Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/GFYF2Dc5u5T1behdRi-uEW0ZQII.roa
File:                     GFYF2Dc5u5T1behdRi-uEW0ZQII.roa (raw, json)
Hash identifier:          gH2DB3gAigcA8Msw55rkZLQXsMXc8nOZiwwdHIAAg8Q=
Subject key identifier:   18:56:05:D8:37:39:BB:94:F5:6D:E8:5D:46:2F:AE:11:6D:19:40:82
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       0185703047C69CB30C4B03179FFE23136601
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/GFYF2Dc5u5T1behdRi-uEW0ZQII.roa
Signing time:             Mon 02 Jan 2023 01:54:50 +0000
ROA not before:           Mon 02 Jan 2023 01:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        194.50.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:47:c6:9c:b3:0c:4b:03:17:9f:fe:23:13:66:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Jan  2 01:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=185605d83739bb94f56de85d462fae116d194082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:24:f4:91:70:69:0d:de:23:fd:7d:82:d7:
                    36:7d:73:c9:64:15:85:23:59:76:4f:e4:5e:b8:eb:
                    4b:68:d8:bd:3c:94:8b:6f:3c:3b:5e:34:55:bc:7f:
                    15:bf:05:e0:1d:cb:b3:e2:6f:23:75:5d:bb:39:bf:
                    87:91:a8:a8:29:cf:92:e4:ab:b8:7c:d3:56:62:9f:
                    df:cf:38:25:ea:bf:e9:fa:3d:ac:d6:e7:92:65:30:
                    36:0a:0d:04:aa:a9:09:a9:f9:30:39:66:cd:1e:ac:
                    37:07:ed:4b:92:99:15:47:e5:7c:30:8a:55:cd:7b:
                    ab:7c:ad:f5:cc:41:6d:3e:c0:c3:cd:90:79:15:e4:
                    b0:25:40:ec:fc:9a:ca:e2:bd:24:f0:94:a7:33:91:
                    54:4a:78:30:b9:db:5b:1c:98:44:f9:7f:5e:b9:b5:
                    99:cc:82:6c:2f:03:47:d7:aa:fe:c2:d1:98:40:bd:
                    79:e6:c2:de:ff:7a:1d:26:da:29:ae:cd:86:01:96:
                    67:5c:b3:5d:46:83:9e:a9:e1:17:f0:1d:1a:be:6a:
                    12:0d:17:27:a6:e1:5f:c8:39:27:78:6e:a9:69:42:
                    cf:08:39:4c:25:96:54:69:9d:06:f2:73:06:a2:cd:
                    ff:bf:04:f3:2f:7b:76:54:dd:73:46:40:f7:78:d0:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:05:D8:37:39:BB:94:F5:6D:E8:5D:46:2F:AE:11:6D:19:40:82
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/GFYF2Dc5u5T1behdRi-uEW0ZQII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:42:b1:e8:57:6a:f8:a9:16:8e:07:ff:f2:83:fc:a7:97:f6:
         93:d5:ab:6b:e7:38:b1:1b:72:b6:f5:00:35:c2:8d:2f:dc:49:
         bb:4c:8a:fc:99:87:41:4b:96:49:1a:d5:34:8c:b9:2c:78:03:
         0f:81:82:fa:9c:f1:c1:ff:e2:03:72:fa:2d:46:94:6f:15:a4:
         c4:98:54:7a:79:c6:98:55:d0:c4:ff:34:bc:2b:cc:0a:11:85:
         3d:9f:4d:33:25:2c:f3:ef:ad:8f:a5:4d:68:8c:bb:89:44:a5:
         bf:12:ff:0e:d2:5c:76:4d:8a:1e:1b:9a:00:af:5c:60:86:de:
         7a:90:02:c6:31:80:9b:97:49:fa:00:64:ed:c5:ee:a7:d8:20:
         d6:be:41:98:b2:8b:71:e7:2c:e5:f3:56:ec:5b:ff:53:ca:a0:
         e9:0c:c0:1c:89:5f:ef:0d:c6:06:b4:d2:37:a5:04:a7:ac:9c:
         af:f9:53:1c:c2:05:5f:53:b2:ff:c3:cf:74:a0:e6:c4:a9:4f:
         55:b5:2d:06:13:cc:57:7f:05:55:10:2c:49:1c:a0:4c:b6:d8:
         ec:5e:38:7c:14:0c:f4:87:b2:d0:92:4c:36:a9:7c:72:44:fb:
         0a:c5:50:6d:a6:a8:e6:ef:61:42:90:cb:1e:6b:86:56:4d:95:
         b0:fa:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org