Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fdf1b8-1975-482c-a7aa-e15990752ef8/1/GZYcL4iC-6PaC7g8hp93fFKIick.roa
File:                     GZYcL4iC-6PaC7g8hp93fFKIick.roa (raw, json)
Hash identifier:          PeUyGJhjh2TDJ4KnLuM7yQ8/Xx0GardJXjROr8Y5Pg0=
Subject key identifier:   19:96:1C:2F:88:82:FB:A3:DA:0B:B8:3C:86:9F:77:7C:52:88:89:C9
Certificate issuer:       /CN=c9e1138c7484f697a2454ba66d5f4564f3f8bbe1
Certificate serial:       018571152453D53A6869813AFBC9209C2097
Authority key identifier: C9:E1:13:8C:74:84:F6:97:A2:45:4B:A6:6D:5F:45:64:F3:F8:BB:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeETjHSE9peiRUumbV9FZPP4u-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/fdf1b8-1975-482c-a7aa-e15990752ef8/1/GZYcL4iC-6PaC7g8hp93fFKIick.roa
Signing time:             Mon 02 Jan 2023 06:04:48 +0000
ROA not before:           Mon 02 Jan 2023 06:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        193.203.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:15:24:53:d5:3a:68:69:81:3a:fb:c9:20:9c:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e1138c7484f697a2454ba66d5f4564f3f8bbe1
        Validity
            Not Before: Jan  2 06:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19961c2f8882fba3da0bb83c869f777c528889c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:f2:51:3a:f8:99:2d:bf:89:9d:e8:87:1d:
                    30:47:db:47:3c:a0:a4:63:c0:cf:ac:99:77:43:ce:
                    11:b9:9f:33:3f:35:7c:90:04:e2:6d:41:e2:86:48:
                    03:15:5c:c3:22:f2:75:8d:91:43:e4:d0:df:10:df:
                    01:21:21:c0:2d:c1:47:77:fa:54:b4:b3:bc:fa:6e:
                    ce:4c:dd:6d:88:88:38:0a:b0:85:2a:22:86:c4:76:
                    89:0d:d7:af:18:17:ba:12:d5:b2:1e:b3:73:dd:4a:
                    ef:2e:fb:e2:bc:28:fd:b5:b2:12:e7:b9:8e:22:73:
                    2e:b9:3a:b9:9d:e8:4c:92:16:a3:65:9e:48:ab:40:
                    ac:93:52:44:c3:c0:fb:60:94:aa:c0:82:1e:85:88:
                    93:07:30:8e:c8:80:06:bc:0f:f3:9a:c0:6b:62:eb:
                    9c:1a:9f:15:ca:e4:6f:19:e8:d4:19:3f:c4:37:45:
                    5a:6a:66:77:ed:56:6e:79:84:e9:df:e9:62:6d:b0:
                    d8:7b:79:1e:c9:e7:fa:b8:ae:e2:64:ad:3e:5f:1c:
                    c3:17:aa:96:b9:c0:62:ff:43:7a:78:92:55:cf:8a:
                    96:00:cd:bf:6a:95:73:06:c7:7b:19:49:43:eb:cb:
                    b1:b5:a3:10:c4:f2:8a:e8:3b:04:46:3f:65:8f:20:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:96:1C:2F:88:82:FB:A3:DA:0B:B8:3C:86:9F:77:7C:52:88:89:C9
            X509v3 Authority Key Identifier:
                keyid:C9:E1:13:8C:74:84:F6:97:A2:45:4B:A6:6D:5F:45:64:F3:F8:BB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeETjHSE9peiRUumbV9FZPP4u-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fdf1b8-1975-482c-a7aa-e15990752ef8/1/GZYcL4iC-6PaC7g8hp93fFKIick.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fdf1b8-1975-482c-a7aa-e15990752ef8/1/yeETjHSE9peiRUumbV9FZPP4u-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:4e:c9:11:9c:65:0f:7b:b4:f3:87:a2:59:87:1c:5e:43:bf:
         5e:0a:aa:98:b0:bc:2e:4e:18:24:ca:0a:5c:7f:7a:a3:c6:8e:
         d5:83:93:2a:52:91:77:49:85:ef:ea:f4:80:92:46:ef:f5:20:
         96:bf:5b:8e:1e:e0:13:b9:fc:3c:f2:88:23:75:65:f1:b9:16:
         e3:a7:0b:1d:71:cc:b2:db:cb:20:e1:39:cc:ce:1a:d5:b1:e5:
         ba:a4:c5:3b:69:d3:ac:0a:7f:f4:12:64:72:50:69:82:80:bc:
         fe:b4:ad:74:91:b7:d2:22:07:d2:b1:65:0a:56:83:92:e3:b9:
         89:43:44:83:1d:07:17:17:06:19:47:45:83:1c:0e:62:1c:75:
         fd:87:5d:36:13:6f:3d:e9:d6:15:cf:bc:5c:3f:88:7e:71:8d:
         93:10:f8:a0:50:b7:17:33:47:19:d1:9d:f5:60:7f:41:aa:4d:
         76:b2:b6:72:25:7f:9d:cc:2f:48:dc:2a:ab:b3:92:dd:e8:89:
         c3:78:7d:85:23:fd:03:f0:69:5c:b1:de:d7:b0:b5:66:9c:4a:
         7c:d3:8f:cf:75:e7:8f:ff:22:38:a7:95:69:96:d1:f3:83:c2:
         ed:ff:8f:e0:e7:66:b3:14:aa:d6:3b:26:ad:fb:ff:a9:03:ba:
         f9:35:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:24 2024 by rpki-client on console-fra.rpki-client.org