Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/d5oe_rBpy-ylkRVuLtobWTmjZ-w.roa
File:                     d5oe_rBpy-ylkRVuLtobWTmjZ-w.roa (raw, json)
Hash identifier:          Gymavx3z4A/Dfju6MprUI7wIDfr1bIzGsxMgEVhCABA=
Subject key identifier:   77:9A:1E:FE:B0:69:CB:EC:A5:91:15:6E:2E:DA:1B:59:39:A3:67:EC
Certificate issuer:       /CN=5ca1c1623072272425f561da97ae102f06561e3f
Certificate serial:       01856BB7E3D3AA38A9C71CD6E262F0494170
Authority key identifier: 5C:A1:C1:62:30:72:27:24:25:F5:61:DA:97:AE:10:2F:06:56:1E:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKHBYjByJyQl9WHal64QLwZWHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/d5oe_rBpy-ylkRVuLtobWTmjZ-w.roa
Signing time:             Sun 01 Jan 2023 05:04:51 +0000
ROA not before:           Sun 01 Jan 2023 05:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201631
IP address blocks:        5.42.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:b7:e3:d3:aa:38:a9:c7:1c:d6:e2:62:f0:49:41:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca1c1623072272425f561da97ae102f06561e3f
        Validity
            Not Before: Jan  1 05:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=779a1efeb069cbeca591156e2eda1b5939a367ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:bf:ca:a3:c1:5e:da:53:55:b9:42:5d:b9:
                    d8:2c:17:8f:02:27:86:d5:e4:a9:92:f1:6f:98:ba:
                    2c:5f:ac:27:45:7c:c7:87:74:00:57:45:db:84:81:
                    00:58:75:6e:6d:0b:a4:82:e6:d4:38:4e:19:ef:2d:
                    4e:cc:fc:48:86:65:a8:fc:06:32:3b:81:4a:02:bd:
                    c2:f2:52:d6:16:0a:1e:05:1c:ed:b7:e3:98:28:12:
                    e4:c4:20:0e:91:f7:78:72:30:7a:11:39:03:08:41:
                    d5:33:b3:67:a9:e9:a6:bd:63:e6:c8:bb:f7:25:28:
                    e2:c3:68:1c:d4:a3:b2:34:55:c1:41:c6:d8:a7:7e:
                    78:10:f6:db:98:53:39:58:36:de:c7:93:6d:28:1f:
                    c9:83:93:44:3a:32:19:dd:c0:51:07:7d:7c:56:42:
                    75:8f:96:08:51:48:3f:db:54:5b:0b:a9:ca:74:a7:
                    4f:0d:ba:5f:0c:32:ba:63:f3:74:50:66:55:9c:53:
                    39:5e:f9:24:b2:e0:68:0d:c7:e8:2b:2f:ee:ba:ba:
                    64:cb:e0:12:69:54:7d:98:b9:85:04:9f:12:8d:80:
                    23:9c:25:2c:3d:4d:95:b6:71:3c:04:0a:b8:6b:fd:
                    44:ff:d5:01:59:7a:21:22:67:23:4a:af:06:43:cc:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:1E:FE:B0:69:CB:EC:A5:91:15:6E:2E:DA:1B:59:39:A3:67:EC
            X509v3 Authority Key Identifier:
                keyid:5C:A1:C1:62:30:72:27:24:25:F5:61:DA:97:AE:10:2F:06:56:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKHBYjByJyQl9WHal64QLwZWHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/d5oe_rBpy-ylkRVuLtobWTmjZ-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/XKHBYjByJyQl9WHal64QLwZWHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.42.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:15:cc:7a:f9:53:27:7d:da:9f:a8:9f:da:98:a8:27:33:1a:
         86:e2:ac:eb:ee:12:90:61:5e:69:ed:9f:94:1f:4c:8c:4d:73:
         78:f8:fb:7d:9f:6c:d0:27:55:29:6d:e9:a8:4b:09:01:de:b8:
         68:99:1d:d7:16:b4:ff:27:49:e9:a4:41:81:77:1c:d2:cf:1a:
         92:fe:99:a1:f1:13:a0:a4:d9:2f:7d:28:0d:c2:0c:a2:1d:72:
         8c:0e:30:b3:f3:e2:68:47:3f:f4:ba:24:2d:4a:7e:c4:e7:31:
         3a:5f:28:e0:a6:bb:62:02:0f:d9:8c:2b:d9:6d:28:17:2d:41:
         ae:2d:86:db:d5:57:37:fe:89:b5:76:ed:a6:a8:55:9d:7a:56:
         ab:a5:44:9d:57:98:db:cd:f2:07:6b:ea:19:f9:79:55:e3:a4:
         22:80:f9:8a:56:5f:cc:bc:4d:dc:8e:a2:5b:70:29:30:3a:d7:
         71:f6:e3:e8:83:6b:93:37:ac:53:15:8f:39:49:af:ec:e2:01:
         34:66:ed:a6:79:bb:c0:e8:d2:45:53:15:62:04:cd:0e:ae:a3:
         f5:2e:24:a2:60:dc:34:e1:35:68:9c:89:58:67:69:40:5c:d1:
         b3:82:9f:64:4c:ca:33:72:e2:73:04:84:39:cf:ac:a0:99:1a:
         58:48:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org