Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/8Wv7jaBMaxFI0M3DdGZLxpQYT-A.roa
File:                     8Wv7jaBMaxFI0M3DdGZLxpQYT-A.roa (raw, json)
Hash identifier:          Sb7GmAceZXvHN4XL5pJrcpFM1o5VT+yEG+vTomasSr8=
Subject key identifier:   F1:6B:FB:8D:A0:4C:6B:11:48:D0:CD:C3:74:66:4B:C6:94:18:4F:E0
Certificate issuer:       /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial:       018B9C03CB4CF92D5B5FAAFF65AEBA054D44
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/8Wv7jaBMaxFI0M3DdGZLxpQYT-A.roa
Signing time:             Sat 04 Nov 2023 20:26:16 +0000
ROA not before:           Sat 04 Nov 2023 20:26:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209242
IP address blocks:        188.227.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:9c:03:cb:4c:f9:2d:5b:5f:aa:ff:65:ae:ba:05:4d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
        Validity
            Not Before: Nov  4 20:26:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f16bfb8da04c6b1148d0cdc374664bc694184fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:53:e3:ab:af:a9:7e:d6:92:5c:49:0d:72:
                    e3:82:1b:cd:bd:a3:fd:16:6c:19:c5:66:c2:f0:60:
                    00:d1:5e:4d:e9:21:27:d0:14:5e:39:87:7a:b2:ab:
                    4c:03:74:a1:4f:17:1b:5e:f2:57:e5:2c:7f:70:ca:
                    24:55:89:f8:d4:78:6f:2a:eb:2f:13:2c:cb:8a:f4:
                    9b:30:24:95:7b:c2:b1:7f:b2:d6:86:6d:47:98:e7:
                    24:d0:ce:44:37:52:43:3f:1b:f0:81:42:9a:8a:bb:
                    86:eb:7c:61:44:28:1f:68:db:65:a3:25:c4:31:6c:
                    d5:a4:56:4d:a8:b7:80:2f:f3:70:66:09:96:14:d1:
                    c3:21:ca:9d:26:7b:dd:e9:b1:cc:9a:bc:54:2c:b3:
                    c0:eb:3b:00:d4:78:87:08:5d:4e:dc:94:27:30:d1:
                    1b:15:a7:ca:db:8a:84:40:86:b4:7e:45:1f:a0:a5:
                    8d:24:55:18:ce:85:0e:43:bb:da:49:80:69:d6:0b:
                    2b:28:0f:08:0c:04:b3:34:68:f7:20:7c:cb:72:81:
                    2c:f8:ce:5c:21:74:3b:f7:71:65:c3:6b:f2:fa:d7:
                    93:f7:ae:24:ac:93:d9:9a:c9:3a:34:f4:48:bc:54:
                    b5:28:ad:60:99:40:c7:e3:e4:18:e4:91:7b:b7:de:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:FB:8D:A0:4C:6B:11:48:D0:CD:C3:74:66:4B:C6:94:18:4F:E0
            X509v3 Authority Key Identifier:
                keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/8Wv7jaBMaxFI0M3DdGZLxpQYT-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.227.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:52:e7:b9:74:6a:88:96:70:ad:a6:d7:c2:99:ac:ab:f4:
         08:a6:de:2e:ae:8d:8a:79:a5:a3:f9:c6:36:fb:9f:2a:ce:a7:
         ad:73:f0:6b:f8:a9:02:fe:d6:aa:15:22:62:0a:a2:79:d1:b9:
         87:f5:b9:7b:d3:dc:d0:7d:42:a2:16:bd:45:24:ed:49:50:92:
         44:37:74:f8:99:c7:37:20:b6:1c:5a:fd:a5:01:e2:98:4e:6a:
         b5:42:a9:0b:fd:c4:78:0b:68:8e:4d:2b:a1:2c:06:a1:6b:f6:
         8e:ec:22:a7:8a:73:ea:88:9a:7d:52:ee:c0:c2:4a:2d:7b:6a:
         73:1f:e9:e0:39:89:77:cd:be:59:90:b3:3f:70:39:f2:a4:95:
         09:8b:32:1a:cc:6c:bc:1e:f2:df:89:d3:0f:ec:12:c7:08:9e:
         59:0b:dc:b5:1a:b2:65:24:46:49:41:94:90:43:96:4f:d5:91:
         e9:3d:eb:22:40:67:fd:94:fe:5c:99:32:e4:aa:8d:48:79:42:
         f0:e7:b8:83:41:c8:b8:ac:ae:d0:d8:74:d8:40:c1:46:60:05:
         5a:94:7b:c9:41:64:70:15:8e:4f:0d:71:69:17:eb:ce:06:df:
         b8:6c:4b:95:33:55:1a:7f:fe:64:b9:d8:69:b8:73:82:6c:84:
         b2:eb:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org