Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/hs4W-SkWOuOoLltlN-Oc40xuf7Y.roa
File:                     hs4W-SkWOuOoLltlN-Oc40xuf7Y.roa (raw, json)
Hash identifier:          WmEBkSKqGeozqNE4xhGg0Q4cZ7PXquG4kUOVd9Q3Xqg=
Subject key identifier:   86:CE:16:F9:29:16:3A:E3:A8:2E:5B:65:37:E3:9C:E3:4C:6E:7F:B6
Certificate issuer:       /CN=7d16d82f1649b6086b9c9259f31f1f47e0d5ff07
Certificate serial:       0185731601E6EDDBF971135B9518BE9995F5
Authority key identifier: 7D:16:D8:2F:16:49:B6:08:6B:9C:92:59:F3:1F:1F:47:E0:D5:FF:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRbYLxZJtghrnJJZ8x8fR-DV_wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/hs4W-SkWOuOoLltlN-Oc40xuf7Y.roa
Signing time:             Mon 02 Jan 2023 15:25:00 +0000
ROA not before:           Mon 02 Jan 2023 15:25:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        193.150.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:16:01:e6:ed:db:f9:71:13:5b:95:18:be:99:95:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d16d82f1649b6086b9c9259f31f1f47e0d5ff07
        Validity
            Not Before: Jan  2 15:25:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=86ce16f929163ae3a82e5b6537e39ce34c6e7fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:02:59:2c:fe:c1:d7:39:49:70:75:dc:b1:
                    cf:6d:c9:ab:04:25:4e:48:d7:f0:8f:cd:54:e3:85:
                    a4:b0:1b:8d:ad:5b:42:77:23:97:8f:5e:da:2c:c8:
                    f3:3b:46:6c:a8:80:70:98:54:66:68:bc:69:7e:4f:
                    21:8d:38:01:6c:5b:c2:47:3e:71:b4:a3:51:ae:b1:
                    f1:ed:36:a4:db:f9:73:66:07:f8:ed:d7:1b:8f:cf:
                    86:2f:79:f8:bd:0e:2b:4e:46:b3:d6:9b:9d:75:d5:
                    c3:c8:30:38:34:35:a4:ad:b9:1e:9d:82:af:24:4c:
                    e3:da:6c:e5:69:b0:bf:59:f2:ed:25:bd:aa:e5:7b:
                    f9:86:8a:2c:8b:80:4e:0c:7a:96:b8:80:25:12:34:
                    13:0d:85:2b:c6:a7:40:b0:7e:9b:05:9c:6a:21:30:
                    7f:2a:4f:c0:74:0e:14:3a:3c:1e:dd:80:46:19:a8:
                    e5:ad:6a:d1:ca:f0:6a:60:83:08:e3:fc:04:05:79:
                    6c:9b:ea:0b:6e:9d:15:89:aa:fe:52:06:c1:6f:cc:
                    81:43:3f:f6:53:bc:a2:9d:d2:11:6a:88:e2:1d:cd:
                    73:55:15:c3:2f:3e:d6:44:2f:81:f3:cd:44:4f:1f:
                    6b:90:7b:85:1d:e0:fe:77:5c:50:bf:c3:2d:28:cb:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CE:16:F9:29:16:3A:E3:A8:2E:5B:65:37:E3:9C:E3:4C:6E:7F:B6
            X509v3 Authority Key Identifier:
                keyid:7D:16:D8:2F:16:49:B6:08:6B:9C:92:59:F3:1F:1F:47:E0:D5:FF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRbYLxZJtghrnJJZ8x8fR-DV_wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/hs4W-SkWOuOoLltlN-Oc40xuf7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/fRbYLxZJtghrnJJZ8x8fR-DV_wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:26:e8:ed:d2:45:f6:e9:80:77:12:47:74:3d:0f:c5:f1:de:
         6b:12:39:16:3b:94:30:66:e4:92:37:5f:a6:b8:ee:30:55:32:
         1e:d0:56:44:f8:c0:eb:81:72:a5:99:64:ca:d4:8e:97:b9:95:
         af:b1:fe:49:e6:11:d5:e6:2e:7b:62:56:b4:9e:54:e3:3c:9c:
         f8:4c:b6:dd:34:d7:f4:24:78:55:da:f7:f4:5c:b9:ab:f8:0a:
         c4:94:ca:93:d8:9e:c6:36:ce:d2:dd:96:73:29:0c:d6:f4:b1:
         56:26:a3:fb:08:d7:11:97:9a:7f:ce:17:e9:86:47:fa:93:1a:
         00:e8:0d:5a:1f:f7:be:4c:e7:e9:67:06:f3:11:5d:aa:24:82:
         87:f1:14:33:c8:c0:00:88:0a:50:0d:32:f7:d9:b4:5d:92:99:
         dc:18:98:6a:ed:9e:f9:d7:fe:f3:bf:8c:dc:01:5e:8e:8b:1b:
         af:f3:56:4d:48:34:be:ea:63:12:fb:15:03:c2:b2:9e:9e:5a:
         8f:55:19:15:70:15:2c:fb:90:44:96:3b:e7:3a:97:18:7d:9a:
         51:bd:4d:7e:34:46:a6:4b:96:ea:26:74:89:4b:74:b2:0c:95:
         a0:ca:55:f5:f1:b6:d0:8b:62:e3:47:a3:78:74:9a:22:04:f4:
         c2:6c:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org