Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/I83unDAgrIDGzOF6e-3EoSG5-Qw.roa
File:                     I83unDAgrIDGzOF6e-3EoSG5-Qw.roa (raw, json)
Hash identifier:          mbDYrUTB2xP8uxDro140rGdVHlRWFbv5VDyH4ULMgOc=
Subject key identifier:   23:CD:EE:9C:30:20:AC:80:C6:CC:E1:7A:7B:ED:C4:A1:21:B9:F9:0C
Certificate issuer:       /CN=0692d72f4ef3d742d725a5b7a92fac56160b925c
Certificate serial:       01862104BC71E8921EBF743DCB77C0539C92
Authority key identifier: 06:92:D7:2F:4E:F3:D7:42:D7:25:A5:B7:A9:2F:AC:56:16:0B:92:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLXL07z10LXJaW3qS-sVhYLklw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/I83unDAgrIDGzOF6e-3EoSG5-Qw.roa
Signing time:             Sun 05 Feb 2023 10:00:03 +0000
ROA not before:           Sun 05 Feb 2023 10:00:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57641
IP address blocks:        178.22.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:21:04:bc:71:e8:92:1e:bf:74:3d:cb:77:c0:53:9c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692d72f4ef3d742d725a5b7a92fac56160b925c
        Validity
            Not Before: Feb  5 10:00:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23cdee9c3020ac80c6cce17a7bedc4a121b9f90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:a1:40:ae:9c:f1:60:6a:45:71:3c:e7:ee:
                    f9:78:86:78:54:aa:aa:43:e1:e6:c4:be:19:98:04:
                    ef:79:6d:e4:7b:8f:36:8f:a8:98:13:bd:d0:e5:dc:
                    61:f3:ff:8a:f5:00:29:b7:21:b1:22:6f:8b:83:28:
                    b0:42:8e:b1:11:36:e2:71:0b:15:c3:42:9b:24:58:
                    2d:cc:e2:4d:a9:59:5d:de:98:7f:98:42:23:26:30:
                    9b:c5:23:0b:ef:fb:1b:62:3e:dc:f0:cf:c0:3c:98:
                    19:12:f0:83:15:26:cc:88:70:e5:82:14:41:5e:ba:
                    ee:30:a9:e0:58:ca:bb:cd:56:9a:9e:85:7f:76:94:
                    45:5e:1e:37:4b:80:d9:9b:94:00:30:16:08:a0:62:
                    93:aa:3b:88:e3:ce:05:26:7f:bf:af:44:97:1c:d5:
                    29:dc:b6:a8:53:03:e1:43:3a:4a:00:3b:36:50:97:
                    60:b9:22:2d:8b:c2:ff:c7:e1:1d:65:cf:a1:e3:86:
                    15:ac:4b:66:1e:26:ff:5d:7e:3d:d3:91:fa:e1:9c:
                    a0:d3:aa:fd:1e:95:18:66:7a:ea:48:47:77:dd:12:
                    4e:8c:32:c6:1a:c5:59:4d:bc:c1:44:0d:11:b1:29:
                    11:3c:cd:2f:46:0f:64:0d:c3:e4:8b:56:db:12:d6:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CD:EE:9C:30:20:AC:80:C6:CC:E1:7A:7B:ED:C4:A1:21:B9:F9:0C
            X509v3 Authority Key Identifier:
                keyid:06:92:D7:2F:4E:F3:D7:42:D7:25:A5:B7:A9:2F:AC:56:16:0B:92:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLXL07z10LXJaW3qS-sVhYLklw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/I83unDAgrIDGzOF6e-3EoSG5-Qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/BpLXL07z10LXJaW3qS-sVhYLklw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:06:b6:43:01:8f:3b:72:a3:4d:c0:4d:05:ec:af:c5:d6:
         3d:69:e5:03:de:41:22:fc:51:7b:81:1f:3a:8e:b0:fa:3f:28:
         c3:3c:71:3e:7c:db:ea:71:1a:8f:93:a8:47:56:e3:b1:0c:7f:
         0b:0c:73:39:86:52:d6:18:1f:6a:15:31:b6:34:ce:7f:4b:f7:
         5e:c4:94:aa:c8:da:6e:a8:88:e9:12:b8:66:85:4b:35:18:37:
         87:fc:0e:de:e6:81:59:2a:3b:27:6f:07:67:d0:21:aa:da:ee:
         37:ca:fc:66:74:b5:40:ac:a9:74:08:64:63:45:11:94:12:8e:
         ce:21:35:aa:e2:38:ca:c8:0e:b1:07:a0:ee:03:36:eb:96:93:
         02:7c:33:80:d1:78:db:6d:04:69:47:52:00:d8:34:0f:db:07:
         a3:a6:5c:7e:bc:af:68:c0:c6:98:7f:d9:55:44:6f:82:98:e1:
         b8:11:e6:e2:3f:cf:c4:d5:69:35:bb:35:42:3c:39:e1:6c:36:
         05:76:7a:34:c2:5d:52:09:c5:9d:f7:03:00:b3:bd:04:19:90:
         33:71:87:58:51:9c:01:92:6e:a6:78:b9:d8:59:a1:bd:af:58:
         92:6a:0e:bc:f6:de:b1:3e:74:15:8a:dd:67:e5:35:95:9c:31:
         3f:e0:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:53 2024 by rpki-client on console-fra.rpki-client.org