Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/GR5FeQ3xKzQzfbqvfToBHRZ2vQw.roa
File:                     GR5FeQ3xKzQzfbqvfToBHRZ2vQw.roa (raw, json)
Hash identifier:          3OAuwHDaGfFSCs5piKiIt/AA8iEHpvXWo/aziIm6DCw=
Subject key identifier:   19:1E:45:79:0D:F1:2B:34:33:7D:BA:AF:7D:3A:01:1D:16:76:BD:0C
Certificate issuer:       /CN=b80fef22577fe3cdfe7004c49ccc8fcfa8820d88
Certificate serial:       01857142ECEC143811A8DAF6AF8B0B3C2006
Authority key identifier: B8:0F:EF:22:57:7F:E3:CD:FE:70:04:C4:9C:CC:8F:CF:A8:82:0D:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uA_vIld_483-cATEnMyPz6iCDYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/GR5FeQ3xKzQzfbqvfToBHRZ2vQw.roa
Signing time:             Mon 02 Jan 2023 06:54:49 +0000
ROA not before:           Mon 02 Jan 2023 06:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        195.96.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:ec:ec:14:38:11:a8:da:f6:af:8b:0b:3c:20:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80fef22577fe3cdfe7004c49ccc8fcfa8820d88
        Validity
            Not Before: Jan  2 06:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=191e45790df12b34337dbaaf7d3a011d1676bd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:7e:23:9b:56:30:c7:0d:51:42:c6:80:40:
                    95:90:21:31:6d:6c:09:ec:d0:d0:8d:f0:3b:16:f3:
                    0b:1d:34:5d:96:a9:05:6a:47:71:a8:50:e4:9b:ac:
                    54:f0:18:05:4f:94:b6:b4:f9:0f:0a:32:1c:60:b8:
                    ee:48:d2:e0:7f:9a:2a:44:1f:e2:e7:4e:b6:1a:04:
                    00:fa:a8:3d:9b:87:a8:b3:96:89:d4:34:5c:66:fa:
                    c6:a5:d4:79:2a:db:54:d5:cf:b6:34:3d:cd:71:af:
                    d8:ab:97:c1:a4:5b:36:9e:81:70:1c:0a:14:f0:3e:
                    89:f8:cd:29:ad:29:f1:b1:f5:53:b3:4b:d9:1d:45:
                    bc:e7:09:75:94:5e:12:00:0f:87:bd:4e:28:9c:88:
                    2c:17:7d:e1:f8:16:fb:55:1b:eb:dc:ef:c5:e0:2f:
                    67:53:bb:91:d6:57:35:28:6e:a1:dd:21:21:6a:00:
                    8b:b1:42:85:8e:0e:9c:c4:02:63:bd:d3:16:61:bb:
                    75:cb:47:bc:87:98:db:f2:e1:d4:90:1e:23:df:8b:
                    4e:2d:e8:a7:55:0e:eb:e0:d6:45:45:d0:f2:e6:11:
                    e7:b2:1f:05:2a:f1:77:80:f0:72:99:33:3d:72:cb:
                    c3:8a:b1:68:84:08:87:8b:4f:21:c0:8b:5e:76:c9:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:45:79:0D:F1:2B:34:33:7D:BA:AF:7D:3A:01:1D:16:76:BD:0C
            X509v3 Authority Key Identifier:
                keyid:B8:0F:EF:22:57:7F:E3:CD:FE:70:04:C4:9C:CC:8F:CF:A8:82:0D:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uA_vIld_483-cATEnMyPz6iCDYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/GR5FeQ3xKzQzfbqvfToBHRZ2vQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/uA_vIld_483-cATEnMyPz6iCDYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:24:6e:66:f0:bc:87:f9:ce:55:b1:6f:4c:94:6a:db:08:
         2d:be:b2:6a:d8:74:33:a0:3c:2a:06:5f:a5:17:1d:0c:2a:a1:
         91:35:cf:64:45:d6:d8:a3:da:f1:b2:6b:44:a6:2b:c6:b9:7b:
         1d:8a:29:ea:ff:5b:b7:24:03:53:53:0f:6f:c5:c2:36:d8:f4:
         6e:78:85:61:0b:a5:e2:e9:11:a2:19:19:80:64:50:ad:67:47:
         ef:39:c9:02:8a:5e:b9:29:d2:24:eb:45:40:fc:23:32:4a:7b:
         2f:1b:37:0b:ad:b7:31:fb:61:88:e6:a7:54:94:04:9b:63:2d:
         dc:27:43:2c:8f:4d:26:77:94:cc:46:35:e0:38:43:57:12:bd:
         4e:96:32:c3:cb:22:0f:0c:d6:7b:70:85:ec:69:14:26:aa:7f:
         05:b2:c8:eb:db:61:14:d7:d0:80:a9:56:64:fe:49:51:8c:99:
         94:44:5b:fa:bf:21:ea:45:4e:7e:ae:7c:94:09:f2:3b:59:a6:
         9e:32:a1:c4:90:8f:af:4e:e6:ad:fd:1a:22:53:71:98:ab:5c:
         dc:18:c8:2c:14:fb:20:24:70:1b:11:b9:4e:5a:ea:27:97:16:
         27:d5:8a:7f:6a:c7:55:af:99:e7:28:6b:42:45:7b:08:6b:99:
         32:a3:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:28 2024 by rpki-client on console-fra.rpki-client.org