Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/SUOaFp4FB8L6Bv1vjKSY1W6dhOY.roa
File:                     SUOaFp4FB8L6Bv1vjKSY1W6dhOY.roa (raw, json)
Hash identifier:          MeSblSkuj4hCbzny5Yp9J10MwDC4je3aX5xP/6EA+uo=
Subject key identifier:   49:43:9A:16:9E:05:07:C2:FA:06:FD:6F:8C:A4:98:D5:6E:9D:84:E6
Certificate issuer:       /CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Certificate serial:       018ACED1
Authority key identifier: 53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/SUOaFp4FB8L6Bv1vjKSY1W6dhOY.roa
Signing time:             Wed 02 Feb 2022 12:04:58 +0000
ROA not before:           Wed 02 Feb 2022 12:04:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        83.138.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25874129 (0x18aced1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
        Validity
            Not Before: Feb  2 12:04:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49439a169e0507c2fa06fd6f8ca498d56e9d84e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:5e:70:c2:5c:3d:d0:21:25:1c:be:4a:da:
                    f1:37:3f:fc:98:ca:19:d4:e2:12:41:c3:a1:35:97:
                    28:16:e1:f6:62:38:d1:f3:d1:cf:e9:f3:09:f3:ed:
                    34:01:b1:86:80:64:50:40:6e:72:28:2e:9f:cd:36:
                    e1:14:aa:20:d1:39:fb:d5:03:73:21:88:e0:8e:a2:
                    b6:74:a5:15:22:59:7b:43:a3:c4:e3:44:df:91:f8:
                    c2:13:cf:c1:9e:d5:3e:17:05:37:0a:f3:ce:de:a4:
                    2a:47:b7:0e:2a:8a:e7:2c:33:a7:ae:a6:4a:05:a2:
                    ee:aa:57:58:5f:68:ef:33:2c:ea:04:31:ce:ef:ca:
                    d5:6d:71:fc:df:10:ac:05:a6:8a:bb:f6:96:6f:a4:
                    d2:ab:64:b3:c6:07:48:50:51:0c:df:fa:af:eb:f9:
                    76:2b:8e:02:ac:7b:2b:f2:77:86:5a:c0:cf:14:60:
                    b2:73:95:b8:b1:65:78:20:c8:64:45:de:a4:4f:80:
                    af:85:e4:fa:0b:16:aa:e8:2d:ec:f0:36:e6:5e:ba:
                    c3:0c:a5:81:44:b9:6c:82:9c:6d:a2:fb:14:a9:83:
                    a3:ee:37:ea:ef:40:93:86:47:20:9d:3c:8b:05:c8:
                    e9:cf:4b:92:96:2a:e9:a0:5f:1f:87:83:f4:54:4d:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:43:9A:16:9E:05:07:C2:FA:06:FD:6F:8C:A4:98:D5:6E:9D:84:E6
            X509v3 Authority Key Identifier:
                keyid:53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/SUOaFp4FB8L6Bv1vjKSY1W6dhOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:6c:b9:1f:6d:8b:50:21:2c:02:b5:df:83:bb:d9:b6:7e:
         3f:d6:fe:68:4b:5f:e3:e7:1c:73:1a:e4:22:f2:2d:1d:dd:79:
         26:e3:85:a9:d6:83:96:46:cf:c2:4a:6e:b3:75:ed:a9:90:7c:
         55:d2:a3:11:d5:77:d2:ea:0a:71:fe:d1:67:83:d2:71:cd:bd:
         71:16:b6:84:05:91:a1:1d:49:40:f3:7b:87:07:67:41:55:7d:
         88:ed:4d:99:f8:a4:ff:f2:99:3c:de:5d:6d:37:3f:6e:c3:39:
         61:2d:ca:e2:fc:b4:2d:a7:ad:8b:7b:1b:29:c9:4a:f7:34:97:
         4a:10:a6:5c:cc:81:27:c9:ba:bb:0b:24:8d:ca:b5:2c:30:c8:
         9d:00:f8:ac:14:7b:fb:69:bb:0b:02:be:0f:9e:8e:70:b7:a5:
         90:cb:52:e2:92:bd:e7:aa:a3:28:54:5e:e6:11:17:06:21:99:
         74:81:26:dc:4f:8a:23:53:9a:fd:3b:e3:70:0a:b2:e6:1b:62:
         01:65:47:fb:1e:60:68:67:30:8f:bb:49:97:f0:ea:87:25:70:
         b2:8b:17:96:f6:f1:55:6f:bb:d5:02:47:fc:b0:a5:63:8a:07:
         68:d9:ef:25:7b:bc:0e:e2:08:0d:66:2b:c3:3c:94:ca:2b:26:
         80:25:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:23 2024 by rpki-client on console-ams.rpki-client.org