Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/erjPKCfiUG42cLMHrDDHemiWcjU.roa
File:                     erjPKCfiUG42cLMHrDDHemiWcjU.roa (raw, json)
Hash identifier:          n8j3P99RgXrWjGfmVsA07Mnc6bYY5ve9O41MCIky47I=
Subject key identifier:   7A:B8:CF:28:27:E2:50:6E:36:70:B3:07:AC:30:C7:7A:68:96:72:35
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       018B2471BE77B0BECB627AD629931D4CD4B4
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/erjPKCfiUG42cLMHrDDHemiWcjU.roa
Signing time:             Thu 12 Oct 2023 15:11:55 +0000
ROA not before:           Thu 12 Oct 2023 15:11:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9087
IP address blocks:        194.59.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:24:71:be:77:b0:be:cb:62:7a:d6:29:93:1d:4c:d4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Oct 12 15:11:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ab8cf2827e2506e3670b307ac30c77a68967235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:2a:ad:e4:7b:19:0e:e0:65:07:df:77:7d:
                    a0:7b:d3:52:d6:c4:21:29:22:bb:10:41:40:ad:55:
                    26:0c:d0:c1:4f:cd:30:8c:69:07:3e:10:41:b9:0c:
                    94:1c:e7:5c:bc:22:f6:f7:87:8e:80:3e:fc:51:4e:
                    24:5e:e7:3d:7a:13:25:01:9a:c9:8c:0e:15:0a:f3:
                    93:ab:92:77:f8:1c:6d:3b:a0:3a:a7:c3:1e:80:ba:
                    7d:cb:88:52:4e:e3:a0:74:7b:5f:bf:27:0b:d0:9c:
                    79:b1:d8:ff:4a:f7:e4:ba:26:6d:01:7f:fe:7c:ca:
                    5b:b0:6f:98:5f:cf:3e:d5:0e:85:e3:47:95:4c:bf:
                    29:83:d2:5b:c3:4e:71:2b:cd:4e:c8:3e:67:c0:19:
                    97:52:e5:be:cb:5c:93:52:77:63:91:c9:cb:64:21:
                    81:0d:5a:3e:cf:e9:32:eb:db:ea:35:ce:c0:7d:6b:
                    07:a1:71:2d:a6:8d:80:07:76:c7:2b:a5:0e:ea:1e:
                    da:6e:9f:72:62:e8:b1:1c:ff:d1:e2:48:5e:b6:41:
                    29:8c:51:f7:4d:16:ef:65:fa:81:87:60:4f:17:53:
                    31:59:0c:b7:89:87:25:0d:cd:8c:ea:47:69:c0:14:
                    1e:3a:05:be:29:fc:4f:64:f0:bf:c9:e4:2e:ff:ba:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:CF:28:27:E2:50:6E:36:70:B3:07:AC:30:C7:7A:68:96:72:35
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/erjPKCfiUG42cLMHrDDHemiWcjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:98:fa:a5:e1:92:23:de:1c:cc:ee:59:32:9d:2a:eb:47:
         bc:1a:b5:9b:25:46:aa:77:71:66:65:94:a6:e5:4f:97:ea:41:
         ae:9b:43:20:a7:42:7e:0b:75:1d:72:23:20:15:b8:b7:9b:ae:
         44:d1:32:9e:54:d6:9f:01:82:8c:8f:55:3b:ec:79:73:a2:c3:
         77:c9:ff:25:a5:de:d7:d8:d2:c3:91:08:a0:90:87:79:21:6a:
         11:bd:79:77:42:f9:c2:3d:01:61:a8:8f:5c:88:ea:21:af:4b:
         02:ce:93:58:d7:0d:b3:34:94:dc:55:5f:f9:ee:8a:46:37:fe:
         aa:86:98:56:7a:fe:5f:c5:de:15:bd:39:30:8a:44:c6:22:bf:
         20:f3:22:b3:b0:e9:6d:b6:e2:b8:87:76:b5:20:22:86:75:a5:
         ae:62:15:50:54:05:25:b4:b4:42:52:ec:78:4b:02:87:3d:57:
         1c:63:cf:07:2b:1a:7d:a9:d9:e0:90:12:11:83:5a:03:74:a2:
         c5:79:3e:e8:9f:21:ae:b2:d6:78:68:95:5d:b9:aa:5c:96:71:
         65:82:d4:ce:35:d7:db:eb:fd:12:a8:dd:94:95:86:53:ca:9f:
         f6:c8:54:1b:e5:2f:2d:f7:1b:2b:0f:c2:ce:4d:5e:06:c4:f8:
         8f:34:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org