Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/jdgEuTjYHbDpQ7XOThAijp2uD3o.roa
File:                     jdgEuTjYHbDpQ7XOThAijp2uD3o.roa (raw, json)
Hash identifier:          +0n+7AAd5y1tCaV/ErzBKQagLRaioEx/cLi5B853tIY=
Subject key identifier:   8D:D8:04:B9:38:D8:1D:B0:E9:43:B5:CE:4E:10:22:8E:9D:AE:0F:7A
Certificate issuer:       /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial:       042326AB
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/jdgEuTjYHbDpQ7XOThAijp2uD3o.roa
Signing time:             Tue 18 Jan 2022 10:21:30 +0000
ROA not before:           Tue 18 Jan 2022 10:21:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        194.50.233.0/24 maxlen: 24
                          194.50.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69412523 (0x42326ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
        Validity
            Not Before: Jan 18 10:21:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8dd804b938d81db0e943b5ce4e10228e9dae0f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:c3:28:8f:e8:a9:d5:af:f7:40:c8:da:92:
                    ce:2d:bb:8b:e1:15:95:d2:75:31:74:26:8e:05:a5:
                    1c:24:18:2b:b4:8e:a7:cf:a0:a6:1d:a6:f6:88:ec:
                    01:bd:5c:44:08:ac:31:4d:8c:66:d2:63:c0:ec:4d:
                    71:92:75:e5:51:8f:fe:06:8b:a7:33:30:05:7e:74:
                    20:d2:df:6d:1c:5a:be:e8:47:ae:78:d3:52:72:4f:
                    dc:2e:75:91:3f:2f:ab:10:45:8b:cc:ac:11:24:a8:
                    f3:f2:b9:14:99:85:c9:01:54:4c:a4:0a:ae:57:d9:
                    37:e1:fe:15:03:68:48:94:4f:66:1f:6e:9a:a2:4f:
                    db:8c:99:98:d8:c1:b8:95:c2:87:ad:80:a6:de:5a:
                    1a:1a:94:80:5d:73:17:6a:b5:3f:56:85:8b:c7:fa:
                    63:7e:3c:25:c8:02:b6:f7:fb:a8:a2:f8:73:49:f7:
                    35:c9:d6:86:4d:71:8a:fd:83:65:84:96:4b:03:fb:
                    e3:87:31:b6:d5:ec:60:c2:ac:ac:06:08:1a:07:ec:
                    24:aa:d6:d9:0f:89:9d:e7:04:da:7b:ac:e6:3b:0c:
                    3e:7c:91:a6:31:fb:72:19:f7:e6:53:32:4d:8b:6f:
                    7a:eb:25:7e:c4:4e:89:3b:3b:a0:8b:89:88:f4:6a:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:04:B9:38:D8:1D:B0:E9:43:B5:CE:4E:10:22:8E:9D:AE:0F:7A
            X509v3 Authority Key Identifier:
                keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/jdgEuTjYHbDpQ7XOThAijp2uD3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.233.0/24
                  194.50.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:14:0d:a5:c4:5d:14:11:81:94:6e:1b:a1:78:38:f5:ed:e3:
         1c:15:24:87:73:62:0a:ad:36:60:e6:e3:81:5b:cc:8a:1b:f3:
         e9:15:d6:75:1c:55:43:60:ba:ea:bb:7e:40:07:60:74:74:6e:
         ae:a7:53:ce:1c:5a:d4:03:ec:d4:ad:95:25:87:5a:29:07:64:
         2d:fc:3a:c0:c3:a5:2a:fa:ed:cd:3a:c9:b6:89:0c:95:e7:e1:
         e4:c2:f9:23:f3:b4:28:c6:9a:4e:ce:a3:57:49:e5:b8:f3:16:
         a2:a6:bc:b3:54:81:a1:d7:0f:8d:c6:07:f9:31:e6:4b:09:61:
         44:98:55:d2:1e:d6:22:52:e4:07:a2:8f:06:1f:bf:fa:a1:a6:
         c1:44:c6:f6:8e:8e:95:be:c0:9f:95:68:12:cd:50:5d:c7:73:
         02:51:83:50:b7:4e:41:a5:76:f3:66:36:40:2c:a3:b1:d1:57:
         cc:20:b4:67:84:43:7c:96:30:5e:79:70:b8:95:a4:ec:8c:f3:
         c7:5e:ea:18:65:03:14:2e:63:e4:39:01:87:ab:03:08:03:88:
         ae:5e:53:96:3f:d0:78:d9:99:9f:50:1a:9d:6e:71:32:2e:9d:
         ad:8c:eb:4b:78:60:e2:3a:78:fb:58:d5:83:e8:d8:9c:fb:07:
         bd:58:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org