Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/6wYMzMXA_GINJZ9QMWD8UocvQjQ.roa
File:                     6wYMzMXA_GINJZ9QMWD8UocvQjQ.roa (raw, json)
Hash identifier:          SXlQ4af3SDkonSXpEJqnxljnvzRlERX2lpBZKQdLe48=
Subject key identifier:   EB:06:0C:CC:C5:C0:FC:62:0D:25:9F:50:31:60:FC:52:87:2F:42:34
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       01884CFCF37FE93F4D1ADDF12B22CD3F53A6
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/6wYMzMXA_GINJZ9QMWD8UocvQjQ.roa
Signing time:             Wed 24 May 2023 09:00:25 +0000
ROA not before:           Wed 24 May 2023 09:00:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        194.59.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4c:fc:f3:7f:e9:3f:4d:1a:dd:f1:2b:22:cd:3f:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: May 24 09:00:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb060cccc5c0fc620d259f503160fc52872f4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:b2:75:b8:08:5f:07:90:9e:af:85:8f:39:
                    aa:8f:39:69:06:d0:75:64:0d:dc:71:44:9e:7e:f3:
                    a4:87:b3:91:38:9a:84:44:62:37:bd:3c:4b:a7:ab:
                    9e:10:b0:20:f8:98:6a:1a:27:57:aa:15:b2:dd:d8:
                    6b:79:58:9c:b8:86:5d:52:a1:95:86:f4:8e:4c:e6:
                    4e:9d:44:d4:70:14:ee:c8:89:be:28:5e:fe:06:c1:
                    df:17:10:ed:44:d9:3d:42:35:0a:a6:1f:0d:9d:fc:
                    7d:82:a8:ee:c9:f0:95:b3:13:d4:8a:de:b2:69:06:
                    3b:5d:e6:92:af:c6:60:b3:95:07:f8:ed:d9:9f:cd:
                    0f:55:20:5f:02:e0:25:bf:f8:42:c2:51:a2:f4:38:
                    07:7c:e2:e9:fc:e7:26:dd:2b:3a:c8:60:4b:06:56:
                    70:29:09:6b:42:91:a3:7c:d5:4d:d5:5a:d2:89:b6:
                    7b:d5:26:50:50:21:3c:63:5b:0e:e9:03:d0:33:4a:
                    5a:f5:32:a3:db:46:8b:1f:09:ea:0d:9b:6d:7e:9d:
                    83:e4:d9:ec:d2:1a:f9:68:d8:6f:2b:7a:ca:0b:bf:
                    50:c3:3d:74:c0:6c:41:cc:8e:3d:17:fa:e3:d3:6a:
                    67:c9:8d:69:d3:8e:16:ca:92:88:52:47:3f:c3:b4:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:0C:CC:C5:C0:FC:62:0D:25:9F:50:31:60:FC:52:87:2F:42:34
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/6wYMzMXA_GINJZ9QMWD8UocvQjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:ed:2e:e0:38:d2:9e:d8:b4:5e:bf:9c:d0:2f:c4:0c:00:
         3c:4e:c3:9a:32:70:8e:cd:7b:36:59:40:64:d9:3f:0a:5e:3c:
         81:2e:28:e4:49:8f:4b:e3:6e:8c:f0:8f:9a:d7:6b:3d:f9:1a:
         ce:b1:d9:4e:e4:3a:90:84:89:bf:56:1e:8d:be:21:a6:da:0c:
         0d:ba:52:dd:00:9c:29:4e:0d:1d:7c:d3:df:2e:1d:38:fb:89:
         17:08:5d:e3:f0:66:c9:4b:10:bc:d5:80:90:0d:40:a2:80:be:
         9e:ed:49:5d:c6:b7:46:c9:a0:9a:0d:d6:8a:00:7d:c8:a4:d4:
         5c:3e:6d:97:91:d7:49:b0:90:03:1b:91:14:ff:3a:d1:67:a3:
         05:80:ea:52:a0:6b:71:f8:53:cb:38:1f:4d:6b:ff:78:72:52:
         0a:c1:9c:eb:ac:72:7d:ad:87:b6:60:26:02:38:2e:6e:00:20:
         9c:ae:a1:fe:e7:21:0b:97:8d:8c:36:c5:3b:20:0d:50:68:88:
         73:f7:0c:1c:ff:d6:22:6e:52:b9:16:83:b9:29:22:2b:64:99:
         89:ab:c3:1e:d6:d2:c7:a7:c0:76:66:0c:35:71:1d:95:90:53:
         e2:07:5a:86:2b:25:8a:32:cf:3b:a7:ee:65:6c:03:fa:6a:b4:
         fd:f3:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org