Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/fMp5Wr3RV54CXp29yk12r191oyw.roa
File:                     fMp5Wr3RV54CXp29yk12r191oyw.roa (raw, json)
Hash identifier:          ujHXzY2UJbmA1DgqClHUn58059dGpDsRx8FwaJnVPMc=
Subject key identifier:   7C:CA:79:5A:BD:D1:57:9E:02:5E:9D:BD:CA:4D:76:AF:5F:75:A3:2C
Certificate issuer:       /CN=13055cde17140400a98d4be05071888d6abb12df
Certificate serial:       0183E5429EB50D621FC0B01286E538B1524A
Authority key identifier: 13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/fMp5Wr3RV54CXp29yk12r191oyw.roa
Signing time:             Mon 17 Oct 2022 09:24:51 +0000
ROA not before:           Mon 17 Oct 2022 09:24:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205361
IP address blocks:        31.24.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:42:9e:b5:0d:62:1f:c0:b0:12:86:e5:38:b1:52:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13055cde17140400a98d4be05071888d6abb12df
        Validity
            Not Before: Oct 17 09:24:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7cca795abdd1579e025e9dbdca4d76af5f75a32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:15:30:80:0f:af:8b:4c:21:1c:c6:19:24:
                    1d:35:cf:9d:78:25:66:0f:d3:54:21:ae:3a:db:c2:
                    3c:9d:3d:c6:bf:f8:5e:dd:43:56:92:af:fd:10:81:
                    01:30:7e:e8:05:da:c6:b0:99:7e:71:06:7d:86:89:
                    db:44:09:d6:11:14:30:41:4b:82:53:88:ef:e6:27:
                    5d:66:77:67:a8:23:f3:36:1a:a9:5b:45:95:41:58:
                    22:86:86:da:5a:32:33:56:71:9d:c3:38:c9:3e:1e:
                    99:17:44:2d:d4:ee:20:d2:8a:ca:f6:ad:02:ff:80:
                    a0:0c:fe:56:61:c1:cc:4d:99:47:2f:2d:99:33:fd:
                    84:ed:b9:a6:c5:3b:7f:c2:1a:c8:d9:f6:d3:d2:9b:
                    3c:91:35:3b:0a:3e:c0:47:af:1b:18:4e:21:4f:c7:
                    9c:79:33:ca:81:00:7c:82:6d:cf:44:ec:c5:00:45:
                    58:fd:7c:2b:25:e5:29:66:fb:be:83:ff:16:87:b6:
                    ab:df:d2:e9:68:69:9b:5e:36:bd:31:bd:61:42:89:
                    3f:ad:a4:e9:fa:79:ab:91:f7:56:ac:23:e7:51:c6:
                    f0:56:f8:bd:b1:b9:8b:7c:9b:52:aa:87:7a:62:c6:
                    fe:55:40:ee:cb:a2:79:82:6e:b1:45:79:1e:05:30:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:79:5A:BD:D1:57:9E:02:5E:9D:BD:CA:4D:76:AF:5F:75:A3:2C
            X509v3 Authority Key Identifier:
                keyid:13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/fMp5Wr3RV54CXp29yk12r191oyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/EwVc3hcUBACpjUvgUHGIjWq7Et8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:af:11:42:72:0b:be:7a:80:f4:84:7c:be:12:08:a4:81:
         9b:4b:48:c6:54:1d:b5:52:bc:74:c4:fb:23:04:a5:13:dd:da:
         7a:06:7e:84:e6:c8:97:2b:b9:8f:1a:c8:e9:11:f1:ef:1a:d1:
         c8:01:4c:66:a5:be:56:6f:50:70:dc:04:36:64:c0:6b:72:91:
         7c:30:3e:91:b8:a3:95:a5:26:9d:b3:48:4d:ef:10:f3:55:c8:
         01:a0:5f:bd:ec:db:3b:92:25:15:bb:4a:6a:02:9d:f8:d5:ac:
         62:bb:d8:c0:bd:d1:b9:74:c7:cf:98:ae:85:24:c9:39:23:97:
         32:0e:6d:26:ef:3b:a2:de:92:37:b1:ed:06:0a:d8:35:8d:6e:
         f9:85:b2:bb:a3:d7:89:04:5f:5d:50:6a:ff:86:70:0f:20:ac:
         33:11:6b:1e:34:e8:b6:f2:0e:20:f5:cd:ad:5c:6b:b6:a7:9b:
         4a:13:ca:19:f7:af:cc:10:66:39:c1:04:5f:49:a6:15:fd:e8:
         08:88:4d:1b:2a:ce:c7:90:e4:56:24:46:27:83:ef:03:cc:cf:
         d9:5c:60:68:0a:82:c1:e9:58:e1:50:88:2a:e3:8d:e8:84:2e:
         3b:cd:d6:26:02:19:ab:64:b6:13:aa:0e:1f:64:d3:84:41:48:
         e5:b4:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:23 2024 by rpki-client on console-ams.rpki-client.org