Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/SEy8Yve3G6RuDzoM-S9b4DYRwTQ.roa
File:                     SEy8Yve3G6RuDzoM-S9b4DYRwTQ.roa (raw, json)
Hash identifier:          wvow68iW3Q39qt4hoVXfF4Zv9G4kRCa/vI9yaq/pFCE=
Subject key identifier:   48:4C:BC:62:F7:B7:1B:A4:6E:0F:3A:0C:F9:2F:5B:E0:36:11:C1:34
Certificate issuer:       /CN=18bd05c1b853c5f2805b0f93265bd37875734e53
Certificate serial:       018D1E0C7E25FE78A60E269F9F30C7A7E233
Authority key identifier: 18:BD:05:C1:B8:53:C5:F2:80:5B:0F:93:26:5B:D3:78:75:73:4E:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL0FwbhTxfKAWw-TJlvTeHVzTlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/SEy8Yve3G6RuDzoM-S9b4DYRwTQ.roa
Signing time:             Thu 18 Jan 2024 19:29:11 +0000
ROA not before:           Thu 18 Jan 2024 19:29:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62300
IP address blocks:        193.105.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1e:0c:7e:25:fe:78:a6:0e:26:9f:9f:30:c7:a7:e2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bd05c1b853c5f2805b0f93265bd37875734e53
        Validity
            Not Before: Jan 18 19:29:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=484cbc62f7b71ba46e0f3a0cf92f5be03611c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:ff:d7:ad:3c:74:81:13:4a:a3:da:e7:57:
                    fc:83:af:d0:05:c1:20:49:c9:3c:80:57:b6:ea:cd:
                    7c:40:52:f0:58:c5:ab:1d:86:74:7a:2b:1a:0a:a8:
                    70:54:0c:b0:9d:1c:0b:bb:b2:1b:8d:e2:15:38:de:
                    3c:b6:55:18:ee:9b:6f:7a:44:5c:89:ab:f0:47:e0:
                    b2:f5:da:77:42:68:cb:65:27:e0:49:d2:8c:4f:90:
                    3b:76:e7:07:f5:8b:8a:e8:6c:81:1d:e9:7c:b7:fa:
                    7d:e1:84:76:6c:27:4f:9c:58:27:e4:40:94:0f:64:
                    72:1d:91:44:ea:9e:a0:d0:2c:a7:44:cc:22:79:f6:
                    28:fd:14:6d:03:64:be:30:75:f9:aa:af:8d:75:bd:
                    02:87:0d:9a:44:c0:6a:11:fa:82:a3:7b:40:b9:5a:
                    10:08:ba:ae:fc:f3:43:fa:8a:c2:9d:90:54:b1:b4:
                    9e:be:9a:7a:b2:19:41:41:90:43:da:00:5f:75:04:
                    03:d6:09:04:17:68:2b:04:e3:25:80:b2:de:ec:26:
                    e5:a0:ca:57:b7:23:d2:3b:f8:15:80:83:63:11:f9:
                    62:05:0a:f3:c3:e4:fc:d7:fa:4e:44:f1:01:75:2f:
                    d9:cd:cb:de:2f:e9:7f:7f:22:93:d6:d2:42:d1:d0:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4C:BC:62:F7:B7:1B:A4:6E:0F:3A:0C:F9:2F:5B:E0:36:11:C1:34
            X509v3 Authority Key Identifier:
                keyid:18:BD:05:C1:B8:53:C5:F2:80:5B:0F:93:26:5B:D3:78:75:73:4E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL0FwbhTxfKAWw-TJlvTeHVzTlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/SEy8Yve3G6RuDzoM-S9b4DYRwTQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/GL0FwbhTxfKAWw-TJlvTeHVzTlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:40:df:dc:42:63:60:92:63:f0:06:38:47:35:c0:bf:0b:
         6f:ec:e2:e5:d2:84:1f:85:2f:29:77:71:9e:7b:b1:5c:47:ca:
         a1:d5:22:19:35:7b:41:67:32:5e:51:ac:d7:e9:c1:ce:70:91:
         41:69:54:d0:6f:fe:a4:86:eb:3a:31:c6:eb:a9:73:14:7d:96:
         b7:7c:c2:28:41:8d:15:8f:27:af:82:7b:8c:b9:f3:46:a8:7a:
         c1:9b:93:ba:1f:d4:72:e2:24:94:bc:30:38:3d:41:65:9d:6b:
         6e:01:eb:3f:a1:03:6b:7d:d6:62:64:e7:f4:02:9a:c2:32:33:
         94:39:c2:94:e1:2b:cd:59:16:4b:fd:5e:0f:e4:c8:c1:10:c6:
         ba:53:c2:f7:e9:49:9b:d5:bc:9f:1d:0c:08:1d:97:f5:a8:c8:
         70:c4:14:33:a7:a3:ca:79:56:7c:fc:55:07:80:b6:cb:27:69:
         eb:41:8c:d4:6f:52:ea:81:ae:75:a3:01:a9:b9:12:25:ff:73:
         57:17:00:04:ca:0a:23:d7:f2:d6:87:0c:d1:4b:f4:e4:68:a3:
         81:18:b1:ef:52:25:8c:12:75:8b:50:88:15:06:ec:65:98:77:
         b8:58:39:8b:fe:50:e7:e6:21:84:7d:61:71:45:cd:74:67:0f:
         24:cb:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 14:28:09 2024 by rpki-client on console-ams.rpki-client.org