Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/3t8Uovi_RhWxFMVSqL25EYRxmdg.roa
File:                     3t8Uovi_RhWxFMVSqL25EYRxmdg.roa (raw, json)
Hash identifier:          Ck9CAsDZgu/3GrQK5P/ibzuMhDo+QkVeBSU19Hjmn3E=
Subject key identifier:   DE:DF:14:A2:F8:BF:46:15:B1:14:C5:52:A8:BD:B9:11:84:71:99:D8
Certificate issuer:       /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial:       0188690C28F4CEA5728A02064CF22B879557
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/3t8Uovi_RhWxFMVSqL25EYRxmdg.roa
Signing time:             Mon 29 May 2023 19:46:24 +0000
ROA not before:           Mon 29 May 2023 19:46:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        185.13.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:69:0c:28:f4:ce:a5:72:8a:02:06:4c:f2:2b:87:95:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
        Validity
            Not Before: May 29 19:46:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dedf14a2f8bf4615b114c552a8bdb911847199d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:37:99:dd:18:d2:2c:6f:0f:8d:ee:cf:75:
                    ef:7d:3e:28:cb:fc:8a:ce:09:19:08:86:ee:fd:f1:
                    83:d1:37:ee:9c:04:3e:cf:cc:65:62:d8:88:e9:c8:
                    ce:de:02:f5:fc:a3:23:28:ea:58:71:ef:7d:3e:3a:
                    32:64:0e:93:e6:be:d3:2f:31:a5:e2:4a:dd:eb:c4:
                    b8:c5:18:b9:14:61:d8:d0:80:02:a9:75:d1:34:85:
                    e0:21:a2:6b:e1:42:85:92:b1:07:a1:3b:85:34:be:
                    a2:a2:04:9e:7e:48:0b:33:b7:94:83:72:96:cb:70:
                    6b:4e:11:d4:e2:d4:e7:bc:b8:66:28:21:12:a6:dc:
                    b5:7b:8c:ac:8e:4b:eb:f1:cd:2b:c2:2c:e6:1f:5c:
                    bc:c2:ea:54:b2:1d:ee:e0:22:60:5b:a4:4d:18:3d:
                    7a:3d:5c:38:f7:29:09:ed:35:10:e2:67:73:41:ef:
                    d1:80:64:5c:ab:ab:99:7b:1a:08:53:9a:2f:6e:99:
                    d2:de:14:18:5f:f6:ef:ea:27:c7:54:7a:82:35:ec:
                    e6:90:76:27:0e:78:6c:89:ac:f2:92:51:f7:b2:ff:
                    3b:27:20:35:b0:8f:f9:d7:9b:ba:47:31:98:fd:4b:
                    e0:ed:55:0e:7c:f5:f8:96:cd:85:d8:0d:21:41:cd:
                    ef:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:14:A2:F8:BF:46:15:B1:14:C5:52:A8:BD:B9:11:84:71:99:D8
            X509v3 Authority Key Identifier:
                keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/3t8Uovi_RhWxFMVSqL25EYRxmdg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:f3:04:10:fe:06:fd:12:0a:03:49:8e:a3:2d:66:e6:65:
         2d:2d:0f:94:65:15:1d:82:26:6b:93:aa:83:82:16:50:ba:d4:
         c1:64:8c:9e:d1:e8:81:3a:5c:8a:02:5a:eb:d1:7e:32:9f:63:
         15:87:1a:68:1e:20:ee:ed:f9:ab:83:56:09:f9:ba:2c:cf:e2:
         ce:eb:da:76:f7:df:fc:cb:d7:90:a3:7b:99:c0:0f:96:df:b4:
         0c:93:4b:6f:43:33:8d:19:bb:0f:d8:56:8c:60:93:18:0d:86:
         ca:a7:eb:93:9e:c5:92:08:f7:20:8e:46:89:04:c9:81:33:82:
         f9:5e:fa:0c:a6:69:17:c4:d2:69:39:61:de:0e:a3:09:b9:c4:
         09:60:e5:1a:cd:cb:3a:72:04:03:31:aa:7e:41:3d:bf:64:43:
         32:c4:73:bd:09:e5:70:83:a8:81:48:f3:0b:9c:42:51:53:54:
         88:54:b5:c1:48:ff:0f:bc:b1:9a:1b:eb:36:47:4f:f7:ac:e8:
         7b:15:c7:6d:a3:d8:d2:6f:ce:8f:77:79:80:ed:2c:44:90:22:
         25:09:17:f9:f7:9e:68:85:8e:8a:b9:f4:fc:44:27:9a:5c:4f:
         68:46:93:ff:79:d2:9a:1a:a5:a8:9a:9b:d2:ae:48:30:b2:29:
         ec:14:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:17 2024 by rpki-client on console-ams.rpki-client.org