Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16bc1f-4ae9-4c5a-a86a-e03abc0af4c4/1/DCuyK_S_wKw_Hn1rsBzQXKNA7Rs.roa
File:                     DCuyK_S_wKw_Hn1rsBzQXKNA7Rs.roa (raw, json)
Hash identifier:          HSyab7BUH+u2L95s5PkYWY0NifW2ljyOBaNqHePGkSU=
Subject key identifier:   0C:2B:B2:2B:F4:BF:C0:AC:3F:1E:7D:6B:B0:1C:D0:5C:A3:40:ED:1B
Certificate issuer:       /CN=5334f853b25de86b392a31345ad425db7c78048a
Certificate serial:       0185B1F9110A6CCA9461BCFD92620784E825
Authority key identifier: 53:34:F8:53:B2:5D:E8:6B:39:2A:31:34:5A:D4:25:DB:7C:78:04:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzT4U7Jd6Gs5KjE0WtQl23x4BIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/16bc1f-4ae9-4c5a-a86a-e03abc0af4c4/1/DCuyK_S_wKw_Hn1rsBzQXKNA7Rs.roa
Signing time:             Sat 14 Jan 2023 20:29:28 +0000
ROA not before:           Sat 14 Jan 2023 20:29:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213295
IP address blocks:        195.200.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b1:f9:11:0a:6c:ca:94:61:bc:fd:92:62:07:84:e8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5334f853b25de86b392a31345ad425db7c78048a
        Validity
            Not Before: Jan 14 20:29:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c2bb22bf4bfc0ac3f1e7d6bb01cd05ca340ed1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:22:37:f7:59:24:85:9a:d1:cd:59:0a:b1:
                    a6:66:55:dd:b2:98:33:7a:23:a7:09:09:3f:38:a9:
                    27:75:ac:cf:ce:78:52:b3:27:eb:96:05:25:21:e2:
                    87:2a:3a:82:21:4a:b4:0a:35:36:c8:fd:e8:1b:11:
                    54:6c:da:fc:29:54:f0:a5:c0:9d:19:34:33:da:88:
                    09:de:48:1b:ff:b5:30:10:a2:8d:c9:00:f3:10:a5:
                    16:21:39:20:8e:32:d7:73:7e:bf:47:d4:da:b2:73:
                    86:2c:4a:d9:83:45:db:7f:82:e4:51:72:13:ea:73:
                    6a:c4:d6:e2:fc:13:6c:4c:55:95:dd:89:78:ca:a3:
                    12:9c:bf:e1:27:78:7f:dc:ea:c9:c0:39:73:ff:df:
                    de:71:63:94:3c:2b:c3:dc:a0:dc:f9:c0:5a:f9:00:
                    6e:41:07:42:66:18:ca:a6:41:f1:1c:b3:b0:ac:e0:
                    0d:28:81:da:85:de:c2:f2:5b:52:49:13:e1:a8:fb:
                    31:88:50:24:f0:d5:e2:c0:87:f5:2e:66:70:39:16:
                    e0:52:a1:b1:5d:ab:04:91:9d:84:35:dd:06:a6:e7:
                    11:04:50:55:ad:e4:8b:d7:b0:3b:3c:95:37:42:5a:
                    e4:54:89:a6:31:5f:27:0e:b4:74:18:1e:80:e3:cd:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:B2:2B:F4:BF:C0:AC:3F:1E:7D:6B:B0:1C:D0:5C:A3:40:ED:1B
            X509v3 Authority Key Identifier:
                keyid:53:34:F8:53:B2:5D:E8:6B:39:2A:31:34:5A:D4:25:DB:7C:78:04:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzT4U7Jd6Gs5KjE0WtQl23x4BIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16bc1f-4ae9-4c5a-a86a-e03abc0af4c4/1/DCuyK_S_wKw_Hn1rsBzQXKNA7Rs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16bc1f-4ae9-4c5a-a86a-e03abc0af4c4/1/UzT4U7Jd6Gs5KjE0WtQl23x4BIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.200.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:64:a6:11:2d:c7:cb:0a:cf:98:3b:63:82:7c:3b:77:06:a3:
         41:a5:78:ea:13:d9:ea:4c:26:70:a1:36:9c:ed:c2:91:db:cf:
         44:b6:5d:c7:3e:75:25:b8:8a:ac:0b:3c:f6:de:b8:45:da:09:
         13:d4:16:eb:fc:16:80:2b:22:50:55:eb:6a:d3:45:92:88:82:
         f7:0a:ed:e7:5e:4a:7c:a0:9b:c7:e4:b7:46:2f:1e:a0:26:3c:
         26:1f:e6:d9:92:2b:b8:05:52:6a:c5:9d:dd:69:90:be:3e:e3:
         f8:7d:d8:82:8e:a9:4d:c0:04:af:af:5f:3c:b2:36:62:87:bc:
         bf:e2:e7:7a:77:05:64:7f:b1:3b:63:b4:14:34:78:37:8e:3a:
         3a:f3:4f:0b:4d:26:ac:27:30:53:72:04:84:a8:28:37:39:4b:
         3d:ea:de:20:8d:d8:4f:84:f2:11:75:f5:62:36:9f:ae:1d:09:
         fe:a2:b1:3b:99:21:ba:ce:5e:28:18:55:26:3f:03:9c:52:98:
         bb:17:a6:cf:53:3b:78:9b:83:37:31:b3:b6:15:06:45:cf:4e:
         a2:99:13:62:07:1b:99:6e:ae:82:be:a2:64:4b:f3:0a:d5:a6:
         ab:1d:72:bd:7b:3d:cd:5a:88:73:df:e6:94:85:ec:3b:bd:21:
         88:1f:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org