Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/6LBMlikC2FyFwVkwjqVHHWz7Crk.roa
File:                     6LBMlikC2FyFwVkwjqVHHWz7Crk.roa (raw, json)
Hash identifier:          pJxe5mPlybGwwxGzg4SjRalEOawepUUxg9rnTpsgzcw=
Subject key identifier:   E8:B0:4C:96:29:02:D8:5C:85:C1:59:30:8E:A5:47:1D:6C:FB:0A:B9
Certificate issuer:       /CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Certificate serial:       018CC3B738B8ECC67DC037F4175637A3A377
Authority key identifier: F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/6LBMlikC2FyFwVkwjqVHHWz7Crk.roa
Signing time:             Mon 01 Jan 2024 06:30:13 +0000
ROA not before:           Mon 01 Jan 2024 06:30:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43366
IP address blocks:        193.178.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:38:b8:ec:c6:7d:c0:37:f4:17:56:37:a3:a3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
        Validity
            Not Before: Jan  1 06:30:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8b04c962902d85c85c159308ea5471d6cfb0ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:74:91:0a:a8:19:d2:42:77:be:85:b8:b3:
                    49:39:4b:bf:7e:5c:4b:13:e0:6e:5e:b0:0e:eb:b5:
                    f0:cd:f3:da:64:8a:08:42:53:e4:bb:47:f5:37:b2:
                    3a:a4:08:25:92:06:65:b7:22:43:c1:4f:91:60:b6:
                    25:1a:02:fa:fa:1f:f2:4d:62:ba:e1:b0:fe:ea:ff:
                    6a:6f:58:de:f2:8f:13:1f:2d:b4:07:fa:60:53:75:
                    59:31:49:31:84:05:5d:91:58:17:d2:24:16:c4:6b:
                    a1:7d:c6:dd:99:6c:f7:0d:68:e5:49:7a:31:41:18:
                    35:87:c5:52:77:01:77:bf:40:5a:46:e0:be:63:88:
                    9a:2f:0e:77:ba:fd:2d:81:54:19:9d:cf:c5:9c:44:
                    a7:c4:8b:a9:95:8b:5c:98:76:ab:99:1b:06:ab:32:
                    5f:29:b3:2a:b9:20:9e:60:fd:c9:09:50:2e:ee:11:
                    76:80:a2:81:20:7b:4d:ac:8a:ca:a5:35:39:f5:e0:
                    eb:86:ec:25:80:b7:d3:15:4c:5d:89:1c:2c:6e:37:
                    4d:f4:e2:3e:91:1e:03:5c:ed:61:05:d6:ec:de:2c:
                    e9:6b:dc:63:c3:b0:eb:57:9a:ae:af:b2:6f:9c:8f:
                    66:7e:dc:8b:f0:b2:aa:63:43:db:70:e8:f5:59:59:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:4C:96:29:02:D8:5C:85:C1:59:30:8E:A5:47:1D:6C:FB:0A:B9
            X509v3 Authority Key Identifier:
                keyid:F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/6LBMlikC2FyFwVkwjqVHHWz7Crk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:e8:26:46:88:bf:2a:00:44:ca:1f:5f:73:c4:44:54:3a:5d:
         f2:da:7f:d4:b7:b7:40:85:70:aa:0c:56:18:a3:94:80:e5:8f:
         49:1a:bf:0b:4a:4a:82:70:ae:cd:88:fd:db:c3:e7:40:b7:12:
         f2:49:fd:41:eb:18:fc:2d:74:3b:a5:96:f8:b4:a6:7b:30:5b:
         12:f8:9b:25:ce:57:1b:e4:0a:c6:c9:f9:e1:dd:d1:80:be:e6:
         f2:48:00:4e:0f:03:b7:74:07:b4:19:8d:95:dd:e4:65:a8:e0:
         cb:63:05:25:0a:18:27:3c:e9:69:3a:7b:e0:2c:06:c9:00:03:
         cd:5e:5e:b5:79:16:01:fa:46:c9:6d:d7:66:49:60:62:64:7a:
         ab:ee:93:51:94:0c:7c:17:da:5b:a5:06:e4:60:30:f4:60:1d:
         b9:13:35:48:1b:bc:b4:c6:09:19:c5:33:cb:c1:07:c0:9f:d4:
         56:77:c8:ad:69:d4:86:ff:7a:b2:c8:3f:e7:0b:ba:47:37:9e:
         ac:1c:74:20:a5:64:a3:19:76:a2:c7:01:f8:72:05:05:9d:a0:
         61:d6:06:b0:4d:e1:77:70:5c:dd:23:dd:48:ab:d6:5d:e3:9d:
         cd:1c:8b:75:18:57:b8:bf:60:79:47:73:53:6c:c5:87:21:03:
         ac:04:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:07 2024 by rpki-client on console-ams.rpki-client.org