Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/QLN1iVQB_BdfN0tim7uRtoRu4JM.roa
File:                     QLN1iVQB_BdfN0tim7uRtoRu4JM.roa (raw, json)
Hash identifier:          E1SZfGwZCuIWk4BqeSZ9EG8YmGq7B6toFrX5ABMZW6k=
Subject key identifier:   40:B3:75:89:54:01:FC:17:5F:37:4B:62:9B:BB:91:B6:84:6E:E0:93
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       0183B1C1474C99AE8FEEE1A130492AB57175
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/QLN1iVQB_BdfN0tim7uRtoRu4JM.roa
Signing time:             Fri 07 Oct 2022 09:22:57 +0000
ROA not before:           Fri 07 Oct 2022 09:22:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142430
IP address blocks:        109.122.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:c1:47:4c:99:ae:8f:ee:e1:a1:30:49:2a:b5:71:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Oct  7 09:22:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40b375895401fc175f374b629bbb91b6846ee093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:c3:60:60:0e:ab:55:ee:2d:1a:1b:0c:de:
                    ae:66:6d:42:e4:ff:a7:af:7b:fc:cc:22:cf:98:90:
                    89:62:e8:be:bc:2d:16:ba:3e:dc:66:0d:25:e2:dc:
                    56:73:b6:21:45:39:88:32:e0:8e:4b:20:3f:3e:ea:
                    ab:17:b3:70:45:e8:02:be:9b:9c:5d:de:af:1c:ff:
                    15:74:81:e7:61:05:a7:f4:a8:f1:ca:fa:63:08:32:
                    e2:ba:32:80:57:f3:16:dc:95:0e:b6:47:06:86:dd:
                    88:04:8e:5d:a4:4e:57:9b:ba:2a:37:84:a8:0e:2c:
                    66:ea:90:c0:78:3e:99:f1:46:8d:cc:7a:d6:fc:02:
                    d5:f0:cd:60:ec:e4:ee:e5:fd:24:b2:74:87:50:7b:
                    e5:66:65:bf:a5:59:77:2c:9d:ed:f6:ad:97:61:ba:
                    f0:39:d3:8a:5a:6b:5e:44:43:c3:4d:a6:72:8b:22:
                    3a:17:a8:a9:a0:a6:82:91:4d:82:5e:d4:19:68:21:
                    43:de:1b:61:ac:10:c3:ef:10:60:df:04:8a:39:79:
                    36:68:17:24:f0:fe:ab:4d:db:3f:07:f9:dc:30:dd:
                    3b:7c:d0:f4:90:7c:2c:9f:d5:36:0f:35:ff:67:ba:
                    cd:df:48:16:fc:66:bf:fc:7b:23:61:d1:cc:91:92:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B3:75:89:54:01:FC:17:5F:37:4B:62:9B:BB:91:B6:84:6E:E0:93
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/QLN1iVQB_BdfN0tim7uRtoRu4JM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:c3:bc:f2:46:cd:3e:ca:db:07:21:ac:e5:df:32:11:80:
         a6:91:64:9c:26:3a:25:1c:7c:23:79:ad:d8:7a:06:cf:e8:90:
         e8:92:60:e5:2a:9c:f7:a9:6f:5a:45:07:5c:e5:1a:c7:44:42:
         2a:0b:77:9b:f9:1d:a4:54:7d:35:54:fb:c8:e1:28:7d:f5:3b:
         45:f2:20:c8:4c:b0:6e:a2:e6:34:1d:ca:9f:5b:b9:5b:0c:20:
         3c:e0:75:ff:79:6f:9a:e1:84:d4:8c:9c:67:73:73:e9:6c:30:
         0e:ca:e6:77:d4:6d:72:09:58:84:99:0f:be:50:41:85:fe:1a:
         98:83:f2:3a:5e:90:c8:4d:ef:db:2e:ab:2d:be:5c:49:b9:d0:
         6d:b1:b8:8b:ea:14:d2:20:66:fb:cc:10:f8:21:c4:d3:6f:8f:
         26:ec:9c:5b:e7:5c:6e:fa:80:9e:fc:91:23:9a:8e:24:be:b5:
         8f:f9:9b:d8:18:cb:99:8f:00:b1:37:01:de:d3:62:f9:df:b7:
         9d:1b:5a:51:53:ca:2e:ab:da:f7:3c:04:ed:dc:4c:35:d3:df:
         38:c5:93:58:b3:c4:c1:84:94:df:b8:4e:4f:2c:c2:4c:cc:0d:
         2b:f8:ba:8e:94:2a:fc:95:76:5d:0f:42:ca:95:80:a9:33:b3:
         0d:73:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org