Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_ciH7L2BfSRnVsQehUek-VLD6ak.roa
File:                     _ciH7L2BfSRnVsQehUek-VLD6ak.roa (raw, json)
Hash identifier:          bgDXmuZyrULpg7liZM4mm32J+5bT3Fd4ufOU+HWRRKY=
Subject key identifier:   FD:C8:87:EC:BD:81:7D:24:67:56:C4:1E:85:47:A4:F9:52:C3:E9:A9
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       066284E9
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_ciH7L2BfSRnVsQehUek-VLD6ak.roa
Signing time:             Wed 16 Mar 2022 19:20:10 +0000
ROA not before:           Wed 16 Mar 2022 19:20:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133115
IP address blocks:        45.88.14.0/24 maxlen: 24
                          45.88.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107119849 (0x66284e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Mar 16 19:20:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdc887ecbd817d246756c41e8547a4f952c3e9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c5:30:9a:64:76:4d:8f:2b:af:0b:36:99:88:
                    be:cf:d2:05:02:82:12:9f:e3:05:6a:11:d6:a9:77:
                    59:04:55:93:88:f7:9f:2c:55:28:c0:ef:22:99:1e:
                    52:8b:49:27:1c:8d:13:c6:c0:e8:68:9b:a5:83:c4:
                    50:f8:23:e8:36:f4:1e:5c:c8:3e:2b:88:0a:5b:06:
                    ec:47:bd:6e:1a:3f:23:4f:a8:b4:fd:83:27:b6:ce:
                    0b:1f:6a:4b:c8:ee:cc:aa:25:a2:e2:04:a3:91:fb:
                    ad:48:32:01:f9:93:a4:8f:bc:9a:70:9d:4a:14:3c:
                    a0:e2:09:71:f3:48:0c:ea:f4:71:31:5a:58:8b:eb:
                    84:d0:67:16:a2:83:00:1f:d8:bf:6d:ff:c6:13:9f:
                    f4:9a:58:c8:f3:53:8f:16:76:ed:29:34:5e:b0:54:
                    17:4e:04:33:a7:7e:d0:c2:48:98:19:0c:a4:ef:81:
                    b2:b7:bd:50:8d:29:52:d3:30:0e:a2:99:b0:a6:f6:
                    8c:99:b3:2e:e4:ae:67:7e:83:83:aa:ac:f1:9f:39:
                    31:60:49:92:a9:c7:94:04:1d:35:15:09:0b:65:30:
                    27:ce:f5:f9:0d:61:78:0d:0b:29:70:21:de:7b:ea:
                    57:05:f1:2a:0e:01:ac:f4:01:b8:dd:3b:cb:59:f4:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C8:87:EC:BD:81:7D:24:67:56:C4:1E:85:47:A4:F9:52:C3:E9:A9
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_ciH7L2BfSRnVsQehUek-VLD6ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.13.0-45.88.14.255

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:87:d1:c8:00:e7:e3:e2:ac:d5:5b:0a:f3:d1:dd:e2:8b:
         fb:75:0e:e0:37:13:74:59:5c:bb:01:2b:b9:35:bc:41:26:67:
         3c:49:65:c0:96:da:10:17:c4:8d:73:bf:73:d6:dd:f3:06:29:
         c2:b3:d7:1e:77:af:45:d9:5c:2d:e7:1f:a2:3b:2e:c0:46:4e:
         9c:99:20:24:6a:79:bd:c7:95:7a:d8:b1:5d:30:00:ee:48:64:
         65:d3:74:da:c4:51:a1:20:16:41:79:28:9b:9e:ae:91:51:39:
         4c:1f:62:d0:25:7e:75:7f:80:6c:03:1a:71:d6:ce:1d:da:e8:
         a5:a7:18:05:f9:3e:de:5d:d2:c5:15:7c:1d:06:7f:02:b8:22:
         68:e3:4d:6f:07:0a:90:9d:f9:7a:6e:f9:ad:cb:ba:30:be:ea:
         7f:3f:d3:bc:3f:59:f9:85:ae:06:4f:d9:ef:d2:ec:ba:1e:24:
         c8:11:22:76:17:fb:42:85:0d:1a:89:3c:99:8a:b0:bc:88:f3:
         7f:9a:ca:10:bb:21:1b:3c:c5:41:e8:16:59:fd:5d:ee:10:a3:
         f9:68:f5:e3:c7:3b:8f:e8:a4:94:56:76:45:ee:fc:0a:9f:12:
         5a:66:e8:26:da:c9:54:91:a9:9c:5f:69:02:2d:28:17:87:16:
         9e:c4:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org