Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/EGBpw5jJlYtBTE95OsWXk9X1irU.roa
File:                     EGBpw5jJlYtBTE95OsWXk9X1irU.roa (raw, json)
Hash identifier:          7wDxll6aMs1s/uT7KBk+KIns1i6HU8I5NhCeB51mB0Y=
Subject key identifier:   10:60:69:C3:98:C9:95:8B:41:4C:4F:79:3A:C5:97:93:D5:F5:8A:B5
Certificate issuer:       /CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Certificate serial:       01856E66710F4985689A27F57B445657DE8F
Authority key identifier: 69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/EGBpw5jJlYtBTE95OsWXk9X1irU.roa
Signing time:             Sun 01 Jan 2023 17:34:45 +0000
ROA not before:           Sun 01 Jan 2023 17:34:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49305
IP address blocks:        94.247.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:66:71:0f:49:85:68:9a:27:f5:7b:44:56:57:de:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
        Validity
            Not Before: Jan  1 17:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=106069c398c9958b414c4f793ac59793d5f58ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:98:98:2e:f0:29:7a:d6:0e:fb:ed:71:d0:
                    a9:21:66:20:77:76:c8:0d:55:b7:e6:b7:0f:86:b6:
                    d8:f4:48:1a:9d:25:df:d3:af:67:99:97:49:3d:98:
                    ab:32:a2:be:68:b6:f4:2f:0d:0f:28:1c:14:32:f6:
                    ca:c1:c4:e8:4e:f1:44:aa:31:2c:59:80:61:2d:aa:
                    d5:83:49:8c:36:0f:28:78:87:d8:bd:f4:61:6a:c8:
                    c3:76:65:90:f5:f2:07:97:54:42:ec:bc:94:38:74:
                    ba:a0:16:17:13:89:4d:01:b1:dc:0f:90:12:55:e7:
                    6c:69:9d:24:4c:f6:84:25:a1:99:9d:14:5d:de:10:
                    bd:76:07:d0:6a:1c:37:db:15:5a:67:18:d6:fd:16:
                    70:26:cf:68:03:27:51:2e:c2:6b:bf:f5:8e:5a:49:
                    24:7b:ff:a9:b3:54:d8:89:0b:e5:4d:e0:12:c9:8d:
                    83:83:16:57:38:dd:36:a4:61:2e:f2:b2:3d:a6:68:
                    31:19:06:a6:b1:d4:b2:a4:b1:4d:32:d7:70:71:0a:
                    4b:e3:c1:09:e5:69:b5:13:d0:1f:51:0f:89:99:1a:
                    f0:96:d7:f0:33:eb:32:bd:c7:bd:41:46:0d:a9:17:
                    05:40:39:43:be:78:0c:91:77:5d:2d:66:ad:95:74:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:69:C3:98:C9:95:8B:41:4C:4F:79:3A:C5:97:93:D5:F5:8A:B5
            X509v3 Authority Key Identifier:
                keyid:69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/EGBpw5jJlYtBTE95OsWXk9X1irU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:f5:a6:53:df:00:5b:27:fa:f3:95:15:26:8f:47:5f:7d:
         1f:25:cd:6a:10:b9:c3:5b:8a:82:ec:5c:7b:86:43:de:45:dd:
         2e:35:92:19:02:c8:17:4c:b6:c8:ed:bd:bb:e1:ed:56:8d:37:
         49:0a:c2:0e:4a:81:07:43:00:f9:6d:d2:b4:04:bd:c9:58:d0:
         2a:a4:98:68:a2:ed:77:d2:62:39:83:a0:6f:51:79:b0:1b:80:
         01:6f:00:8d:f5:d9:f5:55:39:71:50:1f:e5:a5:59:5b:dc:2b:
         85:b8:ae:4d:66:ba:59:48:e4:1a:95:eb:8b:33:94:30:d7:86:
         88:6f:91:95:d1:ac:07:8c:0f:72:42:fe:33:e6:8f:0f:18:5f:
         f0:e6:8e:24:af:aa:15:b6:b1:61:56:c7:77:12:7d:bf:41:7a:
         fd:5e:7d:b8:1f:d8:15:9d:c0:8c:86:d4:4b:52:6d:30:08:46:
         ff:9b:d3:a3:d5:0d:ef:1a:e8:e8:6b:c0:ec:d2:29:bd:84:ad:
         5f:35:a3:f2:4d:d9:b2:76:ca:f4:7f:93:02:29:84:45:4a:34:
         4b:43:71:86:55:a3:0b:08:84:b9:7c:9b:79:03:dd:4d:2c:33:
         d3:44:7e:cc:eb:e2:71:25:33:c7:79:27:a0:a8:11:54:df:bc:
         6e:a1:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:03 2024 by rpki-client on console-fra.rpki-client.org