Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/uSOBAxSvfnZWMu-yebubqwYEj3Y.roa
File:                     uSOBAxSvfnZWMu-yebubqwYEj3Y.roa (raw, json)
Hash identifier:          kPOPbLi5+bfsZXEc5Jj1qnz6JSrmn2TdvdNMjEbahcw=
Subject key identifier:   B9:23:81:03:14:AF:7E:76:56:32:EF:B2:79:BB:9B:AB:06:04:8F:76
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       018CC94AC06AB41BB4CD8ED4810AF8DF9C4C
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/uSOBAxSvfnZWMu-yebubqwYEj3Y.roa
Signing time:             Tue 02 Jan 2024 08:29:28 +0000
ROA not before:           Tue 02 Jan 2024 08:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61317
IP address blocks:        194.59.8.0/24 maxlen: 24
                          194.59.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4a:c0:6a:b4:1b:b4:cd:8e:d4:81:0a:f8:df:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Jan  2 08:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b923810314af7e765632efb279bb9bab06048f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:0d:c0:93:41:64:33:15:06:3c:e3:28:9b:
                    37:65:ad:0a:89:cf:09:de:36:03:6c:e8:1a:8b:7e:
                    44:cd:d0:89:03:6e:ed:e4:11:13:fa:5d:b3:6d:a2:
                    28:e2:4d:5a:c8:2f:1d:da:d0:66:a1:2c:9d:ae:c8:
                    dc:82:64:e4:42:ff:c8:8a:fc:dd:81:1c:d3:c8:be:
                    47:2a:fd:5e:43:8d:b2:a8:80:8e:5c:e8:33:10:7b:
                    c9:a9:0a:b6:3a:ca:19:04:c1:a3:e1:a3:6d:80:d6:
                    da:0a:25:3e:4b:cd:52:58:d9:da:d8:1a:e9:78:5b:
                    d4:80:48:0b:3d:87:de:02:53:5d:9d:d2:be:6d:e0:
                    a6:18:1f:6e:72:67:f8:a4:9a:e3:82:27:6e:28:6d:
                    0f:35:93:ad:b0:84:ac:2f:09:64:4f:26:b1:a0:94:
                    71:ac:06:6b:fa:11:fe:44:65:f1:26:8b:38:7e:16:
                    27:1f:33:cb:7d:d0:54:3c:a8:f0:0b:24:dd:f6:ef:
                    e9:32:78:f8:d7:a7:eb:1a:bf:7d:ff:c0:6a:8b:d4:
                    03:b8:1d:ad:e0:7c:d9:26:6c:61:ab:e0:a8:89:64:
                    d6:bc:8f:47:41:bd:dc:13:45:b3:f4:00:43:cb:88:
                    2a:04:7a:41:41:12:d2:b6:dd:e3:e2:6a:19:43:ff:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:23:81:03:14:AF:7E:76:56:32:EF:B2:79:BB:9B:AB:06:04:8F:76
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/uSOBAxSvfnZWMu-yebubqwYEj3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.6.0/24
                  194.59.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:55:1d:5b:db:2f:46:2d:b9:82:0f:69:72:cf:9c:c4:fa:d8:
         4e:28:0c:2c:cf:a7:e2:75:9f:80:86:4c:7c:c9:f4:f5:aa:f3:
         4a:ab:2a:0e:3f:e1:dd:a9:fd:54:33:04:38:64:26:b9:f3:60:
         d2:bf:74:53:a1:19:9d:3e:10:59:51:c5:d2:f7:7d:28:e2:bc:
         02:12:a1:ac:ed:c7:c4:12:63:94:10:34:83:a9:c8:8b:ac:e6:
         82:25:b9:2a:73:e0:f1:b9:58:82:d0:fe:e3:f8:49:90:15:60:
         6c:f8:a1:58:58:d1:cc:00:f0:d9:87:ec:30:cf:69:f7:0f:4d:
         ef:cc:3d:f6:08:c0:1b:df:e6:51:2f:7f:50:57:0a:76:f7:e2:
         b4:75:5a:10:33:78:5d:9c:f4:6e:2f:f1:d1:80:81:31:49:d0:
         c1:d1:8d:c2:6d:5f:6d:73:88:f4:ac:99:c0:e4:b3:2c:bc:ef:
         47:28:db:73:5a:44:a9:ee:5e:8d:be:5d:c2:33:c4:d0:55:12:
         a8:d9:87:e4:b4:e4:85:bd:4b:22:97:fb:fd:9b:ae:cd:5f:b5:
         6a:a5:e0:cd:0b:07:32:30:dc:7c:0f:a9:c9:0a:ec:5a:06:ba:
         58:97:0c:91:63:99:c6:3e:84:fd:32:2d:b1:d0:13:bb:f7:32:
         f4:54:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-fra.rpki-client.org