Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/GMcGj1oYszQPtjGaBFtFSSmySLM.roa
File:                     GMcGj1oYszQPtjGaBFtFSSmySLM.roa (raw, json)
Hash identifier:          dMpgwHGRWRlNoCtbC9qlrcyAqaONlbW9pjOb+bkKbJ4=
Subject key identifier:   18:C7:06:8F:5A:18:B3:34:0F:B6:31:9A:04:5B:45:49:29:B2:48:B3
Certificate issuer:       /CN=9d2438d00c69e6d7590a9313b119ef69665aedb9
Certificate serial:       03E538D3
Authority key identifier: 9D:24:38:D0:0C:69:E6:D7:59:0A:93:13:B1:19:EF:69:66:5A:ED:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSQ40Axp5tdZCpMTsRnvaWZa7bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/GMcGj1oYszQPtjGaBFtFSSmySLM.roa
Signing time:             Sat 01 Jan 2022 09:03:39 +0000
ROA not before:           Sat 01 Jan 2022 09:03:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     328543
IP address blocks:        193.28.237.0/24 maxlen: 24
                          193.28.182.0/24 maxlen: 24
                          193.28.191.0/24 maxlen: 24
                          193.28.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65353939 (0x3e538d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2438d00c69e6d7590a9313b119ef69665aedb9
        Validity
            Not Before: Jan  1 09:03:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18c7068f5a18b3340fb6319a045b454929b248b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:fb:84:d5:ee:22:30:40:b6:38:2f:68:b7:
                    d2:8b:5a:17:b1:8b:50:1a:86:17:01:90:f4:7f:74:
                    b4:55:1a:e7:b1:02:4e:a5:b2:e6:ee:ca:11:54:46:
                    5a:c9:61:82:f2:2d:7a:a3:5c:b8:9d:55:02:64:ce:
                    12:8e:2a:e4:14:3c:88:b5:c4:99:24:09:a5:b6:d1:
                    5b:ad:a3:07:d9:4d:b8:fc:12:94:78:e4:16:be:ed:
                    2f:2d:0e:eb:f0:27:bc:e0:23:56:59:ee:56:f7:a5:
                    92:1c:bb:a1:77:cf:97:6f:5e:5d:b5:16:e2:14:34:
                    0f:83:fb:58:4f:58:eb:03:a3:5a:76:ee:86:db:b8:
                    d6:7d:af:9d:c2:f2:2a:2f:14:82:f2:96:42:38:ab:
                    9a:2e:2b:8e:3f:bc:39:ca:9f:0e:d9:97:26:cd:66:
                    45:60:a6:f2:82:19:f3:ef:b0:40:0b:14:08:5c:50:
                    ec:60:db:75:af:dd:6e:b8:9b:38:97:51:b2:f5:0f:
                    d4:ee:04:17:12:54:9a:83:95:ce:22:99:82:2d:5f:
                    a8:43:82:ee:65:5d:b4:5d:00:cc:17:c7:79:f6:2a:
                    df:36:8a:54:f2:89:34:7d:20:6e:2f:52:90:0b:31:
                    5a:68:9d:64:96:a8:1f:45:c5:fd:35:94:aa:67:e3:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C7:06:8F:5A:18:B3:34:0F:B6:31:9A:04:5B:45:49:29:B2:48:B3
            X509v3 Authority Key Identifier:
                keyid:9D:24:38:D0:0C:69:E6:D7:59:0A:93:13:B1:19:EF:69:66:5A:ED:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSQ40Axp5tdZCpMTsRnvaWZa7bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/GMcGj1oYszQPtjGaBFtFSSmySLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/nSQ40Axp5tdZCpMTsRnvaWZa7bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.182.0/24
                  193.28.191.0/24
                  193.28.202.0/24
                  193.28.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:65:45:5f:68:a2:39:c9:4b:8b:e8:fb:91:d0:bb:2e:bf:6d:
         62:42:f2:75:c9:80:58:14:c6:c3:2d:36:bd:2f:79:87:ba:2e:
         5d:3a:80:4f:39:2f:63:14:4a:c6:91:a4:d9:b6:5d:a9:96:66:
         d4:c9:6c:52:b7:08:17:91:c8:58:3e:af:55:12:72:e4:f9:76:
         61:6b:c4:c2:40:a2:c4:fd:45:4e:49:74:46:db:88:51:c9:3b:
         f1:c0:9e:8b:d0:47:ce:56:f9:c6:d9:70:48:bd:a3:3b:2d:3e:
         dd:a6:1c:ce:c4:1e:63:e8:a6:6a:cf:0e:4b:9b:63:bd:7d:a9:
         69:97:b6:e2:f1:9a:d0:94:8c:41:1b:8c:67:a0:6f:32:1c:c8:
         f7:9d:0e:35:d6:c3:c0:34:f8:ee:42:5e:af:93:c9:4b:87:a9:
         44:d8:73:5a:65:f9:1e:47:a3:64:0b:8a:4e:99:48:67:af:00:
         50:92:5b:d6:3b:b1:ba:f8:98:4b:d2:cc:c2:bf:51:3f:19:cc:
         5f:6c:95:88:e8:23:f6:44:71:80:e0:aa:15:ca:e0:e6:35:e6:
         a5:44:86:53:77:4a:d4:13:3a:43:c8:72:f9:db:95:05:44:44:
         07:bb:68:29:17:49:61:20:9b:f8:f7:08:31:4e:ec:6f:bb:45:
         c6:1a:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:53 2024 by rpki-client on console-fra.rpki-client.org