Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/OXaFeGdudTp_lZ9n1py0JMIpEpA.roa
File:                     OXaFeGdudTp_lZ9n1py0JMIpEpA.roa (raw, json)
Hash identifier:          +5SzAwO6FgrbVh3e9jITU+Xgz55hAL3EJzadKkLzivs=
Subject key identifier:   39:76:85:78:67:6E:75:3A:7F:95:9F:67:D6:9C:B4:24:C2:29:12:90
Certificate issuer:       /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial:       01857070734CA0132AC59207F45718D77DD7
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/OXaFeGdudTp_lZ9n1py0JMIpEpA.roa
Signing time:             Mon 02 Jan 2023 03:04:55 +0000
ROA not before:           Mon 02 Jan 2023 03:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        176.126.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:73:4c:a0:13:2a:c5:92:07:f4:57:18:d7:7d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
        Validity
            Not Before: Jan  2 03:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39768578676e753a7f959f67d69cb424c2291290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:cc:64:5d:b4:3a:4b:c6:db:67:2a:dc:d8:
                    65:cf:16:e0:3e:c7:da:32:7b:27:b7:64:0e:b4:fd:
                    a0:8e:47:1d:03:ac:b2:1c:6a:98:d0:54:08:f2:13:
                    cf:ea:45:cf:17:c3:9e:53:57:c5:0e:92:ce:6d:5f:
                    c3:48:c3:4b:1d:fe:5b:67:6a:91:11:a2:0d:b9:1e:
                    15:68:0c:5a:27:90:d0:8b:0f:5c:8d:ac:c7:22:21:
                    9e:e0:89:c1:dc:3b:bc:1b:84:db:ed:c9:56:ce:d2:
                    b3:8c:3c:87:fd:79:1b:1e:93:5e:8a:ff:2d:65:47:
                    d6:13:da:ab:8b:5d:61:8d:a8:6b:2d:da:aa:03:b4:
                    7f:85:0e:da:05:48:71:22:69:51:de:df:08:da:14:
                    2e:30:cb:21:00:d7:e4:8f:df:8d:15:75:28:a8:10:
                    0b:91:ad:26:85:bc:6c:8a:cc:e5:f5:01:f8:52:03:
                    55:c1:a2:48:1d:4c:bb:f6:57:1e:a1:82:40:3d:c8:
                    d4:aa:f0:40:17:70:2c:b9:f3:3b:9b:9c:ce:58:1a:
                    9d:27:1b:07:06:67:67:cd:c8:d0:c3:f4:4f:70:36:
                    67:4f:1b:89:d8:cf:41:1b:1a:d6:fe:6d:9e:c7:a3:
                    52:33:64:89:c5:c4:34:d7:3f:03:79:93:76:3b:cb:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:85:78:67:6E:75:3A:7F:95:9F:67:D6:9C:B4:24:C2:29:12:90
            X509v3 Authority Key Identifier:
                keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/OXaFeGdudTp_lZ9n1py0JMIpEpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:a4:6d:80:ee:ac:f4:1e:8b:e1:48:20:92:a3:f6:c0:eb:
         79:2e:dd:9b:11:35:1c:0a:45:6a:a5:51:fe:28:fb:80:d0:7b:
         fb:64:ca:d4:b2:d6:85:c1:75:57:b6:ef:84:c7:4f:0d:93:66:
         d4:9a:e8:a9:3d:97:36:ff:3c:53:95:46:74:ad:f2:05:f2:77:
         d1:b5:03:3f:15:8c:19:9d:9a:22:ad:8a:18:2d:cf:92:95:fe:
         58:ba:61:c7:3c:8c:53:57:86:fa:54:9c:42:9b:62:c7:84:91:
         28:83:54:fc:be:ef:dc:5e:5e:21:e4:f0:a5:92:7e:68:0c:26:
         1d:92:83:1a:ff:31:f7:3b:d7:ba:06:fe:04:a2:51:fc:0c:a3:
         8c:03:40:4b:c9:e5:03:6c:a8:51:be:a8:da:88:46:1f:ec:03:
         9a:c6:a1:39:88:38:c4:90:0e:09:b6:b6:b3:40:5e:b6:3d:f4:
         20:00:1e:36:ca:13:d7:e5:4c:63:7d:47:78:fd:40:d6:33:3f:
         87:16:74:c7:0e:d4:45:1a:41:ab:c7:53:b0:6e:17:43:86:78:
         e9:43:47:9a:14:71:ff:ff:aa:a5:ec:5d:de:dd:27:08:dd:4f:
         0c:39:0e:4f:87:45:ef:1d:62:78:8c:46:38:2e:a0:4e:77:c6:
         01:cb:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:44 2024 by rpki-client on console-fra.rpki-client.org