Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/DBs4lBMluJ7gJ0QRKmNrypp4aWY.roa
File:                     DBs4lBMluJ7gJ0QRKmNrypp4aWY.roa (raw, json)
Hash identifier:          pwDk4ZjByeI5aF2cCiQt0kIrYb/shYP10SCRvn1uwak=
Subject key identifier:   0C:1B:38:94:13:25:B8:9E:E0:27:44:11:2A:63:6B:CA:9A:78:69:66
Certificate issuer:       /CN=2ce3894512e48705a5db0609d4fac675a750fc4f
Certificate serial:       018682CF15E1762E7C80F39BFC887CA8040A
Authority key identifier: 2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/DBs4lBMluJ7gJ0QRKmNrypp4aWY.roa
Signing time:             Fri 24 Feb 2023 09:44:14 +0000
ROA not before:           Fri 24 Feb 2023 09:44:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136923
IP address blocks:        109.234.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:82:cf:15:e1:76:2e:7c:80:f3:9b:fc:88:7c:a8:04:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce3894512e48705a5db0609d4fac675a750fc4f
        Validity
            Not Before: Feb 24 09:44:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c1b38941325b89ee02744112a636bca9a786966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:93:ca:d8:36:69:d5:36:ad:7e:7e:9e:d4:
                    db:d1:7d:bd:58:c8:1d:03:58:d6:89:8c:ae:0e:7b:
                    ee:58:25:e8:bc:18:46:a8:eb:d3:bb:a7:37:e8:97:
                    99:aa:9d:e2:5e:66:2f:a8:c1:1c:24:64:ba:19:93:
                    ad:8c:58:0f:37:8f:ec:3f:df:61:10:3c:8c:d2:f5:
                    e3:21:60:75:4e:17:f7:e1:92:ed:7a:6e:6e:6d:7b:
                    c7:b8:2d:89:24:89:41:cb:a1:e7:11:d3:f1:d2:20:
                    5c:98:18:f5:e9:75:b2:21:18:57:e2:b2:83:a7:15:
                    ff:3a:39:8d:12:16:7d:d9:80:f5:91:34:68:4f:15:
                    52:e4:5e:34:3f:5c:ef:80:6a:67:92:16:26:c6:43:
                    12:d0:86:28:57:b6:7c:aa:e9:d5:c7:60:1a:c8:90:
                    16:23:f1:6a:6e:3f:19:fd:03:bd:f6:96:3e:0b:40:
                    67:83:ed:bf:db:b9:f6:9c:0e:79:22:3e:1d:fa:19:
                    60:1b:99:48:4f:d7:21:44:63:53:b0:a7:75:64:46:
                    37:ce:8c:00:60:92:ff:12:35:cf:99:0f:27:3f:3c:
                    12:9f:27:c0:0e:78:75:49:e7:72:13:87:bf:c5:d3:
                    13:e3:0e:89:54:06:01:12:a2:b8:ba:9d:5e:7d:d3:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:38:94:13:25:B8:9E:E0:27:44:11:2A:63:6B:CA:9A:78:69:66
            X509v3 Authority Key Identifier:
                keyid:2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/DBs4lBMluJ7gJ0QRKmNrypp4aWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.234.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:ec:b7:27:73:b5:cd:e4:88:10:db:28:58:63:bc:e2:79:
         a7:83:43:57:f4:a3:71:ca:ea:b6:63:bd:10:11:5d:60:c4:15:
         9c:3f:28:16:58:94:e0:04:1b:29:a7:45:bb:ad:99:d4:3d:3b:
         c8:77:ab:c6:bc:0f:76:55:a4:fd:40:54:8a:de:6f:d2:00:3e:
         46:e8:02:fb:01:aa:e7:c7:e4:18:c9:8f:b4:b5:b1:de:2a:01:
         1f:0b:55:6d:91:3d:4e:54:67:9d:9f:c8:47:11:dc:26:79:43:
         93:f0:6b:ec:dc:fd:49:f7:44:3d:65:cd:e3:b0:ee:8e:4f:53:
         f9:b3:44:6d:ba:c5:63:0d:91:2b:f4:e9:8e:6f:e7:51:93:da:
         d8:a9:0a:cf:a5:76:35:eb:59:27:8d:59:34:61:d5:36:3d:c7:
         8b:f2:0b:f4:b1:c0:75:b7:6a:c9:6d:66:91:06:bf:bf:0f:57:
         92:57:68:c8:7a:54:7d:12:49:48:11:35:b6:4e:00:a4:e1:0f:
         60:95:ff:eb:15:65:b4:64:f7:fb:f7:f4:29:7d:b0:72:35:9f:
         d7:44:a3:97:8c:a5:9f:20:0a:95:06:d1:97:04:b7:48:69:4a:
         69:78:86:f5:5f:a9:4b:b5:a5:1b:ca:87:6c:b7:b2:b3:42:32:
         c2:3a:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:30 2024 by rpki-client on console-ams.rpki-client.org