Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/7H1SLUamcTTuEIbbJZ_aso1Ud_0.roa
File:                     7H1SLUamcTTuEIbbJZ_aso1Ud_0.roa (raw, json)
Hash identifier:          bklP6Z10E3ntMBR7UWzTgaUCm3CPd/xWQYXZ+Di1O7k=
Subject key identifier:   EC:7D:52:2D:46:A6:71:34:EE:10:86:DB:25:9F:DA:B2:8D:54:77:FD
Certificate issuer:       /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial:       018D13D7ED43ED27714F1B577BEDFC95D497
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/7H1SLUamcTTuEIbbJZ_aso1Ud_0.roa
Signing time:             Tue 16 Jan 2024 19:55:34 +0000
ROA not before:           Tue 16 Jan 2024 19:55:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212667
IP address blocks:        195.96.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:13:d7:ed:43:ed:27:71:4f:1b:57:7b:ed:fc:95:d4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
        Validity
            Not Before: Jan 16 19:55:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec7d522d46a67134ee1086db259fdab28d5477fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:f5:83:63:36:a5:a7:5d:58:e9:30:ec:58:
                    44:ef:0b:c4:10:4e:92:64:53:80:8b:47:92:6f:d1:
                    33:2c:24:03:96:5d:ca:42:dd:93:b1:a2:43:43:3a:
                    30:23:18:36:09:8f:23:8c:39:13:3d:cd:9d:a3:5a:
                    0a:fc:a1:f8:23:ec:20:95:6f:29:5c:75:32:a4:9c:
                    48:8f:f8:ff:a0:05:19:c6:b4:dc:3d:66:05:4f:bd:
                    08:b9:2b:8c:93:c1:ae:d1:a4:d3:b2:ba:28:f2:46:
                    4d:11:63:e1:21:bb:72:34:7f:08:fb:1a:1d:5a:cc:
                    35:23:77:9d:11:e7:0b:72:9f:98:6a:53:2c:1c:38:
                    78:c4:e9:ea:54:30:96:f4:71:c1:11:53:60:7d:d2:
                    d2:f5:99:ad:2f:74:4d:ee:03:69:44:69:0b:0f:f6:
                    00:ff:b3:72:ab:74:0c:ff:e4:be:e4:91:9c:bc:70:
                    2d:1a:46:54:2c:81:f3:9a:d5:1b:4d:5b:da:31:5f:
                    42:f1:b1:3e:2e:4e:bb:c8:48:7a:ff:51:28:60:33:
                    55:1e:68:85:5b:d7:83:09:b6:c5:af:12:14:14:ab:
                    3c:ec:4b:c4:51:51:eb:2e:a0:7f:e9:64:7e:80:fb:
                    a7:b8:b2:ff:c0:b3:dc:68:db:a3:a4:fe:c4:93:e2:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7D:52:2D:46:A6:71:34:EE:10:86:DB:25:9F:DA:B2:8D:54:77:FD
            X509v3 Authority Key Identifier:
                keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/7H1SLUamcTTuEIbbJZ_aso1Ud_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:be:d6:4a:87:2a:fe:59:96:c0:d2:0b:04:46:7d:87:d4:ed:
         1a:f3:b1:b1:c6:51:d4:ad:d9:6f:6b:97:76:ca:d8:04:2c:6d:
         5e:f5:d5:04:ec:ff:89:45:25:d6:72:ea:93:22:c7:d4:51:f0:
         71:13:6f:15:ee:d9:35:bb:96:30:98:36:52:8f:6a:30:27:4f:
         22:55:da:5a:39:30:45:92:13:01:d6:a7:ee:d6:e0:c4:a4:4c:
         50:7c:ce:de:08:e2:c3:bc:19:e5:2a:5a:de:d3:e5:0e:ae:76:
         fa:11:21:bc:1a:76:a9:f2:b0:1d:8f:44:2c:99:d3:06:8e:ee:
         7f:1c:a4:f3:62:5e:08:14:d4:be:22:41:f2:e5:8c:e7:0a:ba:
         ca:5a:aa:b6:9f:1f:4d:dc:4c:d9:86:9a:34:a0:47:2f:0e:58:
         14:48:d5:f4:5c:3e:89:c2:d1:79:2c:bd:14:29:a0:a3:87:a2:
         6c:02:e6:07:7f:1f:ff:9f:26:6c:a4:40:f3:78:e2:89:e9:fe:
         4a:c4:06:10:11:88:8e:c1:7d:67:36:a5:40:14:17:95:cb:53:
         ba:7f:fd:59:df:f2:8d:6d:32:19:67:f1:b4:a5:f0:28:d0:6f:
         e9:a6:ed:c7:82:12:26:0b:2d:3a:d9:b1:b9:ab:6b:94:ee:93:
         48:46:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org