Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/wDzZ7WPM5hZIkj9NV-I92u5VeBs.roa
File:                     wDzZ7WPM5hZIkj9NV-I92u5VeBs.roa (raw, json)
Hash identifier:          5esGp9L2WG+ktwTSpoaMB7Gdksf3rV9O0WOKZXDuHiw=
Subject key identifier:   C0:3C:D9:ED:63:CC:E6:16:48:92:3F:4D:57:E2:3D:DA:EE:55:78:1B
Certificate issuer:       /CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Certificate serial:       018CC3B738FF36F2406DD9723314122E8F47
Authority key identifier: F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/wDzZ7WPM5hZIkj9NV-I92u5VeBs.roa
Signing time:             Mon 01 Jan 2024 06:30:13 +0000
ROA not before:           Mon 01 Jan 2024 06:30:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59427
IP address blocks:        193.178.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:38:ff:36:f2:40:6d:d9:72:33:14:12:2e:8f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
        Validity
            Not Before: Jan  1 06:30:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c03cd9ed63cce61648923f4d57e23ddaee55781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:f6:a2:b9:31:72:6f:67:52:6b:7b:0c:b3:
                    07:ac:28:ba:42:3e:ce:69:77:2e:8d:4c:ca:a8:76:
                    6d:c5:e9:b1:40:8e:b4:88:6b:39:97:68:a8:8e:85:
                    0b:2e:c7:16:4b:6d:f0:66:58:71:f2:81:12:5e:5e:
                    24:a6:d3:9d:ca:b8:84:ef:a5:48:fb:0d:b8:0e:81:
                    86:2a:48:6a:8c:7a:bb:f4:88:bc:f5:01:68:96:ec:
                    53:fd:1e:42:c1:4c:ac:7e:5e:68:93:36:eb:c4:c6:
                    3b:20:db:ca:5f:9d:c5:d6:54:0d:10:e9:86:b0:ff:
                    26:bc:0d:49:fe:c4:48:da:b1:4a:72:8b:55:44:06:
                    ee:a8:e9:ad:38:29:2a:a0:d7:49:1e:b3:f6:94:28:
                    c7:51:16:91:a3:29:64:1d:7c:f1:83:b7:27:e3:c3:
                    2a:9c:8a:d1:1b:b1:9d:ca:29:e2:72:9b:43:0b:cf:
                    d4:87:87:0d:ba:b4:ff:3f:07:99:91:5a:54:fa:49:
                    e8:ad:68:59:13:d2:f1:d2:44:43:1e:10:2f:38:ab:
                    73:0d:24:0d:8e:fa:22:f9:60:78:57:26:44:a2:aa:
                    13:ec:0a:0d:3a:ab:a8:b8:66:34:11:a9:e4:46:ca:
                    53:5e:0e:8a:5c:38:80:02:b5:ae:cd:e6:ab:6b:1f:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:D9:ED:63:CC:E6:16:48:92:3F:4D:57:E2:3D:DA:EE:55:78:1B
            X509v3 Authority Key Identifier:
                keyid:F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/wDzZ7WPM5hZIkj9NV-I92u5VeBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:c6:43:d2:da:81:7f:c7:d7:79:0b:9e:32:ad:4c:e0:98:
         89:b1:6f:7c:3d:a7:96:d7:5f:2a:4e:e1:fe:23:75:f6:56:84:
         c6:0a:7e:12:ac:fb:93:c0:94:19:d9:91:9a:a7:77:00:21:18:
         12:5f:ea:53:3e:f9:8f:eb:93:f6:75:bb:0c:39:59:9d:35:c7:
         79:4c:97:9c:fc:c0:52:7c:d6:99:ef:6a:41:9e:a3:a3:7a:d1:
         89:66:94:49:1f:78:93:f9:07:70:96:86:d2:a7:50:60:9a:64:
         47:52:82:67:09:38:d4:19:71:e5:37:64:d9:92:46:38:96:af:
         85:89:4e:5c:56:ed:4d:e9:a9:42:e9:4a:d8:3d:60:e0:10:1b:
         20:42:b8:f7:4c:d0:2b:9d:8b:91:1d:30:6d:64:31:18:70:85:
         79:2b:d8:0c:d5:37:a1:08:5f:e3:e0:3a:79:ac:36:40:bd:33:
         99:ad:0e:ee:4c:40:16:d9:2b:10:ed:67:38:6c:14:03:bf:17:
         db:d1:f4:e9:11:fc:24:94:60:5f:7d:c9:3e:68:75:0e:75:cd:
         0f:b3:08:78:1f:e1:20:79:f3:28:f4:7f:f4:4c:73:99:32:83:
         a0:d0:00:b0:2d:8d:84:7d:52:87:44:e1:31:87:7c:ec:9e:25:
         93:de:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:30 2024 by rpki-client on console-fra.rpki-client.org