Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa
File:                     1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa (raw, json)
Hash identifier:          aZW+wsV8lr7w5p6jXaA7UIHrxa3CX2SEVUEhjQOwWNE=
Subject key identifier:   F9:1D:1B:87:D9:89:E4:68:8C:07:A6:8E:7C:E3:4C:9F:53:B3:D3:B9
Certificate issuer:       /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial:       01869BFAB9DB45D605508B600AF46EE5E90E
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa
Signing time:             Wed 01 Mar 2023 07:02:25 +0000
ROA not before:           Wed 01 Mar 2023 07:02:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     32097
IP address blocks:        37.140.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9b:fa:b9:db:45:d6:05:50:8b:60:0a:f4:6e:e5:e9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
        Validity
            Not Before: Mar  1 07:02:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f91d1b87d989e4688c07a68e7ce34c9f53b3d3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:0d:80:c5:7a:c7:74:0a:9b:17:f4:5c:ac:
                    67:d6:a1:be:1a:f0:02:3a:86:c3:13:96:fd:08:c3:
                    c8:7d:44:eb:34:d3:71:ca:22:56:a7:1a:b4:05:51:
                    f7:a7:dc:ec:2d:ca:e8:c7:13:9b:14:a9:6f:bc:ef:
                    3f:0f:e0:70:f0:3f:dd:c5:42:b4:13:05:56:e9:76:
                    c1:f2:b7:7a:28:1a:f5:87:ca:3f:82:0c:62:0e:47:
                    78:61:8c:e2:d3:c9:ee:64:0d:7c:bb:81:ce:60:ee:
                    8d:d1:b9:82:54:7b:07:f2:b8:7e:1c:3c:ae:77:03:
                    09:fd:61:f2:90:84:5f:88:2e:b1:8c:96:15:41:5b:
                    92:87:d4:3e:8f:39:26:92:ee:a0:41:59:6b:1f:11:
                    bb:df:6e:45:4a:4e:57:c4:01:0a:f0:d3:c5:d0:d3:
                    3a:a3:4b:85:98:35:30:b5:2c:06:71:d2:45:99:5d:
                    f2:3d:9d:dc:f0:5e:2d:fb:d9:1e:8e:d5:7f:86:f3:
                    c7:ae:07:3e:47:d2:5e:15:05:12:ca:81:9f:b4:c4:
                    15:ab:99:1b:18:55:f1:98:06:47:23:9a:af:1a:89:
                    72:70:b4:6d:02:b7:43:3b:2d:26:d0:cb:35:86:b2:
                    e7:cc:c3:e1:8a:17:f0:2c:84:ea:8c:76:b1:4c:f8:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:1B:87:D9:89:E4:68:8C:07:A6:8E:7C:E3:4C:9F:53:B3:D3:B9
            X509v3 Authority Key Identifier:
                keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:84:02:0e:f8:c1:d2:45:08:6d:ac:d0:4e:a7:77:c5:74:ef:
         73:68:e1:69:28:fc:3d:ad:97:7e:cc:5a:f9:6d:59:7d:ad:5b:
         48:d4:2d:9c:49:b4:71:25:00:b3:4f:f2:c9:ec:24:70:57:a4:
         01:68:2b:92:82:23:b0:7d:4e:00:f8:4d:af:b5:2a:1c:ee:52:
         62:9b:11:be:eb:e3:d3:0c:3e:08:22:98:1c:1b:86:85:2e:cd:
         06:d9:da:5b:8d:d8:fc:dd:68:a9:90:6a:ad:da:49:aa:28:fd:
         09:1c:a3:00:7b:02:b3:a9:4c:a3:e1:8f:a8:1e:72:09:a5:44:
         e1:20:6d:16:f7:2c:46:af:96:54:d9:26:7a:a1:32:70:e7:ed:
         12:81:58:11:b7:6b:5e:d6:37:33:9d:0a:40:2c:e3:e8:4a:56:
         54:4b:4c:dd:35:bb:78:06:ba:c4:ea:86:4f:20:2c:b3:d8:58:
         a6:94:ce:f0:1f:f5:cd:0d:8e:bb:86:b1:e6:28:b9:1a:b2:e9:
         9a:23:d6:a3:2b:50:cd:86:da:b2:83:e8:63:6f:67:19:15:0d:
         7f:cc:12:ea:44:37:5e:f6:a7:35:9a:0d:c7:97:45:19:a5:ed:
         fa:49:e9:39:d9:14:4d:56:47:19:0a:b9:c0:b1:a9:2a:85:be:
         6c:3c:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org