Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/me4G9n1chdE4MDJAO5x9tB9V1qM.roa
File:                     me4G9n1chdE4MDJAO5x9tB9V1qM.roa (raw, json)
Hash identifier:          idm59O6bU47SGBToMDYILFR551OTfm50JkP5Rh5CUVI=
Subject key identifier:   99:EE:06:F6:7D:5C:85:D1:38:30:32:40:3B:9C:7D:B4:1F:55:D6:A3
Certificate issuer:       /CN=98deece20f0b24085fc69cf7a02affc7b1328250
Certificate serial:       018636C6DF5E45FDB638AC476E2800EC65A0
Authority key identifier: 98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/me4G9n1chdE4MDJAO5x9tB9V1qM.roa
Signing time:             Thu 09 Feb 2023 15:24:08 +0000
ROA not before:           Thu 09 Feb 2023 15:24:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59447
IP address blocks:        193.162.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:c6:df:5e:45:fd:b6:38:ac:47:6e:28:00:ec:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98deece20f0b24085fc69cf7a02affc7b1328250
        Validity
            Not Before: Feb  9 15:24:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99ee06f67d5c85d1383032403b9c7db41f55d6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:c6:be:8b:69:98:28:93:90:83:ba:13:2c:
                    23:e4:ba:a7:01:08:1b:a7:ef:f5:1d:5f:86:9e:6d:
                    8e:4d:68:25:41:33:50:b1:f9:91:76:73:9c:75:f5:
                    1f:1a:ce:8a:7f:9f:70:3b:4d:14:81:97:d6:97:93:
                    3c:73:04:2a:f5:ba:e0:a4:1b:2a:1b:bc:8e:08:46:
                    1d:e0:35:fe:11:cd:34:65:27:3a:81:82:17:a5:1d:
                    af:66:a3:db:64:ce:ae:f7:e5:20:49:c9:08:b1:9f:
                    ad:a5:a0:32:6a:34:a2:02:39:72:bb:fb:44:a4:2b:
                    56:61:7b:13:a3:55:7c:66:78:47:89:5c:63:70:7c:
                    88:6d:5d:b2:1e:12:6f:cf:1a:ec:e6:b9:e2:63:1b:
                    e8:1e:aa:5c:2f:4c:2a:57:67:97:a3:b8:b4:20:04:
                    8d:a8:d7:f8:27:b8:00:f9:b6:93:ef:99:87:f6:76:
                    b5:cd:3f:f0:df:58:e6:02:5f:e0:ad:0c:9a:f9:a7:
                    21:70:72:5b:0c:88:1e:b0:8e:58:93:63:12:06:dd:
                    d3:0f:9a:f8:92:c3:ab:c0:97:5e:f9:18:48:57:1e:
                    42:bc:13:10:02:b7:dc:52:e7:aa:6b:61:f1:ba:66:
                    12:ac:73:0d:ba:61:9e:79:3e:43:08:02:1c:f0:24:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:06:F6:7D:5C:85:D1:38:30:32:40:3B:9C:7D:B4:1F:55:D6:A3
            X509v3 Authority Key Identifier:
                keyid:98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/me4G9n1chdE4MDJAO5x9tB9V1qM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/mN7s4g8LJAhfxpz3oCr_x7EyglA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:6d:98:18:97:ff:7c:f1:8d:97:81:ba:35:ad:c6:de:8f:
         09:31:98:6b:c7:b8:3e:da:1e:ab:f2:2c:23:78:dd:06:41:a4:
         92:e1:88:f8:75:15:63:14:67:85:6f:09:a2:d0:7e:96:e6:7e:
         73:13:15:45:ab:19:d6:fb:98:38:39:ed:f9:d3:83:c3:62:be:
         1a:98:7e:2a:20:13:99:75:b3:e5:3f:a2:aa:4b:b1:f6:3d:8d:
         60:ca:d0:40:8d:e0:85:11:08:36:da:8d:f9:fd:4b:c9:e5:16:
         a0:31:a1:0e:ed:81:7e:7c:d7:9f:ef:8e:89:45:0e:1a:47:ad:
         ee:4b:7e:a1:ea:a5:8c:4c:39:20:e8:9e:08:9a:d9:c1:8e:a2:
         fd:57:e5:9e:53:df:24:d0:10:46:33:9b:c0:6c:23:05:b8:43:
         be:d2:4e:0d:84:93:3f:df:2a:31:ef:52:98:92:04:b1:20:98:
         70:d6:ef:37:46:fe:30:db:fe:4c:b1:84:e2:68:8d:a0:59:33:
         57:a1:2e:3c:12:72:67:6b:72:d8:75:6d:2a:6f:36:58:76:aa:
         cb:3c:be:08:4e:de:42:aa:42:1e:56:4b:98:05:93:8f:57:58:
         cf:ff:97:96:95:4c:fb:6c:68:d5:dd:39:ce:75:3d:04:81:f5:
         20:d9:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:41 2024 by rpki-client on console-fra.rpki-client.org