Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/Wwij10rB0JYOFEXzA6SzjILyalo.roa
File:                     Wwij10rB0JYOFEXzA6SzjILyalo.roa (raw, json)
Hash identifier:          KmEFjcUircJriVaCWE9anTXkky2DMOf7jEr5PYfRaCY=
Subject key identifier:   5B:08:A3:D7:4A:C1:D0:96:0E:14:45:F3:03:A4:B3:8C:82:F2:6A:5A
Certificate issuer:       /CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
Certificate serial:       0185711E72858BEB81B28011751CE931F28B
Authority key identifier: CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/Wwij10rB0JYOFEXzA6SzjILyalo.roa
Signing time:             Mon 02 Jan 2023 06:14:58 +0000
ROA not before:           Mon 02 Jan 2023 06:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        188.244.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:72:85:8b:eb:81:b2:80:11:75:1c:e9:31:f2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
        Validity
            Not Before: Jan  2 06:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b08a3d74ac1d0960e1445f303a4b38c82f26a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:71:51:5a:db:73:b8:a5:64:60:81:7d:3b:1d:
                    51:fb:66:d0:9e:ab:33:0f:e9:97:01:1e:a7:4d:cd:
                    10:1c:13:67:b6:ef:04:b2:31:bf:af:d5:43:1e:7f:
                    72:f5:9b:d7:35:18:2d:ac:6a:ff:e0:59:15:82:e3:
                    d3:09:f4:c4:c1:e0:61:3c:be:72:14:da:66:bf:2d:
                    b5:16:85:d9:ab:62:c0:79:47:ec:fa:3f:c6:52:00:
                    c8:90:83:fa:c6:52:ba:0e:67:10:ec:3d:b2:86:c6:
                    a4:ac:36:ac:b8:9b:01:8a:bb:18:9b:b5:ef:3d:91:
                    5e:eb:3a:41:47:f7:a7:aa:a1:38:dd:8d:50:4c:6e:
                    ca:cd:93:21:87:a8:58:8c:ed:35:0f:56:eb:9f:fe:
                    33:6a:0e:11:97:3b:db:96:0e:45:bd:f7:25:25:09:
                    29:85:fc:29:2a:8f:11:da:ef:ba:d0:4b:90:44:57:
                    ce:46:2d:b9:61:60:c1:81:bc:d3:b6:0a:82:67:40:
                    8a:d0:9d:69:ab:06:fc:a8:f2:a4:29:02:01:67:b9:
                    83:5d:1a:55:0a:10:90:45:82:b5:8a:5b:d4:5b:c7:
                    88:86:3b:9c:11:e0:a6:bd:fd:78:3f:da:03:91:37:
                    fd:07:80:f9:7a:7a:ba:25:9a:2e:21:bc:ea:e0:3b:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:08:A3:D7:4A:C1:D0:96:0E:14:45:F3:03:A4:B3:8C:82:F2:6A:5A
            X509v3 Authority Key Identifier:
                keyid:CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/Wwij10rB0JYOFEXzA6SzjILyalo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:2a:67:94:c5:d7:8d:a0:6e:de:3d:db:21:0e:4a:42:cb:
         01:cf:1f:12:bf:a7:2b:12:2e:39:96:e9:a9:ea:20:03:58:b7:
         5e:f2:3a:d4:95:9d:d0:e4:ae:4d:b6:fd:6a:21:e3:ab:d0:68:
         8f:64:db:2a:99:ed:86:6b:50:52:42:48:db:a9:52:03:f6:a6:
         7b:67:30:6e:fc:09:f2:a4:e5:c4:2c:d3:a9:d6:68:4a:c9:90:
         92:1a:fb:c4:2f:64:c0:8f:e3:66:46:d5:4c:74:2e:6d:02:c6:
         93:6a:01:ce:88:4a:e6:9d:5a:ef:42:61:01:71:ea:0e:72:0d:
         f3:7a:a9:f1:14:0c:93:6d:72:06:16:d9:42:c2:da:fb:b3:db:
         17:ed:ae:bd:06:28:e3:69:ef:b6:a6:d5:42:93:69:fe:ed:62:
         f2:0c:64:e5:24:8a:28:54:2e:57:c7:d6:9c:37:f1:54:4a:56:
         6c:36:74:76:12:68:48:6f:5b:f4:40:9d:17:ad:e9:90:c5:53:
         ae:66:d9:89:24:71:91:2b:bd:60:85:b1:90:cf:17:c9:02:22:
         d4:48:1c:3e:99:a5:4b:85:cf:62:64:a3:b5:2c:33:81:0a:88:
         69:5e:b0:e1:3f:24:35:c0:d9:48:fd:29:67:f7:11:32:79:f6:
         c9:fd:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:12 2024 by rpki-client on console-fra.rpki-client.org