Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/IN3Lm3y7AOTlPiJKeTwVQgmEmhs.roa
File:                     IN3Lm3y7AOTlPiJKeTwVQgmEmhs.roa (raw, json)
Hash identifier:          ZlIkX8U+ct3oA2sjksArfxn6ab3ZICfvTXae/3NalNY=
Subject key identifier:   20:DD:CB:9B:7C:BB:00:E4:E5:3E:22:4A:79:3C:15:42:09:84:9A:1B
Certificate issuer:       /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial:       018D8432C33AA590D883496D921DECC471CA
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/IN3Lm3y7AOTlPiJKeTwVQgmEmhs.roa
Signing time:             Wed 07 Feb 2024 15:32:15 +0000
ROA not before:           Wed 07 Feb 2024 15:32:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57013
IP address blocks:        185.187.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:84:32:c3:3a:a5:90:d8:83:49:6d:92:1d:ec:c4:71:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
        Validity
            Not Before: Feb  7 15:32:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=20ddcb9b7cbb00e4e53e224a793c154209849a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:4b:57:86:9c:bd:c1:de:99:ab:4c:a8:3b:
                    f1:78:f3:0e:fb:9d:22:2e:77:1a:21:6f:fa:f1:cb:
                    c2:4e:2f:f5:c1:11:22:ce:ac:05:2e:58:d1:51:82:
                    a6:6c:7b:4f:f6:55:bf:4b:e4:59:c1:8f:56:88:c6:
                    c7:e5:9b:00:4e:ba:f5:4c:92:a5:80:20:1c:d0:c3:
                    ee:87:43:61:b2:67:93:01:8b:8e:86:64:78:ab:52:
                    4c:e0:ab:a6:fc:d0:eb:ea:ec:14:42:b4:e6:dd:95:
                    10:5a:6a:bf:c6:f7:c2:a0:6c:0c:47:9e:10:86:c9:
                    dd:b5:ca:fc:3e:f4:b2:38:a6:39:de:3d:41:c3:f6:
                    68:37:1d:38:7f:a7:7e:a5:2d:5a:db:af:2e:61:c2:
                    9a:44:72:e5:2a:a7:21:22:7c:ac:ec:ef:81:d3:12:
                    89:4a:16:93:fb:c0:da:2f:5e:e1:7c:a0:6d:69:c1:
                    82:49:17:be:20:65:4b:f6:3e:ee:c0:1b:36:87:68:
                    5a:05:9e:ec:12:2e:0f:b8:5c:e5:3e:f9:80:47:47:
                    88:07:61:2d:5f:fc:98:63:c6:c9:ff:da:1a:5b:38:
                    cd:3f:5e:e5:9d:e2:a7:a9:08:ed:e5:11:b9:08:f2:
                    5a:96:3a:43:3c:3d:6a:7b:52:9e:07:1d:a8:cf:07:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:CB:9B:7C:BB:00:E4:E5:3E:22:4A:79:3C:15:42:09:84:9A:1B
            X509v3 Authority Key Identifier:
                keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/IN3Lm3y7AOTlPiJKeTwVQgmEmhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:6a:e1:e3:b6:ce:d0:22:d2:0e:b0:e5:09:49:45:3a:9e:
         a4:11:46:8b:81:a7:25:32:36:75:e3:ce:09:88:60:f2:d3:ea:
         ff:16:7e:fa:70:4a:a7:fc:c5:06:ab:e6:e2:fa:0f:0b:e1:76:
         c5:35:8c:d9:89:0e:26:51:71:69:e4:00:de:b7:4f:6c:63:b3:
         a2:b0:2a:e8:7d:ee:f7:c9:29:07:8e:39:31:f2:7b:20:33:4f:
         95:63:e2:3e:ad:7a:9e:cd:1b:ee:14:ae:de:c9:d8:01:20:51:
         d6:90:d6:8f:7c:49:ff:71:75:49:20:7b:b3:bd:95:20:71:33:
         8c:b4:0c:c7:23:14:eb:d8:cf:62:9c:6c:38:37:c1:ce:68:34:
         3d:17:16:62:17:10:eb:28:9d:13:c4:49:c2:63:44:2d:ac:49:
         57:49:24:44:51:22:92:b5:94:83:3c:4d:4c:a0:4a:63:1f:3c:
         3f:35:d5:7b:bf:34:40:75:73:53:a1:c3:96:49:01:90:99:f5:
         18:61:28:8f:c4:54:1a:36:af:0b:8d:db:44:f3:39:dd:41:4c:
         e3:f5:a9:7d:7e:cf:0e:70:f3:1a:08:1a:c6:55:7b:e7:65:eb:
         52:72:7f:24:71:35:a2:28:68:dc:8c:12:e3:b8:05:67:2a:c5:
         71:0e:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:15 2024 by rpki-client on console-ams.rpki-client.org