Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/qvxJkMNvUOJd3wNduqW5j_BA2AM.roa
File:                     qvxJkMNvUOJd3wNduqW5j_BA2AM.roa (raw, json)
Hash identifier:          vEKq5GmSdn/dknQAoMDOzxihZ9i3oUrMQK5BvIY6NZk=
Subject key identifier:   AA:FC:49:90:C3:6F:50:E2:5D:DF:03:5D:BA:A5:B9:8F:F0:40:D8:03
Certificate issuer:       /CN=503b60a0eac18d53780b2eb6d0629c4a7c6bfb57
Certificate serial:       018964C05ED69CD93BE89F77AD50133059A3
Authority key identifier: 50:3B:60:A0:EA:C1:8D:53:78:0B:2E:B6:D0:62:9C:4A:7C:6B:FB:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDtgoOrBjVN4Cy620GKcSnxr-1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/qvxJkMNvUOJd3wNduqW5j_BA2AM.roa
Signing time:             Mon 17 Jul 2023 16:47:56 +0000
ROA not before:           Mon 17 Jul 2023 16:47:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        178.23.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:5e:d6:9c:d9:3b:e8:9f:77:ad:50:13:30:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503b60a0eac18d53780b2eb6d0629c4a7c6bfb57
        Validity
            Not Before: Jul 17 16:47:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aafc4990c36f50e25ddf035dbaa5b98ff040d803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:92:36:18:3d:fc:6a:c7:3c:d8:a2:73:3d:
                    7c:6f:70:37:b6:3a:4e:ee:58:33:94:3b:37:6b:b5:
                    5b:35:3c:4f:bb:41:65:c9:ef:3d:d5:9d:ec:bf:cf:
                    e7:61:62:8f:c5:60:f8:46:ff:e0:2b:fd:4f:cb:c6:
                    86:84:c9:c0:78:c0:d8:a6:07:4e:03:69:15:e4:69:
                    5e:4e:2c:dc:5e:ea:2c:94:58:52:17:5c:ad:b6:fb:
                    c6:90:14:11:61:55:47:17:d5:72:dc:b7:72:96:a8:
                    5b:16:87:a6:b8:72:3f:d9:f5:58:b6:9e:d1:ba:58:
                    1c:2b:4e:1e:bb:21:4b:aa:a3:0c:04:ce:38:82:28:
                    95:c8:2a:88:77:bf:84:a4:42:79:66:77:c2:c0:72:
                    dc:42:7b:af:89:4a:14:bd:54:30:e7:cc:d7:50:8c:
                    6b:b1:36:81:be:38:30:15:28:30:e6:56:02:b8:ac:
                    c2:55:47:50:24:7a:c2:8e:89:a3:e9:42:98:2c:2f:
                    b7:7d:17:59:32:ba:c2:d3:9d:91:6e:ab:f7:35:53:
                    2c:04:98:14:37:4f:a7:78:4b:05:a7:cc:be:56:85:
                    0b:b5:7f:07:68:09:54:bb:ff:47:e5:65:84:fe:5f:
                    bb:7b:d2:f2:81:e3:a1:83:88:43:27:68:ef:56:98:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:49:90:C3:6F:50:E2:5D:DF:03:5D:BA:A5:B9:8F:F0:40:D8:03
            X509v3 Authority Key Identifier:
                keyid:50:3B:60:A0:EA:C1:8D:53:78:0B:2E:B6:D0:62:9C:4A:7C:6B:FB:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDtgoOrBjVN4Cy620GKcSnxr-1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/qvxJkMNvUOJd3wNduqW5j_BA2AM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/UDtgoOrBjVN4Cy620GKcSnxr-1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:21:c0:ca:86:b2:d3:59:65:8f:2a:ee:c6:0f:1d:11:54:55:
         53:dc:03:a2:5f:aa:55:6f:89:41:1b:eb:39:15:57:e9:b4:cb:
         ed:bf:b4:74:fa:1e:5a:0b:06:2c:ec:9b:9c:dc:66:7b:a5:d6:
         68:3a:54:af:52:a0:1b:b5:9d:ef:77:f4:ea:35:d5:98:c9:c4:
         0a:2f:b3:b9:32:0d:2f:8a:40:a9:67:7e:3c:a5:40:93:bd:b9:
         4c:7d:21:71:93:50:9f:a0:94:2e:ea:7c:ab:ed:d9:2e:33:ee:
         fe:58:65:dd:4c:7c:a7:e6:9c:20:08:9f:8e:82:be:dc:14:38:
         3c:65:a2:1c:16:e2:a3:5a:f7:56:39:7d:0d:15:01:68:6d:89:
         1e:c5:b5:b9:ca:54:4e:13:11:5d:e3:76:fd:66:b0:41:4a:78:
         42:34:78:4c:ad:01:7a:3c:00:9e:e7:8f:a8:d4:63:5d:ff:7f:
         8d:53:a0:b1:64:4c:ef:96:f0:e6:66:bc:96:06:75:d0:b5:82:
         a6:a7:9e:39:78:3b:cd:e6:99:27:b9:63:40:59:a8:08:88:ea:
         30:c1:a3:f9:27:c7:5c:5b:48:e6:ca:8c:db:0b:2e:9a:b6:c5:
         89:58:87:31:c4:8b:68:8a:a4:02:b5:5d:74:ab:54:ef:c5:04:
         7a:60:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:16 2024 by rpki-client on console-ams.rpki-client.org