Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/BbIxQ9GiUtyE-Tp08N-Qapy5DpM.roa
File:                     BbIxQ9GiUtyE-Tp08N-Qapy5DpM.roa (raw, json)
Hash identifier:          rH+7a5645l403ToJxwsxUx0OLgPhPGnnCYW5duIJYBw=
Subject key identifier:   05:B2:31:43:D1:A2:52:DC:84:F9:3A:74:F0:DF:90:6A:9C:B9:0E:93
Certificate issuer:       /CN=18a3d92dda910367339773d6ca6481fb207bd2c7
Certificate serial:       0AE85C06
Authority key identifier: 18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/BbIxQ9GiUtyE-Tp08N-Qapy5DpM.roa
Signing time:             Sat 01 Jan 2022 08:57:32 +0000
ROA not before:           Sat 01 Jan 2022 08:57:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8881
IP address blocks:        193.141.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183000070 (0xae85c06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a3d92dda910367339773d6ca6481fb207bd2c7
        Validity
            Not Before: Jan  1 08:57:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05b23143d1a252dc84f93a74f0df906a9cb90e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:28:2d:b1:c0:59:c9:7f:1c:5c:ac:f5:c5:
                    c8:9e:1b:fa:0e:3a:7f:16:e4:2b:57:c3:68:97:db:
                    21:fc:6b:99:a4:e7:c2:32:db:5a:c4:7a:7f:27:e2:
                    4d:60:38:c1:00:25:ef:ab:7f:0a:2e:0d:9a:1a:6d:
                    94:74:0e:67:50:44:3e:4f:ec:e4:b7:a0:28:a0:4c:
                    98:12:46:5c:68:6c:46:84:bd:f5:4d:bc:d7:40:ea:
                    1b:59:44:c2:19:9b:ae:b8:f2:03:df:ee:6d:2b:fa:
                    7d:72:64:7e:d2:63:a3:90:f9:7f:ea:e2:0d:25:b4:
                    8e:cf:9f:35:42:24:75:27:3c:a2:31:64:59:22:ce:
                    a2:7d:f4:08:95:eb:a2:bc:77:f3:55:bc:a5:e6:90:
                    57:ed:09:6c:41:d2:e8:ff:b8:2d:0e:bc:91:95:d1:
                    c3:40:a4:46:2a:d9:28:ae:c1:5a:f4:1b:5a:5a:70:
                    58:39:46:0a:92:ff:c1:54:a2:9f:33:71:24:1e:01:
                    0e:7d:86:e7:aa:52:8b:15:0d:7c:80:a6:7f:ec:23:
                    b4:08:b6:f9:fc:c5:ca:a7:ff:fc:34:9a:23:ea:88:
                    34:2c:5c:3d:15:47:56:64:85:c9:5a:8d:5e:9c:2d:
                    f2:f3:9e:6f:33:03:42:ca:18:c2:9b:41:27:e2:ae:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B2:31:43:D1:A2:52:DC:84:F9:3A:74:F0:DF:90:6A:9C:B9:0E:93
            X509v3 Authority Key Identifier:
                keyid:18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/BbIxQ9GiUtyE-Tp08N-Qapy5DpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/GKPZLdqRA2czl3PWymSB-yB70sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.141.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:92:1c:e3:09:1a:80:df:5f:d9:6c:bb:81:4b:37:83:8f:
         f3:6c:a5:f4:f9:2b:46:2f:dd:64:e1:19:ae:ce:2b:c4:2e:da:
         d8:4d:86:8f:11:40:3e:d4:bc:fd:44:1c:76:45:98:06:e2:ef:
         42:d2:e5:bc:a0:cd:20:cc:3d:c2:4c:cb:32:77:4a:c8:f2:0e:
         f1:97:1b:6a:43:83:04:9e:69:82:37:b8:49:f2:09:c1:0b:35:
         f4:cc:67:51:45:bb:11:0c:4f:39:33:87:cc:7a:6a:f5:3b:33:
         88:0f:72:08:90:01:a4:33:1c:7d:24:ae:9d:db:e4:6c:de:bf:
         60:37:2d:bf:97:3c:d7:0a:69:06:0c:e1:e0:3f:34:84:5c:c6:
         3b:4d:48:b1:b6:c4:b0:9e:b7:96:ef:87:28:36:ef:b7:ae:10:
         24:3a:57:94:91:0c:4b:5d:03:b6:7f:a1:09:2d:5d:c0:5c:bf:
         b5:de:04:79:58:5e:ab:a7:a6:7d:ff:76:7e:c9:4f:0a:df:1a:
         11:eb:0a:0a:78:0a:2f:20:92:ca:3f:4e:11:f8:e6:8e:1d:c3:
         ae:b6:81:f0:13:a4:18:aa:87:c7:df:7e:9a:28:52:32:be:a6:
         1a:0e:58:2a:f1:35:94:ac:1f:57:bc:ae:3d:b5:11:3d:3e:83:
         4f:8e:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org