Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/Do9ZqDhhsNwUd3m4vIGV8FlWs4U.roa
File:                     Do9ZqDhhsNwUd3m4vIGV8FlWs4U.roa (raw, json)
Hash identifier:          mC3X5PU7nO/xE/+gFmwVLCOGJtleXmRV2TedEeU1mlI=
Subject key identifier:   0E:8F:59:A8:38:61:B0:DC:14:77:79:B8:BC:81:95:F0:59:56:B3:85
Certificate issuer:       /CN=bb65142b90774f9092420b1fdf4c67ed737ed8b6
Certificate serial:       0183FBAA658109FF3E9B1FA1B3E99522C676
Authority key identifier: BB:65:14:2B:90:77:4F:90:92:42:0B:1F:DF:4C:67:ED:73:7E:D8:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u2UUK5B3T5CSQgsf30xn7XN-2LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/Do9ZqDhhsNwUd3m4vIGV8FlWs4U.roa
Signing time:             Fri 21 Oct 2022 17:49:51 +0000
ROA not before:           Fri 21 Oct 2022 17:49:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201988
IP address blocks:        2a13:fc0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fb:aa:65:81:09:ff:3e:9b:1f:a1:b3:e9:95:22:c6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb65142b90774f9092420b1fdf4c67ed737ed8b6
        Validity
            Not Before: Oct 21 17:49:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e8f59a83861b0dc147779b8bc8195f05956b385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:85:62:07:d8:32:f2:85:a9:1c:5c:65:0b:
                    c6:24:4b:19:18:59:5d:5c:1a:c9:69:00:ab:02:b4:
                    d0:97:36:c2:01:6a:e2:c5:06:1b:85:e8:be:f2:0e:
                    cf:b6:f1:af:52:13:9d:d6:21:25:9f:d2:43:8d:7a:
                    da:7d:f2:41:1a:42:b1:d3:ad:bb:71:99:d6:e4:f8:
                    b8:46:7a:64:a3:4b:20:98:a1:f7:65:ed:98:8f:27:
                    01:8b:40:5a:6e:05:7a:fd:92:3e:ae:b2:d9:26:e2:
                    ee:bd:4e:03:12:c0:2f:70:3a:54:97:f0:7f:57:55:
                    d2:4b:16:c4:a8:c3:1e:de:7d:eb:2a:e1:86:a3:e2:
                    05:9d:bf:ed:fa:4f:e9:cd:ec:f7:bd:6f:81:f8:78:
                    f5:1a:9d:95:09:71:1b:e1:60:e1:a5:db:d8:27:32:
                    63:6e:51:3c:6e:b0:fc:37:c5:af:87:2a:76:f3:38:
                    5d:b7:21:4e:c5:8a:2f:3f:53:5f:5f:f2:4e:c6:d1:
                    ec:b6:8c:b0:9e:cc:3f:9b:2d:47:de:38:43:7b:2e:
                    a8:0b:58:ba:86:1f:29:fc:a7:94:db:18:40:88:95:
                    bd:7c:80:5d:2a:26:54:41:e4:1c:10:2d:fd:04:36:
                    c2:bc:c5:da:64:27:ce:5c:47:96:03:e0:7f:94:ad:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:59:A8:38:61:B0:DC:14:77:79:B8:BC:81:95:F0:59:56:B3:85
            X509v3 Authority Key Identifier:
                keyid:BB:65:14:2B:90:77:4F:90:92:42:0B:1F:DF:4C:67:ED:73:7E:D8:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2UUK5B3T5CSQgsf30xn7XN-2LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/Do9ZqDhhsNwUd3m4vIGV8FlWs4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/u2UUK5B3T5CSQgsf30xn7XN-2LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:e2:34:3a:74:ad:03:28:3e:94:35:4a:2c:29:f7:c9:c4:
         d6:9e:52:44:9d:cb:04:5b:28:4e:8a:eb:ff:96:a4:d4:3a:97:
         ed:12:1d:6b:72:34:d9:83:7d:d7:f1:11:61:77:91:4c:97:98:
         7e:5c:59:a2:f5:3a:01:c6:34:d0:66:0b:2c:c1:f9:1f:d0:4b:
         00:43:ae:e0:8e:22:6f:35:11:d1:18:35:b7:b1:c3:3e:c6:3b:
         de:64:5f:1b:84:b9:0a:b7:c1:0d:87:55:c6:c0:f6:49:d4:13:
         f1:7b:4c:77:98:84:20:98:10:62:63:d1:af:84:cf:af:35:2e:
         ed:3c:37:ba:88:e7:ae:5c:eb:ab:c7:a0:ce:ce:eb:85:3d:af:
         f9:11:3d:eb:e1:33:fc:b3:ec:fa:0b:58:26:c5:9e:ae:d5:6d:
         db:05:b6:a5:98:4b:29:f3:10:1d:ee:b2:34:07:47:99:29:cd:
         d3:c9:aa:84:91:59:69:c5:e8:36:10:00:64:fd:1d:be:ca:87:
         87:58:34:65:58:03:d1:67:06:af:19:fc:73:96:9e:0f:7c:1f:
         8d:a8:70:c0:65:6d:33:cf:1c:2a:d9:2d:6a:76:a0:a0:e2:e5:
         ee:55:02:bf:02:67:36:34:06:e1:4e:c7:d7:bc:0e:1e:9f:50:
         84:52:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:19 2024 by rpki-client on console-ams.rpki-client.org