Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/UY4yQaUTvAFZetde6JnPaS_iCEU.roa
File:                     UY4yQaUTvAFZetde6JnPaS_iCEU.roa (raw, json)
Hash identifier:          W3AdcEMX8IbCyh4hA6saqGOnCU4iom6Og6DEQ6fUMeE=
Subject key identifier:   51:8E:32:41:A5:13:BC:01:59:7A:D7:5E:E8:99:CF:69:2F:E2:08:45
Certificate issuer:       /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial:       01857082B8BAD60795DF6548F531FC15F597
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/UY4yQaUTvAFZetde6JnPaS_iCEU.roa
Signing time:             Mon 02 Jan 2023 03:24:53 +0000
ROA not before:           Mon 02 Jan 2023 03:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203576
IP address blocks:        92.249.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:b8:ba:d6:07:95:df:65:48:f5:31:fc:15:f5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
        Validity
            Not Before: Jan  2 03:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=518e3241a513bc01597ad75ee899cf692fe20845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:30:bb:60:f8:c0:da:7d:04:a6:07:0b:cc:
                    7b:5b:d1:b1:ba:37:90:a3:26:3d:26:c9:15:9e:be:
                    b9:cc:3b:5a:14:70:5e:19:a0:b9:9f:fc:d1:2e:24:
                    2b:1a:de:e6:8e:e3:3a:aa:37:a6:a5:70:55:56:1f:
                    0c:6a:87:29:cb:60:44:d4:af:df:17:23:c8:cf:ce:
                    d6:67:20:1f:8e:47:8a:30:81:33:95:ce:1d:26:2f:
                    de:c6:5a:c0:53:ab:0b:79:83:f2:2f:d3:86:ae:1e:
                    bd:bf:36:ff:21:c3:0b:b4:c3:ba:8c:93:2e:9e:8a:
                    c9:55:47:de:e0:27:b7:53:b1:2b:b7:20:a9:f2:0f:
                    00:c4:c9:83:f5:8a:dd:4d:01:3a:cb:4a:df:ee:22:
                    d2:5d:a4:39:8d:7f:36:68:3b:21:2a:28:5a:99:1c:
                    fa:44:35:a2:c6:9d:74:82:5b:a8:0d:3c:98:8c:f2:
                    41:76:3e:9a:8a:c5:e1:03:39:98:99:31:b9:79:da:
                    a7:95:9c:1a:c0:58:14:50:8f:74:8c:11:64:a5:1d:
                    4d:33:e4:44:3a:44:20:8b:eb:b0:01:d6:fa:45:20:
                    6f:0d:d5:7b:64:41:2b:9f:c0:71:1b:b9:ed:5c:e7:
                    08:06:5f:52:08:a1:05:91:9a:70:3a:48:94:61:53:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8E:32:41:A5:13:BC:01:59:7A:D7:5E:E8:99:CF:69:2F:E2:08:45
            X509v3 Authority Key Identifier:
                keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/UY4yQaUTvAFZetde6JnPaS_iCEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:53:fb:02:37:9a:ad:56:75:e6:c1:f0:e7:22:da:75:a0:
         0b:1c:f1:26:f9:e4:22:80:3a:da:68:89:d6:e5:76:b6:43:7b:
         d3:f9:9b:ac:d9:63:77:21:e0:5a:0a:e2:bd:b8:2b:4d:55:36:
         72:94:b0:9b:c4:53:98:85:90:aa:c9:b3:8c:99:0f:47:1e:ec:
         5b:a0:9a:96:9f:39:5a:29:d1:c5:5c:33:79:a0:0e:ae:0b:1d:
         ea:9a:59:89:a2:34:81:e7:a1:e6:b9:f7:7e:da:d8:d9:d7:3c:
         f6:9f:cc:bd:4f:d3:e0:55:f0:7e:20:1c:fc:71:3e:26:48:00:
         24:88:95:54:08:55:77:cc:25:a1:3b:b0:b1:af:4f:fe:ad:06:
         6d:5e:f4:e4:d1:e4:9c:57:05:7d:b5:fa:23:d4:28:da:f4:f8:
         17:08:ba:ba:b2:68:61:07:b6:9d:61:84:9a:4b:26:fc:e3:f0:
         d3:f2:e7:dd:63:23:23:f4:42:44:b6:d7:12:e3:c2:31:71:de:
         d8:34:80:32:09:fa:16:68:d3:9d:c6:bc:74:bd:99:88:76:60:
         3c:18:7b:4e:da:f7:f3:96:9f:8a:51:f5:0f:35:04:04:10:8d:
         4f:d0:dc:88:81:aa:85:e8:c3:d2:b9:fb:47:19:6e:f1:b5:ed:
         c7:02:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org