Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/d_N4kreGeyS4QCS9w8Kz-3at6Uo.roa
File:                     d_N4kreGeyS4QCS9w8Kz-3at6Uo.roa (raw, json)
Hash identifier:          LvGuy9IFKhoTLNrSKd/cskCLjQx+5RfTZcYaFdeGd7k=
Subject key identifier:   77:F3:78:92:B7:86:7B:24:B8:40:24:BD:C3:C2:B3:FB:76:AD:E9:4A
Certificate issuer:       /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial:       018A40DE4C868DA1CB68F0B6138A9B93680A
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/d_N4kreGeyS4QCS9w8Kz-3at6Uo.roa
Signing time:             Tue 29 Aug 2023 10:37:04 +0000
ROA not before:           Tue 29 Aug 2023 10:37:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        194.146.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:de:4c:86:8d:a1:cb:68:f0:b6:13:8a:9b:93:68:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
        Validity
            Not Before: Aug 29 10:37:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77f37892b7867b24b84024bdc3c2b3fb76ade94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:91:50:25:e5:11:98:54:fe:b1:b7:97:35:
                    c7:d1:46:ac:71:fa:c4:cd:90:62:5f:0d:29:9b:a2:
                    4d:e6:67:40:51:08:fa:99:78:93:45:9d:6b:62:12:
                    53:a3:8a:f6:ff:61:45:e8:73:a1:e4:ca:39:10:df:
                    0a:9e:2d:15:ce:56:87:1e:ac:53:b4:98:06:78:2b:
                    b8:bd:2a:25:1c:90:cc:c1:c7:ae:80:7a:43:2c:0f:
                    05:b6:9e:6f:5c:4c:09:7c:da:a0:0d:78:40:53:99:
                    ea:2f:8a:78:26:20:cd:02:0f:93:e0:24:23:9a:50:
                    96:86:ad:57:8a:0b:35:7a:3a:81:29:ee:28:0c:df:
                    40:a3:79:39:56:9b:de:79:46:f6:b0:7e:cb:6a:10:
                    66:60:1d:2f:2f:88:fc:06:8d:b2:f1:1d:ce:4e:e8:
                    68:42:36:e5:70:1f:c5:ec:c1:d0:91:c9:87:4c:bb:
                    9b:c6:bd:3c:10:6b:f7:0d:3d:0f:6f:23:21:c8:49:
                    45:35:eb:cc:ee:01:e3:3b:0f:3d:44:49:31:71:99:
                    d8:0f:5b:43:8b:b1:1e:62:ed:02:28:ce:90:21:25:
                    14:18:76:6d:93:fe:ab:56:c4:27:29:a4:85:3e:4a:
                    d2:b6:8e:6e:49:f8:b6:1c:1c:1a:8d:8f:21:6b:ae:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:78:92:B7:86:7B:24:B8:40:24:BD:C3:C2:B3:FB:76:AD:E9:4A
            X509v3 Authority Key Identifier:
                keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/d_N4kreGeyS4QCS9w8Kz-3at6Uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.146.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:19:49:4c:0c:cc:8f:1d:87:96:6b:a4:a5:bf:00:10:77:
         3b:61:dd:45:22:71:e8:92:23:c8:fa:f9:65:0a:57:31:16:36:
         fa:2b:75:ec:9b:09:94:b4:ca:e0:53:10:50:c2:13:2b:9b:88:
         1a:3c:1f:ea:16:e8:61:89:ba:2f:4c:a3:04:7e:43:b7:6e:68:
         1f:6d:1b:8b:81:87:80:42:3c:9e:10:1c:ba:b5:35:70:6e:80:
         7a:0b:2c:f1:c3:39:da:fb:86:93:4b:96:b4:55:d8:2e:de:31:
         e0:fd:6d:1e:1f:b0:d3:17:ef:7b:90:67:8c:d1:fc:56:ac:81:
         ed:c0:c9:28:25:a4:de:21:ff:f9:f4:e5:eb:ff:57:92:73:49:
         d4:0e:8a:10:a5:7c:de:cf:8f:ae:51:0f:c1:63:81:17:30:cb:
         58:c6:33:80:57:e1:62:93:ac:d2:69:d7:8a:70:93:42:65:fb:
         03:59:ad:47:e3:b4:6f:aa:1e:64:1a:35:7a:34:22:3e:37:a4:
         09:c5:b7:66:ec:07:ba:e2:c5:f0:06:20:11:ea:34:5b:db:ff:
         67:16:f4:d4:a4:61:0c:c7:58:53:37:b3:29:55:7c:16:37:e5:
         05:2d:03:f2:7c:af:4a:a8:ef:1d:9b:12:af:76:c9:93:c5:0f:
         b0:f7:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org