Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/YbAyaTGDsJqlZpjUdygMTO1oiU0.roa
File:                     YbAyaTGDsJqlZpjUdygMTO1oiU0.roa (raw, json)
Hash identifier:          XzGKvN+n/CW71kHgI99Vy5SU4s5rQRrz00OvXhc8md8=
Subject key identifier:   61:B0:32:69:31:83:B0:9A:A5:66:98:D4:77:28:0C:4C:ED:68:89:4D
Certificate issuer:       /CN=7b3029245fb9e4e59b44ed5bcd84853bba95e6a7
Certificate serial:       018B8FC15CC398B85E59B32FDD0F1154C0DB
Authority key identifier: 7B:30:29:24:5F:B9:E4:E5:9B:44:ED:5B:CD:84:85:3B:BA:95:E6:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezApJF-55OWbRO1bzYSFO7qV5qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/YbAyaTGDsJqlZpjUdygMTO1oiU0.roa
Signing time:             Thu 02 Nov 2023 11:18:15 +0000
ROA not before:           Thu 02 Nov 2023 11:18:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        193.228.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:c1:5c:c3:98:b8:5e:59:b3:2f:dd:0f:11:54:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3029245fb9e4e59b44ed5bcd84853bba95e6a7
        Validity
            Not Before: Nov  2 11:18:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=61b032693183b09aa56698d477280c4ced68894d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:b0:5e:f3:42:68:c3:ea:f4:d7:07:08:d0:
                    12:7d:ed:c4:2d:ad:c9:65:8d:08:72:76:5d:2f:7c:
                    64:0d:5c:5f:00:ef:62:5a:c2:b5:0d:b3:12:67:6d:
                    82:a5:c7:17:4f:c2:1e:fc:9f:19:61:cb:3d:31:75:
                    6e:83:23:f9:3e:15:d6:dd:04:3f:2f:30:fa:ad:80:
                    d5:3b:9a:36:a9:22:e8:b5:49:11:0b:c2:20:00:e4:
                    2d:e0:ba:4b:90:7f:be:ec:9f:59:ab:57:e7:92:0d:
                    6b:bf:a6:04:29:44:77:ff:38:c0:7d:5d:82:8a:e9:
                    b0:ce:67:93:c4:07:43:c3:10:d6:ca:e9:1d:4b:f5:
                    61:dc:b3:88:d4:34:ba:5a:ea:11:72:82:d3:8a:67:
                    62:40:5b:66:ae:71:f4:76:21:9c:15:ba:f8:2d:00:
                    71:4c:00:bf:2a:04:00:5d:1d:73:26:dd:b9:c4:22:
                    f5:e5:a6:e4:6b:6e:09:28:4c:54:2c:2f:6a:78:35:
                    50:a4:80:6f:11:f7:a4:ca:53:d5:74:7a:1a:53:39:
                    46:d8:fa:77:07:18:ae:76:27:8b:bf:eb:98:37:4b:
                    cb:66:5d:24:6c:59:35:57:7b:55:32:a4:ee:50:36:
                    21:72:43:fe:a8:e8:47:6d:70:c5:5f:d5:b1:d3:99:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:32:69:31:83:B0:9A:A5:66:98:D4:77:28:0C:4C:ED:68:89:4D
            X509v3 Authority Key Identifier:
                keyid:7B:30:29:24:5F:B9:E4:E5:9B:44:ED:5B:CD:84:85:3B:BA:95:E6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezApJF-55OWbRO1bzYSFO7qV5qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/YbAyaTGDsJqlZpjUdygMTO1oiU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/ezApJF-55OWbRO1bzYSFO7qV5qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:ad:ac:87:f3:16:f2:fc:22:f9:fb:c2:4c:c2:c4:dc:50:
         e7:92:ae:5d:a0:ca:2f:4b:c0:4c:de:bb:98:bd:7c:63:17:d9:
         5d:f1:99:08:51:2b:27:7c:88:82:b0:cc:e0:90:4b:f6:2a:00:
         0f:3e:e0:04:f5:44:99:45:88:62:5b:a1:3f:13:73:e7:aa:77:
         e9:2f:68:fb:1f:a7:5a:5f:84:d5:d7:b0:dd:22:6b:84:80:77:
         bf:74:d1:16:1b:d8:33:b6:48:e8:74:21:c5:18:c5:fd:ff:12:
         f5:39:51:f3:4a:c9:68:a3:87:07:43:f7:09:65:63:fe:21:6d:
         ad:9f:f6:b0:58:a4:f2:59:a0:54:d0:f5:c4:db:8c:6b:72:57:
         f0:11:20:4d:71:dc:8f:a9:20:dc:fb:e4:7f:8d:5e:0a:b6:1d:
         19:56:b5:c6:9b:05:ea:34:05:7c:b6:c0:c2:f1:88:80:fb:30:
         45:57:50:58:af:41:ba:84:ab:61:6f:89:30:7d:6d:a4:5f:45:
         79:d7:87:dc:97:6f:0c:df:a2:58:85:01:ff:0b:bc:b4:e3:eb:
         52:e0:a1:65:a5:1e:55:a0:93:df:f6:05:24:02:5f:bd:32:5f:
         9c:ba:dc:e8:10:c8:6a:10:ac:50:eb:d8:46:86:f3:19:81:ed:
         12:76:b3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org