Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/gt5xEPC8QV_EsdIVWUEADv4NhlI.roa
File:                     gt5xEPC8QV_EsdIVWUEADv4NhlI.roa (raw, json)
Hash identifier:          wyBpfvclvGK5yAseAQOy9PImTGB43VjJF4u6HBO6gDU=
Subject key identifier:   82:DE:71:10:F0:BC:41:5F:C4:B1:D2:15:59:41:00:0E:FE:0D:86:52
Certificate issuer:       /CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Certificate serial:       01856CCAF880CBD95EC77A4E2316B4B51F9A
Authority key identifier: 37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/gt5xEPC8QV_EsdIVWUEADv4NhlI.roa
Signing time:             Sun 01 Jan 2023 10:05:19 +0000
ROA not before:           Sun 01 Jan 2023 10:05:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50622
IP address blocks:        193.105.144.0/24 maxlen: 24
                          2001:67c:276c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:f8:80:cb:d9:5e:c7:7a:4e:23:16:b4:b5:1f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371e04ff185b50b9e61ec5f46e2b10877491d882
        Validity
            Not Before: Jan  1 10:05:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82de7110f0bc415fc4b1d2155941000efe0d8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:2d:17:8c:71:1d:2a:3e:2c:a0:3a:ea:78:
                    02:f8:fd:74:1f:7b:80:58:06:d1:dd:72:8b:e2:11:
                    73:98:29:15:84:bc:9e:74:4b:dc:eb:5f:b6:95:36:
                    fd:a2:b8:c8:4b:57:5b:e5:c9:6c:55:98:fe:dd:c3:
                    29:09:b9:f0:9b:bf:25:b8:22:25:4b:3d:d9:b4:b4:
                    95:57:9f:ba:a4:d8:89:10:d7:dc:b6:03:c8:b7:1b:
                    49:8e:5a:48:92:ba:e5:ec:78:85:5f:a2:26:79:44:
                    6d:76:ca:15:13:70:53:af:1b:c9:6d:79:5e:1c:b3:
                    fa:a5:1b:d6:43:f7:23:4f:9f:fc:c0:52:5b:16:ff:
                    3c:1b:ed:e8:6f:2b:43:2c:84:3e:30:f9:c8:4b:15:
                    63:65:0c:b7:9d:0c:ac:93:6a:c9:8e:9d:b2:f3:0c:
                    e4:3d:f8:10:ce:59:42:8e:98:f6:fa:18:ba:3d:cd:
                    2b:e8:2c:89:46:fe:5a:4f:14:ba:6f:54:a5:fb:ce:
                    3b:bf:e6:0e:85:67:26:d2:4b:61:dc:4c:74:b6:80:
                    76:ab:c4:e8:db:3c:e1:c0:4e:92:ea:36:17:b9:16:
                    24:f0:70:cc:13:a7:90:9f:6d:70:1c:98:eb:fc:53:
                    92:8c:7c:79:2d:5f:2c:e6:a9:ab:c4:42:6c:cd:1c:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:71:10:F0:BC:41:5F:C4:B1:D2:15:59:41:00:0E:FE:0D:86:52
            X509v3 Authority Key Identifier:
                keyid:37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/gt5xEPC8QV_EsdIVWUEADv4NhlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.144.0/24
                IPv6:
                  2001:67c:276c::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:a9:7c:db:7a:32:79:5b:18:83:e7:68:13:90:b3:dd:dc:
         05:a3:26:0d:1b:d3:02:37:85:55:5f:00:c4:7f:e1:ae:72:5f:
         28:f2:8c:60:d1:ae:df:05:25:42:7b:f3:09:58:03:b8:3b:18:
         91:e6:94:3c:76:e1:39:3b:b1:78:af:d3:2c:69:54:59:5c:b0:
         26:13:1e:00:51:27:51:63:f5:df:33:ca:a7:c7:29:e2:b7:03:
         2c:29:07:e6:5a:69:32:fd:61:84:37:fb:af:a5:58:f2:a4:23:
         d3:a4:ee:38:ae:9e:f1:41:6d:7a:d1:c5:64:87:cc:bf:a9:62:
         9a:f8:9e:07:e2:16:09:51:cd:f0:e9:9d:bf:7d:1b:db:7a:7f:
         61:55:dd:13:07:d4:b0:28:c7:53:2f:45:37:c3:26:02:04:35:
         26:67:72:29:f5:92:3f:5c:fb:80:b6:5e:d2:95:62:a5:40:50:
         44:3a:2d:2d:48:84:eb:7c:c5:e7:53:c1:2b:47:a2:c8:4f:6d:
         a6:a3:cb:db:bf:02:69:93:40:36:0e:07:11:20:2b:7a:55:a4:
         6b:05:dd:3a:9d:e5:fa:2f:2c:a3:8c:3a:d6:cd:35:2e:ac:71:
         fc:a2:eb:7c:b8:40:6b:1b:76:4f:a1:65:e0:89:11:5e:fa:80:
         fd:19:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org