Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/UFtnu1pRjD-WgXliBLH0VqKHEGw.roa
File:                     UFtnu1pRjD-WgXliBLH0VqKHEGw.roa (raw, json)
Hash identifier:          uiktiD2Ar9VhirnarlPX8kwFkIX+mAWgGXe5zvhrXk8=
Subject key identifier:   50:5B:67:BB:5A:51:8C:3F:96:81:79:62:04:B1:F4:56:A2:87:10:6C
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       0183F5ACE40D4EB04C37A1BDE9DC1541BCFA
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/UFtnu1pRjD-WgXliBLH0VqKHEGw.roa
Signing time:             Thu 20 Oct 2022 13:54:51 +0000
ROA not before:           Thu 20 Oct 2022 13:54:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49223
IP address blocks:        193.57.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f5:ac:e4:0d:4e:b0:4c:37:a1:bd:e9:dc:15:41:bc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Oct 20 13:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=505b67bb5a518c3f9681796204b1f456a287106c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:d5:82:89:cb:21:63:8b:27:41:43:68:58:
                    05:ac:a2:36:fd:8b:1b:f0:e4:77:23:28:2a:8e:03:
                    00:7d:5e:c2:20:9c:ad:ac:b1:c1:12:51:53:89:43:
                    b0:cb:18:dc:1a:ed:e1:be:c3:6e:17:68:2b:a9:21:
                    e9:f6:b8:bc:c4:b2:fb:03:d2:01:b6:53:d2:cc:a8:
                    b1:aa:5b:2b:17:26:7c:32:c1:1b:e2:18:19:b3:49:
                    f6:7f:3a:55:d4:23:2d:58:d1:22:13:6b:a3:24:ff:
                    f4:28:bd:d3:72:6d:64:34:48:6c:2b:93:7d:34:88:
                    f0:1e:7e:46:c9:21:84:da:a4:30:c8:d5:23:a1:57:
                    95:b1:f4:a0:4b:ce:4d:75:e2:38:41:c1:06:98:53:
                    2d:ea:5a:45:8c:87:ce:d2:03:9e:01:d1:7b:ba:a3:
                    bd:04:58:9e:f5:d2:38:2e:0b:25:0d:9b:bc:03:f3:
                    8b:b3:74:3f:17:83:c4:aa:38:39:ee:38:07:a9:1d:
                    69:78:74:45:98:71:6b:a2:cc:e2:aa:4c:c6:06:5f:
                    8d:8e:3e:3f:df:14:d8:9e:da:29:1b:15:45:9c:4d:
                    a9:9b:2e:99:20:f7:8c:99:64:f4:c5:18:10:68:3c:
                    d2:ba:e5:05:1c:5b:7c:2d:dd:6c:5e:99:9a:f6:78:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:67:BB:5A:51:8C:3F:96:81:79:62:04:B1:F4:56:A2:87:10:6C
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/UFtnu1pRjD-WgXliBLH0VqKHEGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:c6:75:61:47:12:b0:46:6a:bb:b9:dc:04:1c:05:1f:6d:
         28:af:ae:c6:ca:25:5b:17:4a:77:03:84:94:e4:ab:f4:fc:6c:
         3e:c9:2a:24:aa:94:6d:1e:d8:97:9c:28:e7:81:cb:48:81:fe:
         72:1e:05:0d:85:d5:aa:fb:eb:62:64:dc:f2:74:e3:1b:74:a3:
         00:30:e6:f7:46:56:c5:5b:5a:45:70:32:9e:98:6f:5e:dc:14:
         62:04:95:1c:80:9f:e0:2c:c2:ed:96:9f:61:31:9b:66:6e:b9:
         73:5b:b0:d5:26:07:52:48:71:3f:86:4b:8f:6b:b5:d2:46:94:
         c9:43:49:73:4a:67:e7:02:70:d3:14:68:60:8b:3c:f5:7d:82:
         2c:64:e6:db:28:32:b4:b9:92:9c:9f:81:52:3b:a8:95:39:54:
         be:a4:bf:bc:34:45:0e:30:f4:2a:17:6f:58:74:0e:65:df:7e:
         70:9e:69:3f:ff:62:63:90:a0:76:01:e6:ea:b2:aa:10:70:34:
         a3:35:69:ae:4b:07:13:84:58:fb:fd:43:94:87:a3:31:d7:f1:
         76:f7:64:d2:ab:6e:99:3d:09:2e:bc:da:1e:05:60:35:90:30:
         15:93:fa:89:26:c8:4e:ea:ce:02:ce:5e:47:6d:69:47:0c:5b:
         6e:1e:51:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org