Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/70ZewLltc6Iz0oHwCMlay0oORBo.roa
File:                     70ZewLltc6Iz0oHwCMlay0oORBo.roa (raw, json)
Hash identifier:          RA5UtEITrX43iYJqHqertwIjeGPb5pO+K4SOQreGVrc=
Subject key identifier:   EF:46:5E:C0:B9:6D:73:A2:33:D2:81:F0:08:C9:5A:CB:4A:0E:44:1A
Certificate issuer:       /CN=115c3c43761c08952b969a496abef6fa75f7f537
Certificate serial:       01882086B6B651579B88397E6C6B487196B1
Authority key identifier: 11:5C:3C:43:76:1C:08:95:2B:96:9A:49:6A:BE:F6:FA:75:F7:F5:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVw8Q3YcCJUrlppJar72-nX39Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/70ZewLltc6Iz0oHwCMlay0oORBo.roa
Signing time:             Mon 15 May 2023 17:47:59 +0000
ROA not before:           Mon 15 May 2023 17:47:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        5.180.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b6:b6:51:57:9b:88:39:7e:6c:6b:48:71:96:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115c3c43761c08952b969a496abef6fa75f7f537
        Validity
            Not Before: May 15 17:47:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef465ec0b96d73a233d281f008c95acb4a0e441a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:51:34:1b:5f:83:b4:b3:07:c2:f0:e8:ab:
                    bd:3f:c3:ee:cd:c7:f6:ea:51:08:3d:95:f2:24:ac:
                    0d:db:ac:1f:3d:0a:79:a8:27:17:23:9b:f3:a1:6b:
                    1b:75:cb:78:40:a3:13:bb:8f:69:1c:9b:b9:0d:a9:
                    f7:98:c7:aa:61:2e:46:4f:46:85:fa:e5:80:85:cd:
                    60:9d:ce:85:17:5a:08:b5:69:0d:92:24:cd:62:f4:
                    a7:d5:a1:0d:46:17:15:16:a4:b6:f9:42:fe:0e:c5:
                    0b:de:51:2d:2f:a1:24:5a:03:f1:1c:c0:d5:21:aa:
                    75:76:98:cd:d9:31:90:59:56:e1:2f:ee:89:79:9f:
                    e7:c6:7b:5c:3f:9a:60:d7:63:8a:60:c8:2f:4c:85:
                    df:45:78:db:b9:9b:aa:25:4c:36:ad:e8:1b:9a:8f:
                    46:f5:69:23:4a:55:8b:35:b1:ac:a7:de:41:c0:a6:
                    87:49:44:a1:70:10:45:f6:6e:e2:9a:ab:1a:2e:ee:
                    46:f9:0d:90:68:7e:6f:55:37:04:e0:bd:26:ed:e1:
                    d5:1d:8d:b8:33:0e:70:5d:31:54:16:b4:e7:92:91:
                    d0:bc:66:47:b4:3e:5b:3c:fb:c4:db:e1:a1:0b:43:
                    e1:57:af:e5:81:24:0d:3c:13:2c:20:88:bc:c2:fb:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:5E:C0:B9:6D:73:A2:33:D2:81:F0:08:C9:5A:CB:4A:0E:44:1A
            X509v3 Authority Key Identifier:
                keyid:11:5C:3C:43:76:1C:08:95:2B:96:9A:49:6A:BE:F6:FA:75:F7:F5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVw8Q3YcCJUrlppJar72-nX39Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/70ZewLltc6Iz0oHwCMlay0oORBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/EVw8Q3YcCJUrlppJar72-nX39Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:79:01:ac:fc:0d:c9:22:c8:80:a9:a8:43:1d:89:88:98:
         16:12:ef:64:40:c1:76:c7:d2:1b:e2:48:e5:82:18:30:64:f2:
         17:a9:bb:13:e8:cc:29:ae:c4:76:8b:9d:0e:2e:08:a4:70:a8:
         11:10:e7:7e:db:f1:e7:c4:62:03:18:4a:62:ef:15:c6:b2:57:
         ce:a1:33:9c:78:73:83:5e:54:51:2f:7a:7d:cb:4e:61:80:b4:
         b5:9a:a3:9e:74:20:85:74:de:1c:dd:9f:41:0b:e8:ce:ad:cd:
         d7:16:13:ab:5b:f3:da:63:17:ae:8f:4f:87:5d:a0:2f:75:ab:
         70:81:43:8f:81:5e:e3:aa:27:60:78:b5:28:8f:9f:40:02:c3:
         e3:c0:d5:01:a2:7d:fe:76:0b:a1:ff:31:d7:9a:05:ac:96:af:
         9e:ce:d8:ae:d4:db:86:8e:d0:88:90:89:16:ea:65:07:ce:c1:
         f6:5b:3b:36:7e:29:e2:58:10:a3:fa:ca:2c:e2:3d:66:3f:e1:
         55:1b:f7:a1:da:f9:3f:e8:27:b4:08:50:a4:44:80:88:5d:40:
         52:86:15:c2:6e:64:20:26:34:b0:9b:10:ca:9f:04:e9:89:a9:
         2b:1c:83:ee:48:43:d5:cb:2e:2c:5d:51:d7:68:82:00:b2:3c:
         c9:6b:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:20 2024 by rpki-client on console-fra.rpki-client.org