Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/m0disnyKYb6jc4TGsz-lZHwahXM.roa
File:                     m0disnyKYb6jc4TGsz-lZHwahXM.roa (raw, json)
Hash identifier:          Gxfgogm7uTsuxM8xkLEm60JU1mCiSxdydIOFVGLVRdY=
Subject key identifier:   9B:47:62:B2:7C:8A:61:BE:A3:73:84:C6:B3:3F:A5:64:7C:1A:85:73
Certificate issuer:       /CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Certificate serial:       0185729ED46660932FC799ECF51B9885E734
Authority key identifier: 51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/m0disnyKYb6jc4TGsz-lZHwahXM.roa
Signing time:             Mon 02 Jan 2023 13:14:49 +0000
ROA not before:           Mon 02 Jan 2023 13:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48031
IP address blocks:        212.52.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:d4:66:60:93:2f:c7:99:ec:f5:1b:98:85:e7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
        Validity
            Not Before: Jan  2 13:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b4762b27c8a61bea37384c6b33fa5647c1a8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:60:01:3f:45:57:a5:66:55:c1:1f:74:6c:
                    9f:76:15:39:1d:ea:c9:ad:81:42:60:2e:10:55:34:
                    d4:15:8b:e9:92:6b:fe:2c:bd:ef:99:3b:66:7b:e6:
                    99:13:31:0c:e8:43:bc:51:c4:0c:e2:fc:17:34:11:
                    f3:0a:69:3e:76:ce:b3:2b:84:69:72:fe:e2:b8:70:
                    94:f7:49:cd:7f:e9:85:7f:48:d2:37:b3:bd:40:47:
                    d8:c1:20:7c:ee:01:e5:30:79:7f:82:50:ae:c8:b9:
                    1a:bc:20:33:99:4a:9a:c4:1e:63:0d:0f:05:c3:f4:
                    21:06:a3:58:10:2d:9c:9b:8a:53:fc:ba:82:aa:d2:
                    af:1c:b3:56:cd:08:6f:59:2f:73:2f:93:5c:b3:ec:
                    01:67:60:21:da:19:d3:e5:65:c8:ca:07:fb:f1:6b:
                    bb:06:e1:7e:5d:bd:49:52:a2:71:b5:55:db:66:32:
                    97:26:08:8c:51:b5:7a:38:da:c1:7d:4b:75:57:3a:
                    01:92:2a:fd:b1:e0:4a:ce:13:17:5d:b0:01:2a:f5:
                    25:08:b5:ff:b7:b9:b6:f3:cd:44:9e:0b:99:ac:36:
                    e4:ef:93:2b:80:88:e0:d4:74:da:1b:77:2e:e8:44:
                    85:09:1b:54:5f:ba:26:06:3a:4d:93:36:1a:53:a1:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:62:B2:7C:8A:61:BE:A3:73:84:C6:B3:3F:A5:64:7C:1A:85:73
            X509v3 Authority Key Identifier:
                keyid:51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/m0disnyKYb6jc4TGsz-lZHwahXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:15:c1:cd:d4:22:a0:8e:d3:6c:ce:d7:66:bf:10:18:75:43:
         d2:29:7c:62:0a:f1:54:5a:19:0b:ec:90:ed:98:be:64:e0:83:
         d5:b6:68:a1:06:46:de:a6:e2:ca:10:57:2e:5d:bd:6c:67:cc:
         e1:a3:8c:37:ca:03:9a:96:c8:00:35:56:5d:19:f6:32:90:6e:
         54:49:57:bc:60:1c:bc:ec:99:3b:ac:b7:a8:14:ef:3d:16:a0:
         65:47:f1:21:23:13:9a:7e:55:51:fc:09:ab:ad:b9:19:a0:77:
         90:c4:38:b6:03:ee:e1:9d:2d:a8:41:1c:59:32:fa:69:c7:1e:
         7d:05:85:4f:33:1d:44:3b:e7:08:1b:e1:60:96:02:4d:fb:e3:
         f8:09:ab:bc:fa:96:e7:5d:71:0b:f9:b9:89:f9:54:65:e7:e4:
         67:77:7f:6b:18:c7:82:e6:9e:60:29:e0:a4:9a:26:fd:11:83:
         de:39:d7:8f:10:6b:d0:20:07:55:f7:11:63:a6:bd:72:98:13:
         e5:8b:6a:e3:6d:de:02:a4:0a:17:d7:af:ae:d2:3a:8f:ef:a7:
         d4:6b:1e:6e:1f:4f:30:62:9d:96:f9:d8:4b:e2:ac:65:db:77:
         fd:6d:29:e5:5d:19:6c:1e:2a:ec:c7:a3:b4:fe:25:6f:c3:9c:
         8f:7b:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org