Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/4HlobIqWefhF0VJC8pibuQ6WJm8.roa
File:                     4HlobIqWefhF0VJC8pibuQ6WJm8.roa (raw, json)
Hash identifier:          OehB9tCwKI2g68gvZpKvK5kA2xbB7bm9RorbG89WbOE=
Subject key identifier:   E0:79:68:6C:8A:96:79:F8:45:D1:52:42:F2:98:9B:B9:0E:96:26:6F
Certificate issuer:       /CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
Certificate serial:       0183E734115BE6682D78646DF961AC88D4E7
Authority key identifier: 0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/4HlobIqWefhF0VJC8pibuQ6WJm8.roa
Signing time:             Mon 17 Oct 2022 18:28:12 +0000
ROA not before:           Mon 17 Oct 2022 18:28:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        31.41.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e7:34:11:5b:e6:68:2d:78:64:6d:f9:61:ac:88:d4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
        Validity
            Not Before: Oct 17 18:28:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e079686c8a9679f845d15242f2989bb90e96266f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:5b:06:7d:d9:99:0f:ed:11:37:48:82:fe:
                    c6:e0:0a:77:32:ff:ac:92:6a:be:04:e7:c2:77:58:
                    d0:e3:9d:03:73:6a:1d:2d:ad:67:59:88:a8:5e:5b:
                    3e:b9:72:35:84:5d:50:96:cf:0f:b3:67:3d:cd:9b:
                    f2:fd:69:d3:9d:72:61:16:4f:7a:9e:48:15:ad:78:
                    8e:20:93:b8:89:0e:64:0c:aa:21:fc:80:d6:08:a8:
                    3e:90:c6:7f:70:ee:76:5d:74:1b:1e:24:87:af:92:
                    8b:23:dc:3e:ad:e2:ca:1d:81:37:10:a5:5e:76:2c:
                    c5:0d:b6:7f:d2:13:e9:7f:cf:fe:a0:b0:73:84:d3:
                    09:15:fc:da:44:05:7d:4d:f6:49:b5:50:5c:b0:7e:
                    68:bd:4d:d9:8c:1f:75:36:cf:df:f1:fb:03:74:dd:
                    9b:d6:c3:83:7a:4c:f1:30:61:37:7c:13:77:21:6e:
                    77:3a:08:6f:5a:fe:d6:c3:b2:76:14:66:19:3a:78:
                    51:14:8d:30:a1:a8:af:4b:92:8c:f7:eb:3a:69:75:
                    f5:c6:b8:cd:be:37:e0:d1:7c:d4:19:e5:2c:92:b3:
                    96:cd:ed:b6:d9:5d:82:6d:93:55:45:c0:14:11:6d:
                    fe:f3:b3:7f:fd:16:62:2a:1d:33:c7:f7:f8:e1:77:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:68:6C:8A:96:79:F8:45:D1:52:42:F2:98:9B:B9:0E:96:26:6F
            X509v3 Authority Key Identifier:
                keyid:0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/4HlobIqWefhF0VJC8pibuQ6WJm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:c1:7f:48:2e:98:60:68:ad:80:f4:10:ec:65:aa:4a:8b:
         d1:32:51:88:42:f3:f6:c7:2b:63:43:4b:8f:c3:95:34:fd:49:
         a6:9c:af:93:15:d3:fe:7e:34:cc:b1:44:f4:2d:a2:a6:be:67:
         e0:32:08:f7:00:4d:b9:e8:b8:8e:3f:95:d0:aa:b1:89:48:4a:
         3a:f9:b8:9d:85:6a:9d:20:3a:3a:be:cd:6f:e6:41:4e:56:ec:
         57:f1:68:1a:10:06:9f:e2:c9:ba:76:4f:28:ac:0f:d7:51:33:
         fc:2e:49:e5:4f:21:1d:31:f6:7a:a7:8a:ff:b7:20:f8:6c:7f:
         ba:0e:ae:70:b2:7a:75:5c:bd:65:0b:ac:c2:91:f5:7b:c9:87:
         d1:2e:5f:18:dd:9c:79:84:41:49:63:54:9c:c0:b4:34:f5:1c:
         90:14:c8:f6:de:17:d6:cb:c5:ed:7f:ad:55:a7:61:ab:d4:31:
         f0:7e:b6:04:ca:35:61:b9:98:8d:32:4a:7f:fe:4e:18:9f:cf:
         96:e3:58:c0:27:3e:90:00:1d:f8:17:c0:a3:75:c9:b0:21:d1:
         d5:24:d5:c5:90:17:3a:ae:80:45:18:59:3a:1d:e7:af:b7:2c:
         58:16:ec:ec:0c:63:cb:91:9f:7c:c3:d5:5d:06:e6:70:fd:b8:
         4e:d7:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:28 2024 by rpki-client on console-ams.rpki-client.org