Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/sDYuNUsJvkikRuLdbA18KEeINDQ.roa
File:                     sDYuNUsJvkikRuLdbA18KEeINDQ.roa (raw, json)
Hash identifier:          P6XaoAv8SLdMFgtj9l4UHslZHf0oMDOfnigoqUJ5uO8=
Subject key identifier:   B0:36:2E:35:4B:09:BE:48:A4:46:E2:DD:6C:0D:7C:28:47:88:34:34
Certificate issuer:       /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial:       01856FCB88AD5F993B8CCAE2252D030A788C
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/sDYuNUsJvkikRuLdbA18KEeINDQ.roa
Signing time:             Mon 02 Jan 2023 00:04:47 +0000
ROA not before:           Mon 02 Jan 2023 00:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63339
IP address blocks:        193.23.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:88:ad:5f:99:3b:8c:ca:e2:25:2d:03:0a:78:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
        Validity
            Not Before: Jan  2 00:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0362e354b09be48a446e2dd6c0d7c2847883434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:28:4a:a6:6f:9d:5c:ab:12:c0:a6:d4:12:
                    eb:8f:6b:23:de:1c:4b:b8:e1:a4:75:60:d0:a3:25:
                    c1:98:3b:d3:a9:67:a5:d9:40:a5:46:78:0a:ad:13:
                    0b:ae:59:5e:87:e1:a4:98:61:88:29:19:de:68:ff:
                    37:68:15:a1:b3:43:66:16:f5:b9:87:59:4f:20:09:
                    2e:84:d5:85:0d:7f:fb:a9:8f:1d:27:b5:49:22:ca:
                    4d:47:a0:d4:e4:7c:f0:9a:20:71:62:7e:75:a8:6a:
                    7e:c3:f5:36:04:4d:29:c0:cf:ea:19:44:34:c1:46:
                    45:ae:d8:1f:80:a8:f8:14:41:cc:8a:75:c8:d5:5a:
                    bc:fb:a0:25:91:82:05:f4:58:de:c7:d3:f9:97:7a:
                    48:3d:ee:91:41:6b:af:8b:3f:dd:81:9a:3c:61:50:
                    44:fd:a1:eb:f7:0c:23:30:4f:8a:52:42:76:5d:b3:
                    4c:f5:02:6e:f6:f3:6a:ae:a7:68:28:6e:4b:52:7b:
                    7c:e7:02:1d:cb:17:96:b4:c2:0d:35:3c:00:39:08:
                    f5:c2:95:d3:1f:50:63:b1:e2:fd:77:89:ae:3b:73:
                    87:b8:b1:fb:aa:a1:90:7e:2f:6d:47:5c:56:db:6c:
                    af:e1:ea:1f:5e:ef:46:e9:e4:6e:8d:c5:16:21:d1:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:2E:35:4B:09:BE:48:A4:46:E2:DD:6C:0D:7C:28:47:88:34:34
            X509v3 Authority Key Identifier:
                keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/sDYuNUsJvkikRuLdbA18KEeINDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:ef:b8:21:5d:12:98:b2:cd:26:b3:9d:98:dd:f6:bb:b4:
         13:9e:6c:77:d3:e7:84:df:8b:bf:ad:a4:79:b7:c6:2a:58:79:
         ef:75:6e:2d:aa:7f:f6:c1:5e:04:c7:45:a5:ca:17:d6:c5:57:
         8b:fe:eb:c5:b7:6b:90:f8:d6:5d:cb:a2:96:42:11:91:7a:e4:
         5a:71:57:ea:e8:50:d8:17:c2:25:a1:a3:fd:23:9e:af:b0:d9:
         9c:d8:ad:18:3d:1c:5c:00:05:ff:d4:cb:e0:af:ba:ea:c7:48:
         04:a5:3e:12:04:47:bb:54:c5:47:7e:b3:d0:98:02:38:fe:a8:
         f7:09:b4:08:17:51:ab:56:b4:39:5e:61:7e:10:da:ee:d3:0e:
         8f:8c:80:04:84:c4:86:e8:f1:e8:60:12:e2:a4:48:36:3a:cc:
         97:53:b2:17:d1:e9:4c:4c:4b:80:34:97:33:f6:9f:54:77:1d:
         af:8a:ad:5e:73:7c:ff:05:81:0a:dd:70:57:ec:34:0a:81:1e:
         12:fa:cb:93:65:4f:48:ee:24:cb:a3:e1:44:f7:57:59:76:15:
         dc:32:05:8c:d7:0a:e0:ef:b3:6e:b7:14:66:fc:df:45:0a:b3:
         a9:c2:3e:62:e9:1e:21:9e:c1:20:05:88:12:ab:11:18:34:54:
         70:30:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:09 2024 by rpki-client on console-ams.rpki-client.org