Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/R44n5IrmmOQuBtqRWP3KkkpKvWI.roa
File:                     R44n5IrmmOQuBtqRWP3KkkpKvWI.roa (raw, json)
Hash identifier:          e/6DHMfy0AIJsy/5zrlhqi36Z5umMw0vVlp/dPYQfXc=
Subject key identifier:   47:8E:27:E4:8A:E6:98:E4:2E:06:DA:91:58:FD:CA:92:4A:4A:BD:62
Certificate issuer:       /CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Certificate serial:       018D65378ED6EB7D917D2852BE979D079415
Authority key identifier: A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/R44n5IrmmOQuBtqRWP3KkkpKvWI.roa
Signing time:             Thu 01 Feb 2024 15:09:16 +0000
ROA not before:           Thu 01 Feb 2024 15:09:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34984
IP address blocks:        178.18.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:65:37:8e:d6:eb:7d:91:7d:28:52:be:97:9d:07:94:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a114ffd8531b239e6f0f73e6f6de63845145facd
        Validity
            Not Before: Feb  1 15:09:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=478e27e48ae698e42e06da9158fdca924a4abd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:28:83:e7:8a:c9:cc:f9:f9:c0:1d:e7:b0:
                    65:c1:71:c0:df:c1:75:62:d1:e3:85:48:74:ef:74:
                    83:34:e2:04:e9:af:9e:4b:de:a3:b9:98:30:fa:1c:
                    3b:1c:55:57:cf:ea:b0:db:f7:8c:19:cd:b8:73:c3:
                    ee:d5:c4:ca:74:c9:1d:8f:08:e4:73:f2:fe:50:1a:
                    4e:b2:46:4a:f9:a2:38:90:ad:d7:95:2a:95:53:9c:
                    64:60:96:3c:1a:fa:1f:65:7e:f9:6e:e8:e7:f9:6d:
                    dc:69:cf:d4:40:95:c9:79:18:f3:ff:aa:8b:8f:aa:
                    b8:e9:68:6e:82:cf:64:db:ba:49:18:64:35:58:8c:
                    2c:dd:eb:73:c4:c5:2a:fc:bf:52:32:36:bf:20:07:
                    89:0a:18:75:78:57:84:9b:1f:65:df:11:de:31:e8:
                    9d:17:c7:2d:c9:a3:20:25:86:f6:b4:89:fb:08:d2:
                    21:a8:74:5a:29:03:8f:03:38:26:bb:7f:ae:be:14:
                    70:3e:b2:7f:d9:66:f1:88:7d:9a:b2:e5:4f:de:47:
                    03:37:92:26:3a:01:c3:b4:c3:90:20:d4:ed:d9:ce:
                    c1:6d:8e:4c:f1:24:79:24:eb:b0:d0:f4:79:88:6e:
                    29:f0:2d:38:d2:4d:61:8a:33:04:79:c7:c8:63:23:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8E:27:E4:8A:E6:98:E4:2E:06:DA:91:58:FD:CA:92:4A:4A:BD:62
            X509v3 Authority Key Identifier:
                keyid:A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/R44n5IrmmOQuBtqRWP3KkkpKvWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.18.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:86:56:4f:4e:fc:e0:89:f7:e0:32:3a:5e:b1:77:0b:43:37:
         46:f0:2a:52:4e:23:d0:a7:40:1a:12:79:0b:03:18:51:52:11:
         10:eb:2c:58:c1:6b:e4:35:41:da:eb:05:d8:09:71:64:e8:f7:
         84:6e:e9:b9:48:87:43:41:19:f8:b8:5b:71:31:c6:63:62:11:
         67:5d:ad:ff:1b:d9:9d:3a:27:57:43:01:e2:5f:fc:89:56:71:
         3d:1c:6e:06:cb:4e:f9:84:54:ea:a2:ca:61:26:0f:7e:f2:d2:
         f9:e5:e6:5c:a5:c4:da:0c:97:0f:ca:16:ba:70:34:dc:1e:73:
         5c:9f:25:ec:ef:bb:0b:f1:ef:57:2f:51:dd:50:27:0f:e3:f5:
         06:e4:5a:38:ee:33:8d:dc:ee:e8:3c:3d:8a:f2:ef:dd:98:22:
         95:8f:55:2f:cf:f9:72:ee:01:e5:d0:ba:3a:62:f6:7d:b5:d2:
         68:63:2e:26:0d:4e:fb:5e:4a:d0:d8:ba:e8:f3:74:9d:c3:0f:
         61:13:dd:25:44:d8:a6:4c:5b:3a:e4:d9:9e:c7:bd:4d:7a:b1:
         b0:dc:df:0d:99:2a:7a:e6:27:b1:0f:36:8a:a3:f9:78:bc:0a:
         35:06:c1:dd:e7:88:f0:e8:c0:3a:d9:c2:85:ec:7e:c7:5d:e3:
         8f:63:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org