Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/fFhuJnfezRozv3kV4tbymxC5d4c.roa
File:                     fFhuJnfezRozv3kV4tbymxC5d4c.roa (raw, json)
Hash identifier:          r08Szh5X5dKPVxwuAikshskCRqJ6dVMlNcC4g1574cY=
Subject key identifier:   7C:58:6E:26:77:DE:CD:1A:33:BF:79:15:E2:D6:F2:9B:10:B9:77:87
Certificate issuer:       /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial:       018B050F07E70BFDB3CBBD1736103B5A6972
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/fFhuJnfezRozv3kV4tbymxC5d4c.roa
Signing time:             Fri 06 Oct 2023 12:55:53 +0000
ROA not before:           Fri 06 Oct 2023 12:55:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        93.95.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:05:0f:07:e7:0b:fd:b3:cb:bd:17:36:10:3b:5a:69:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
        Validity
            Not Before: Oct  6 12:55:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c586e2677decd1a33bf7915e2d6f29b10b97787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:d8:fd:21:03:ed:43:a2:ec:82:16:4a:bd:
                    89:58:1b:5d:08:2c:67:f0:4f:9a:78:92:be:d5:04:
                    1e:04:37:f6:2c:11:e8:49:3a:8a:88:b2:b8:91:a6:
                    c3:25:45:6d:07:4a:de:5f:10:15:26:44:46:cb:e6:
                    f2:bb:cc:fc:2d:28:a1:a3:21:11:39:44:55:78:c3:
                    69:d6:ea:a8:2b:1b:7e:fe:f9:16:ec:88:92:b6:12:
                    69:73:50:6c:10:89:10:80:8f:20:5b:5d:fb:4a:45:
                    87:ec:58:9c:3b:37:15:ae:ce:1d:bf:cc:73:fc:a1:
                    09:67:42:a4:3a:27:bf:44:f3:05:12:8f:cb:b5:de:
                    7a:96:26:ba:c6:62:4f:45:17:86:a8:ee:7d:88:77:
                    e9:85:b7:67:bf:4a:8a:f9:4c:cf:4b:b8:49:30:81:
                    e7:fb:bf:45:30:6a:1d:28:5a:fb:c4:cb:fc:0b:4c:
                    0b:e7:46:ad:be:59:cb:4c:80:65:63:32:d3:1d:18:
                    84:45:b6:6d:f2:5b:6e:c3:4f:87:43:bb:58:03:60:
                    8e:ef:ee:47:65:3d:6f:c0:b2:92:50:52:eb:bf:78:
                    2b:e8:2c:10:f1:9d:69:19:97:47:8e:2f:4b:bd:50:
                    ce:8d:f2:8b:8e:91:14:84:d0:fa:3c:24:51:14:0f:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:6E:26:77:DE:CD:1A:33:BF:79:15:E2:D6:F2:9B:10:B9:77:87
            X509v3 Authority Key Identifier:
                keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/fFhuJnfezRozv3kV4tbymxC5d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:de:6f:05:8f:65:66:24:18:1c:87:75:ed:d3:d9:30:62:
         45:ba:ae:88:43:4e:cc:12:db:5f:f0:5d:33:7c:92:0d:a9:df:
         49:a3:d4:30:80:5d:b6:9a:10:f0:84:e2:b0:a3:53:43:28:89:
         bc:83:dd:76:25:da:13:37:98:26:6a:38:d3:cd:a7:c0:61:1c:
         d3:4c:38:56:64:30:42:ab:50:f0:75:db:ce:5b:32:04:b9:bc:
         40:48:c8:0c:9f:69:25:4a:01:db:b0:60:79:b7:95:3d:aa:76:
         7f:a8:b3:71:53:4d:52:f8:33:36:76:77:da:3a:55:7f:28:32:
         2d:81:ac:ff:1a:a7:2c:e4:ca:63:85:ac:9f:d3:9c:02:22:3a:
         7f:7b:db:49:db:00:a1:95:34:54:e7:21:d6:df:44:f3:3c:3f:
         69:c3:91:b9:b1:ea:c8:96:f2:42:50:10:93:28:2a:c4:53:aa:
         28:72:68:27:e9:36:db:b4:96:08:55:81:66:8a:2b:56:87:83:
         8a:51:c6:d4:06:73:09:90:d2:89:5b:cc:fe:d6:b2:29:5e:f4:
         03:cb:de:7e:fc:bc:29:86:33:d2:e8:69:51:40:b7:31:10:18:
         2e:6a:81:b6:10:dd:8c:19:16:df:a1:a4:ce:37:b3:b4:bd:dc:
         74:56:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org