Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wIQycWfxCVJbJgLmEB-WSSS8fnM.roa
File:                     wIQycWfxCVJbJgLmEB-WSSS8fnM.roa (raw, json)
Hash identifier:          hNWZxm+ZiZsVU919MtSyzBlVnqigs4124RLIEIdsaU0=
Subject key identifier:   C0:84:32:71:67:F1:09:52:5B:26:02:E6:10:1F:96:49:24:BC:7E:73
Certificate issuer:       /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial:       0184E9C9180297A512466E03C2B69E072CAA
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wIQycWfxCVJbJgLmEB-WSSS8fnM.roa
Signing time:             Tue 06 Dec 2022 23:33:00 +0000
ROA not before:           Tue 06 Dec 2022 23:33:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201364
IP address blocks:        5.181.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e9:c9:18:02:97:a5:12:46:6e:03:c2:b6:9e:07:2c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
        Validity
            Not Before: Dec  6 23:33:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c084327167f109525b2602e6101f964924bc7e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:18:c5:cb:e7:fb:76:64:81:80:4f:29:b6:
                    8d:42:59:72:36:a1:00:fa:df:cd:6f:bd:18:50:db:
                    5b:19:38:ff:ea:e1:5c:d3:b8:27:29:fc:14:97:5c:
                    0a:49:45:ec:c8:0c:3a:f0:d0:0b:43:3f:41:4a:f7:
                    c0:54:42:46:ad:8a:c5:69:98:3a:0a:1f:99:d5:65:
                    54:d3:d5:61:f0:63:43:e7:24:39:a3:cf:04:f8:7e:
                    9b:c0:b8:c2:fb:22:55:ad:cb:1d:aa:76:f5:6a:7d:
                    fc:09:8c:c9:7e:97:60:b3:17:d7:52:33:3a:35:71:
                    f1:5a:b5:5f:62:a4:a0:42:4e:ea:2d:4b:2d:d4:3d:
                    1b:97:41:89:c8:1b:13:78:66:aa:f0:b5:62:07:91:
                    cc:5a:79:22:2e:46:70:6b:31:47:ff:58:2e:6b:f4:
                    a0:b4:0b:94:79:7d:77:fa:15:e5:7f:3a:2e:a2:79:
                    bc:66:81:1a:7b:3b:9d:ad:71:ff:13:7b:fb:de:a6:
                    a7:47:85:76:86:6c:5e:97:c7:70:0a:32:7f:95:12:
                    2f:94:68:af:05:5d:1c:32:24:e4:5b:33:b3:fa:0a:
                    01:fd:f9:27:e9:bf:52:57:e8:96:1b:92:13:65:7c:
                    06:4b:74:99:18:8f:2d:53:16:3c:b1:c0:29:6b:6a:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:32:71:67:F1:09:52:5B:26:02:E6:10:1F:96:49:24:BC:7E:73
            X509v3 Authority Key Identifier:
                keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wIQycWfxCVJbJgLmEB-WSSS8fnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:92:a1:19:c4:4b:75:4b:9e:1e:24:a4:33:0c:30:1c:73:ec:
         a7:59:7d:af:a5:20:f3:c0:58:5e:d6:15:73:4d:d7:7b:ad:12:
         24:14:52:40:21:37:ec:ec:48:f1:1f:fb:71:f3:9f:54:10:25:
         f2:a0:38:e7:74:3e:47:b4:3c:9e:57:76:63:ab:6c:3d:f5:97:
         89:82:ee:d4:b9:ee:ef:5b:44:3d:1c:dd:30:a2:72:fe:7f:a6:
         ff:9a:32:ac:f7:f8:34:5b:ab:82:af:0b:06:10:c9:04:e3:b9:
         d6:7c:1e:83:32:6a:bb:fc:7b:51:40:5a:48:d7:ff:af:cf:db:
         1a:15:f3:76:12:46:2a:a1:ef:49:39:99:41:17:62:7e:ac:a8:
         6e:7f:b7:79:a5:c5:92:5f:ba:46:10:54:4a:23:d5:a3:3f:c7:
         6c:16:c7:b5:23:38:45:d4:04:c9:d5:45:98:a9:32:cd:9a:23:
         24:b6:71:f1:32:d8:98:c2:ef:75:e2:b6:c9:d3:3d:3f:ee:67:
         7e:26:76:79:ee:13:05:18:71:ae:0b:92:4c:7c:26:6f:7d:77:
         06:be:b6:47:dc:d7:53:df:f0:a7:a5:d0:16:a2:ce:2c:04:4b:
         90:cf:1d:e5:1a:d9:15:61:85:b4:71:c8:91:c9:ff:d8:5c:76:
         26:4a:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org