54a7cc7da4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:dd:89:6a:dc:b2:b3:5e:c4:f2:25:14:55:
                    74:d5:23:ca:a9:3c:e4:3b:37:33:47:ec:08:58:33:
                    b9:89:d9:e8:34:66:ab:37:60:63:12:e5:e5:36:26:
                    c1:fd:3e:58:80:5b:c5:fe:69:1a:d7:db:9e:b3:fa:
                    21:1b:90:02:d4:5c:c4:96:ca:a0:6a:7d:29:5d:92:
                    74:a1:d0:eb:5c:97:f4:52:de:ce:20:73:80:01:eb:
                    ec:24:13:5f:71:42:cd:09:1b:51:68:08:89:dc:fc:
                    9d:bd:ab:0a:d1:a1:f4:68:be:01:f3:46:d5:2f:b4:
                    cd:de:4d:28:10:11:f4:60:9c:3c:66:e2:bd:6f:b0:
                    8d:3e:7d:1f:54:ca:d6:a3:47:15:47:e4:a9:22:10:
                    b3:14:0b:7e:b8:c9:f6:ad:e9:4b:0e:dc:81:d0:bf:
                    97:b5:22:09:c4:ae:37:6f:a5:87:83:e7:d3:d1:27:
                    b2:b9:60:1e:09:8f:0c:e1:59:d5:95:17:12:5b:13:
                    16:23:bc:27:84:24:b8:a1:77:8e:d5:3a:d4:2d:76:
                    9b:a1:fe:64:41:44:35:77:ca:cc:4f:f6:62:87:f0:
                    b3:a4:fc:e8:1f:c0:86:51:c8:eb:40:07:60:a0:fd:
                    f8:26:6a:93:99:d0:ca:7b:38:8f:20:d8:c2:4d:aa:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A3:9C:B5:5A:03:FC:91:E9:C7:76:65:C7:BE:B5:4A:7C:C7:DA:4B
            X509v3 Authority Key Identifier:
                keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/D6OctVoD_JHpx3Zlx761SnzH2ks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:fa:d3:f3:14:04:c6:30:e0:d7:4b:ea:2c:dd:1e:9c:fb:
         38:63:47:3a:58:7c:a0:84:ea:c1:eb:b6:b0:1a:5a:20:55:70:
         a9:32:fe:d2:c7:ca:6a:9c:e7:bc:c5:fc:1f:62:51:d3:bc:ab:
         77:81:75:fa:d6:f0:ec:7d:6d:03:47:8f:46:c2:fb:70:ca:9c:
         a8:ba:f9:a9:c8:e2:5a:cc:b2:6a:87:87:9b:b5:bb:e9:e1:11:
         61:12:e0:05:72:9a:c2:fb:ad:b2:d9:3f:73:dc:9f:04:64:be:
         c3:83:22:87:27:18:4e:28:c1:0f:54:c0:9b:cc:f1:37:0f:d3:
         0d:f3:c3:17:27:c1:4a:96:2a:e4:72:c3:4c:50:4e:93:ba:eb:
         9e:ad:e0:9a:4f:4d:3f:78:e0:5a:b1:5d:dd:8d:7e:05:9a:56:
         50:3c:8e:b2:b7:a2:2d:f5:de:3e:33:b3:27:02:09:03:bd:15:
         fb:06:ab:15:9c:14:b9:7c:31:22:da:1a:cf:9b:4b:12:e3:2c:
         6d:49:11:43:37:f0:d3:c3:aa:4a:46:86:57:c6:d2:01:d3:98:
         0b:c3:81:c3:47:c5:6d:b6:43:1f:89:f9:1d:70:07:8e:f9:0c:
         c1:a1:b4:ed:49:07:fa:c6:4f:d5:90:43:11:40:c6:8b:57:cb:
         ff:ce:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org