Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/gxtRvb5iiU5ShVjJaLoiORQW4Mo.roa
File:                     gxtRvb5iiU5ShVjJaLoiORQW4Mo.roa (raw, json)
Hash identifier:          aUoVQg2Wd8D2m9xUitEZ6ndJoB3RkcSYiN70pL29FL0=
Subject key identifier:   83:1B:51:BD:BE:62:89:4E:52:85:58:C9:68:BA:22:39:14:16:E0:CA
Certificate issuer:       /CN=4c9afd740b5348119e5119aeaa26a76107739032
Certificate serial:       018CC34927DB5875A5284D3F86733608A3F5
Authority key identifier: 4C:9A:FD:74:0B:53:48:11:9E:51:19:AE:AA:26:A7:61:07:73:90:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJr9dAtTSBGeURmuqianYQdzkDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/gxtRvb5iiU5ShVjJaLoiORQW4Mo.roa
Signing time:             Mon 01 Jan 2024 04:30:00 +0000
ROA not before:           Mon 01 Jan 2024 04:30:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        5.42.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:27:db:58:75:a5:28:4d:3f:86:73:36:08:a3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9afd740b5348119e5119aeaa26a76107739032
        Validity
            Not Before: Jan  1 04:30:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=831b51bdbe62894e528558c968ba22391416e0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:02:2c:97:b2:d6:c1:a1:09:c9:bc:72:42:
                    0d:2c:1d:b3:d4:72:2c:8e:5b:5d:94:d5:c9:ed:0c:
                    e6:6f:db:9e:a2:19:fa:0a:8d:85:71:c4:9e:19:d3:
                    85:46:40:5c:e6:0c:e0:13:a5:a6:ae:8a:54:73:a0:
                    a1:25:99:a5:ab:48:b5:66:cb:d3:bf:93:7e:b5:cb:
                    07:f9:fc:43:0c:6b:94:9d:f9:91:05:c3:80:3e:04:
                    89:6d:2e:ae:7f:bc:d4:0b:ec:0d:31:d9:34:ef:78:
                    ca:2c:f3:62:9a:57:ad:4c:4c:b1:c1:d6:a5:12:fc:
                    90:19:cd:f3:bc:c1:f4:3c:58:e0:2a:18:96:00:3e:
                    c7:26:7a:2c:b7:b1:75:38:23:3c:b2:1f:2c:42:87:
                    c0:75:a6:70:16:9a:c3:da:38:43:a8:f1:91:ec:d3:
                    7b:bb:a3:eb:05:cc:a0:20:dc:ea:91:fa:61:f9:fd:
                    44:98:72:8d:0e:da:22:85:c9:f8:ae:6a:7f:dc:a9:
                    c5:5b:80:e0:99:4d:3b:32:ca:98:6e:01:7c:21:1e:
                    b4:fb:4c:8b:c7:51:5d:ec:de:b8:06:32:af:46:33:
                    b4:91:de:e9:18:b6:d7:33:8b:ab:e1:e0:28:6e:70:
                    49:31:88:37:ae:57:cc:f8:d7:cc:4f:30:c6:6a:4c:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1B:51:BD:BE:62:89:4E:52:85:58:C9:68:BA:22:39:14:16:E0:CA
            X509v3 Authority Key Identifier:
                keyid:4C:9A:FD:74:0B:53:48:11:9E:51:19:AE:AA:26:A7:61:07:73:90:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJr9dAtTSBGeURmuqianYQdzkDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/gxtRvb5iiU5ShVjJaLoiORQW4Mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/TJr9dAtTSBGeURmuqianYQdzkDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.42.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:af:60:6e:23:44:31:a0:27:f8:84:d9:2b:11:3d:07:11:15:
         64:a8:6a:cb:95:88:87:88:ce:18:58:4c:aa:99:80:f4:ec:f7:
         6c:8e:c3:6f:11:0e:89:e1:41:dc:55:6b:e0:f3:6b:df:80:63:
         19:23:74:15:19:79:6e:a4:eb:5a:1d:fe:fc:05:8a:00:08:96:
         ff:8a:91:e1:4e:46:32:3f:9b:2d:92:13:b4:6c:95:6f:cf:15:
         a5:e4:63:c1:9e:5c:6e:4f:ad:bc:5d:9e:88:75:76:b4:5b:10:
         8e:d6:54:63:7b:9a:e4:e5:3a:fd:84:ff:75:1e:9d:b1:fa:00:
         2a:52:98:5f:f5:f3:62:89:0d:bc:7f:f0:cb:92:b4:82:f9:97:
         7d:dd:2b:8a:f6:97:ea:43:e6:6e:b5:6b:6d:25:10:ee:60:9a:
         10:1b:1c:63:a1:d3:42:e7:90:0c:11:34:ca:2d:8c:ba:e9:63:
         0d:b8:87:fa:0d:33:8f:47:39:ff:f4:78:19:19:14:a8:85:f3:
         ac:e5:04:b9:e4:c8:c6:a2:c7:31:a4:43:00:5a:d8:9e:a8:ec:
         f1:bd:8c:ae:69:74:b7:0d:d4:52:38:97:8f:18:30:12:b6:43:
         30:13:4d:db:08:66:f7:c3:cb:a2:47:fe:e8:3d:c3:92:ad:49:
         b9:78:e0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:43 2024 by rpki-client on console-fra.rpki-client.org