Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/VJ2VC8rUKs_kCVGj_FPIqMWiBsY.roa
File:                     VJ2VC8rUKs_kCVGj_FPIqMWiBsY.roa (raw, json)
Hash identifier:          URVxhd6wh6QYQbgXfeOFdHocGJHT4LoDrVsy8tTzEZE=
Subject key identifier:   54:9D:95:0B:CA:D4:2A:CF:E4:09:51:A3:FC:53:C8:A8:C5:A2:06:C6
Certificate issuer:       /CN=619480444f41e7f89b3c9d775c01690e14bbc553
Certificate serial:       0188AFE3D9632E24F3423FB6FF7F2B298321
Authority key identifier: 61:94:80:44:4F:41:E7:F8:9B:3C:9D:77:5C:01:69:0E:14:BB:C5:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZSARE9B5_ibPJ13XAFpDhS7xVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/VJ2VC8rUKs_kCVGj_FPIqMWiBsY.roa
Signing time:             Mon 12 Jun 2023 13:55:25 +0000
ROA not before:           Mon 12 Jun 2023 13:55:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.83.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:af:e3:d9:63:2e:24:f3:42:3f:b6:ff:7f:2b:29:83:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619480444f41e7f89b3c9d775c01690e14bbc553
        Validity
            Not Before: Jun 12 13:55:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=549d950bcad42acfe40951a3fc53c8a8c5a206c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:32:18:04:8d:72:96:87:a7:6a:24:5a:07:
                    d9:ad:ff:db:ec:ff:68:59:3c:a9:fd:7e:2b:ad:44:
                    6c:e1:ff:62:0a:fd:3a:71:c0:8d:15:14:e7:93:73:
                    38:58:cd:7a:ef:e3:ff:a5:15:93:8a:6a:9b:42:bb:
                    97:a7:98:df:41:e2:bf:27:45:2e:e2:46:34:c4:18:
                    90:61:49:cc:96:e0:69:ef:a1:a3:8b:13:1b:80:5f:
                    a4:55:ab:05:27:69:8e:d0:7e:bc:20:ad:60:14:92:
                    d1:54:8e:7a:5c:71:13:22:18:35:77:a3:57:5b:42:
                    aa:cd:94:15:0a:97:6d:ad:ef:3d:8d:16:2a:f6:b9:
                    b6:5a:5f:db:6b:9c:40:83:c0:1a:a1:c3:3d:fb:ec:
                    d7:5e:96:0b:d2:fa:3c:33:55:4b:5c:41:9e:96:81:
                    a9:3c:6f:c3:e3:21:be:2c:ea:8a:5c:d5:03:92:62:
                    31:fb:df:f7:87:d8:38:79:3d:66:45:3c:27:93:c6:
                    89:ba:9e:7a:86:3b:2d:b4:8a:6d:0a:bc:fa:77:bd:
                    63:e3:cd:85:43:82:21:e0:32:c3:41:be:30:43:6f:
                    b6:27:13:2f:2f:e7:6d:bd:1a:ad:4a:e8:08:11:a3:
                    46:37:cd:c5:48:b5:ab:41:be:12:c7:cd:88:ad:42:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9D:95:0B:CA:D4:2A:CF:E4:09:51:A3:FC:53:C8:A8:C5:A2:06:C6
            X509v3 Authority Key Identifier:
                keyid:61:94:80:44:4F:41:E7:F8:9B:3C:9D:77:5C:01:69:0E:14:BB:C5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZSARE9B5_ibPJ13XAFpDhS7xVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/VJ2VC8rUKs_kCVGj_FPIqMWiBsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/YZSARE9B5_ibPJ13XAFpDhS7xVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:75:22:9b:14:e5:4e:1a:31:ad:40:df:a9:95:bd:7e:76:1a:
         1b:a8:ff:f5:fd:26:04:f9:b5:85:5c:ff:d5:a6:d2:8e:be:f4:
         32:7f:a8:51:06:86:31:48:c3:b4:0a:bb:59:4b:41:f5:b0:7b:
         e5:f5:e8:f6:7b:6e:03:3c:ae:e6:64:ab:2c:54:e1:ca:1c:68:
         b2:69:19:83:36:af:7b:1f:32:07:ba:c5:e0:13:ca:a2:d1:c3:
         eb:64:cf:a4:c4:d4:e2:ca:ea:38:4a:3b:a6:7f:28:4a:ff:33:
         49:60:c3:bb:fd:d8:75:9c:fe:92:5b:38:4a:82:53:48:04:68:
         02:37:b5:55:72:04:8b:ce:d5:c7:ca:ad:26:23:42:8a:01:0b:
         6f:2c:0d:77:12:a3:e6:05:e3:6f:45:4f:ca:09:62:7b:e0:35:
         d1:d6:ed:b8:98:30:67:f1:42:35:c5:eb:d5:bc:63:69:08:39:
         1c:4d:0b:6f:ef:dd:99:10:ff:ec:c4:f4:c0:38:b1:46:da:cd:
         ad:08:42:4f:72:3d:2e:38:ad:66:59:26:05:d1:fc:96:58:65:
         f5:25:c5:bb:cf:3e:59:f7:b6:86:fc:ab:09:d7:5e:b3:e0:30:
         d8:84:bf:db:16:3c:ee:1a:4a:bd:2d:bb:c2:f0:2d:4b:ba:cc:
         d0:b4:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 18:42:31 2023 by rpki-client on console-fra.rpki-client.org