Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/9G9xSwBAmTtD4bc0DumPJ30X4EU.roa
File:                     9G9xSwBAmTtD4bc0DumPJ30X4EU.roa (raw, json)
Hash identifier:          UJ9e3Tsnrmzqj2ofSw+CRyCvvpX7cbdzy9IheLLGcEA=
Subject key identifier:   F4:6F:71:4B:00:40:99:3B:43:E1:B7:34:0E:E9:8F:27:7D:17:E0:45
Certificate issuer:       /CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
Certificate serial:       0188208677A2754D900796ED5ABE2009CDF8
Authority key identifier: 29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/9G9xSwBAmTtD4bc0DumPJ30X4EU.roa
Signing time:             Mon 15 May 2023 17:47:43 +0000
ROA not before:           Mon 15 May 2023 17:47:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        212.52.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:77:a2:75:4d:90:07:96:ed:5a:be:20:09:cd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
        Validity
            Not Before: May 15 17:47:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f46f714b0040993b43e1b7340ee98f277d17e045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:1a:0d:4a:c8:78:a0:f2:64:32:3f:f4:dd:
                    d9:d0:e6:71:5b:51:51:63:d2:a4:f7:6b:93:6e:60:
                    d2:dd:fd:f2:77:1f:e5:f8:05:c7:a8:a0:6b:ca:ca:
                    c8:30:e3:e6:21:e0:bb:1e:4f:da:96:e3:8c:57:cc:
                    13:07:c6:01:54:99:90:3b:8f:b7:9a:66:44:16:77:
                    d2:1a:61:d4:e8:4a:1b:4a:89:f4:e2:9e:02:f7:2e:
                    bc:39:ac:a5:ab:15:ee:fc:3d:d4:e7:b8:cb:49:7b:
                    60:f2:7b:ed:e4:a5:c8:5f:1a:f6:d1:5e:37:0d:7b:
                    13:99:27:43:ba:ca:4d:9b:0e:20:44:d9:29:55:6c:
                    61:05:42:df:59:f2:52:18:98:c0:63:d5:de:94:17:
                    f6:81:67:a4:7d:e6:4e:8f:01:02:c6:9d:61:37:f9:
                    42:e6:89:0c:23:28:c9:90:85:72:97:ce:f3:1e:12:
                    70:e7:67:ee:02:e8:42:28:6d:54:3f:ff:30:29:76:
                    c0:b6:a3:65:e8:96:24:55:6d:b0:08:f1:1a:8e:02:
                    9b:8b:a5:51:8a:b9:ad:66:d6:d9:f7:a8:6b:c3:8f:
                    6e:f1:36:b9:ca:11:48:45:c2:23:66:d5:ca:6e:61:
                    ad:73:ad:2f:f6:c7:5b:10:fc:54:02:ed:a5:f8:d3:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:71:4B:00:40:99:3B:43:E1:B7:34:0E:E9:8F:27:7D:17:E0:45
            X509v3 Authority Key Identifier:
                keyid:29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/9G9xSwBAmTtD4bc0DumPJ30X4EU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:28:28:1d:69:74:6e:b2:7e:0e:c8:4e:15:b4:77:fc:ef:
         d4:46:4e:c2:20:e8:33:19:25:99:21:c8:05:0d:36:50:bf:bf:
         b7:23:5c:ae:e4:c7:e1:ed:ab:a6:5b:61:2e:38:55:2b:a0:41:
         82:67:41:97:dd:92:05:00:7e:2b:31:92:5c:1d:93:1c:be:77:
         a3:78:91:8d:2e:ac:e6:b9:e5:42:a5:b3:03:52:e1:e4:98:7c:
         f5:51:58:eb:e7:25:16:c8:a5:aa:4b:53:65:dc:6b:5e:f5:dd:
         e7:74:7f:24:6c:ff:51:01:9f:9c:6f:4b:45:92:c6:bb:6d:8d:
         f5:65:0a:88:19:21:dc:5d:92:cc:e2:3e:24:e4:52:8c:fe:63:
         ea:ad:45:87:a1:a4:c0:97:1c:0f:a3:77:e1:0f:c8:34:38:9b:
         d6:9b:32:1d:96:20:1a:60:4b:03:9a:69:c7:60:1b:55:31:07:
         f0:13:f1:dc:4d:3c:4a:9f:23:26:49:8c:1c:a7:77:26:98:29:
         a3:7c:d3:5a:aa:9c:3d:50:55:15:cb:8c:1d:ea:87:3e:7b:53:
         23:89:06:64:44:ef:87:3b:84:13:48:c1:8e:5c:16:21:f7:da:
         b6:07:df:06:ee:02:2c:a4:aa:71:8f:d2:16:0d:15:3d:b4:85:
         2c:ba:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:56 2024 by rpki-client on console-ams.rpki-client.org