Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/Bl8AlGpSHuC7a6ExdOfdt49CiYE.roa
File:                     Bl8AlGpSHuC7a6ExdOfdt49CiYE.roa (raw, json)
Hash identifier:          gEtdPMmwOo1IVfoInyI1fQP5axHY1GOX5aPgB7grtqI=
Subject key identifier:   06:5F:00:94:6A:52:1E:E0:BB:6B:A1:31:74:E7:DD:B7:8F:42:89:81
Certificate issuer:       /CN=6ae6e8f83a51fbf4b6f53f269e9127f41c1f0af9
Certificate serial:       018755B8E8E213A1514152BAFBB65B51C13A
Authority key identifier: 6A:E6:E8:F8:3A:51:FB:F4:B6:F5:3F:26:9E:91:27:F4:1C:1F:0A:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aubo-DpR-_S29T8mnpEn9BwfCvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/Bl8AlGpSHuC7a6ExdOfdt49CiYE.roa
Signing time:             Thu 06 Apr 2023 08:39:54 +0000
ROA not before:           Thu 06 Apr 2023 08:39:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58293
IP address blocks:        193.162.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:55:b8:e8:e2:13:a1:51:41:52:ba:fb:b6:5b:51:c1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae6e8f83a51fbf4b6f53f269e9127f41c1f0af9
        Validity
            Not Before: Apr  6 08:39:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=065f00946a521ee0bb6ba13174e7ddb78f428981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:db:9e:b4:3b:e8:fb:0c:2d:76:e1:78:f7:
                    d1:a8:ba:98:fb:2a:25:26:7c:bc:4e:6b:0b:30:ec:
                    55:24:a1:64:6a:7a:c6:c5:7b:e3:54:1a:5d:07:4f:
                    31:e1:d6:bc:db:78:a8:2d:3d:91:79:86:dc:6d:cc:
                    cc:38:6e:0d:1a:62:65:6b:32:c8:94:72:01:3e:da:
                    39:75:a9:16:a9:21:8f:3c:d8:22:2d:0c:94:e7:ac:
                    cb:96:cf:a0:71:62:ea:d4:2c:5a:33:24:ee:a6:ab:
                    fe:9f:a8:86:17:77:7f:ae:37:2d:52:d7:44:77:de:
                    e9:fa:22:14:4b:5a:fd:5c:77:58:bc:d5:f4:b9:3c:
                    55:9c:95:8a:32:3c:2d:8a:5f:34:00:47:fd:93:09:
                    68:bf:76:2f:3b:84:28:8c:a8:7b:7d:f0:7c:b0:99:
                    4c:48:d7:d6:e0:60:8f:32:75:6e:72:62:4e:9e:20:
                    0c:da:a6:ba:eb:3c:db:a8:e7:66:38:c9:cd:8c:7c:
                    4b:e7:59:51:11:56:0e:9c:eb:26:ca:ce:93:77:e5:
                    a5:ca:95:56:7f:e0:ce:f5:6a:65:26:13:2a:5d:e2:
                    5c:c0:99:3e:01:57:64:24:6c:67:a8:68:63:61:d4:
                    37:0a:92:aa:7f:21:b3:8c:0c:dd:6f:f0:14:89:39:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5F:00:94:6A:52:1E:E0:BB:6B:A1:31:74:E7:DD:B7:8F:42:89:81
            X509v3 Authority Key Identifier:
                keyid:6A:E6:E8:F8:3A:51:FB:F4:B6:F5:3F:26:9E:91:27:F4:1C:1F:0A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aubo-DpR-_S29T8mnpEn9BwfCvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/Bl8AlGpSHuC7a6ExdOfdt49CiYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/aubo-DpR-_S29T8mnpEn9BwfCvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:4a:95:81:5f:3c:b6:89:08:76:7d:41:c5:48:ed:45:6b:
         3b:b6:9a:75:8d:a0:fa:ae:c8:77:5c:9b:b8:3d:c1:a9:9d:33:
         36:dc:29:3b:03:cf:e1:df:7b:21:91:c7:54:db:8d:b1:cc:58:
         33:b7:99:e7:e2:82:87:73:02:ca:18:49:e2:1e:41:75:0d:91:
         c6:4e:3c:8b:ad:98:9f:2d:d4:57:3d:24:92:99:c6:b1:e8:ea:
         5b:91:e0:04:bc:f3:ec:27:2f:ae:3f:10:79:ca:43:b4:b3:42:
         c7:22:02:29:20:c5:58:36:89:0f:db:94:d3:fb:3d:77:d4:bf:
         16:16:d6:8a:57:bb:93:cc:c1:1b:9b:e6:2b:f2:f0:38:90:d5:
         9c:c4:6d:58:61:36:34:7b:01:a0:21:0a:cb:75:32:b8:7b:ac:
         8b:95:2a:31:69:80:60:4a:d5:72:81:15:ac:7d:3c:9e:bd:34:
         d8:25:58:76:31:5f:39:40:54:95:2f:e2:2d:e4:e7:e6:f7:8d:
         6a:93:c6:a9:2b:4a:96:82:01:67:c2:ea:11:ce:90:49:61:64:
         05:4c:5a:46:e4:72:73:d6:8d:87:a9:d3:db:53:25:ed:23:e1:
         ea:16:fd:3c:b7:53:24:95:63:a8:bd:28:15:69:73:c4:5d:b2:
         6e:c7:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org