Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/MMmoLqfElAPICK2yO0gRFKFGm1w.roa
File:                     MMmoLqfElAPICK2yO0gRFKFGm1w.roa (raw, json)
Hash identifier:          S5Oq6Gru2PB7FhlgJ9dFG+Vup6ZPlr356uPJQI76iQs=
Subject key identifier:   30:C9:A8:2E:A7:C4:94:03:C8:08:AD:B2:3B:48:11:14:A1:46:9B:5C
Certificate issuer:       /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial:       018B22E8101D2CF97F20095FB4E69EB566EE
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/MMmoLqfElAPICK2yO0gRFKFGm1w.roa
Signing time:             Thu 12 Oct 2023 08:01:55 +0000
ROA not before:           Thu 12 Oct 2023 08:01:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212384
IP address blocks:        94.103.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:22:e8:10:1d:2c:f9:7f:20:09:5f:b4:e6:9e:b5:66:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33980d41e32a5616382e906840264945af02d67e
        Validity
            Not Before: Oct 12 08:01:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30c9a82ea7c49403c808adb23b481114a1469b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:26:4a:cc:4b:72:b8:2b:d2:7b:61:6d:51:
                    6d:1e:81:ad:7e:fb:a5:c0:cf:5e:ac:07:04:52:4a:
                    7c:cc:60:bc:90:86:c6:d5:98:e8:48:b9:bb:d2:f0:
                    39:ea:da:db:c7:f1:37:60:ea:2c:c9:b2:9f:02:d8:
                    74:53:9c:65:0a:b9:00:73:aa:ca:e3:18:9a:f1:dd:
                    2d:b3:57:9f:ee:d1:1c:2d:95:ec:c8:2b:6b:97:9b:
                    f4:71:56:6c:b8:83:16:75:c9:6a:60:9a:3a:33:07:
                    9b:74:36:91:ca:e2:3b:a6:f1:96:1c:44:9f:7c:5a:
                    8b:b4:e5:8c:0a:59:e8:49:12:c8:27:54:c0:61:74:
                    d1:3e:7b:cf:02:48:17:7a:5e:ab:7f:5a:18:11:13:
                    a9:3a:a6:00:51:a2:ae:95:26:b2:0c:20:be:5e:2b:
                    b6:50:a8:15:09:27:87:67:93:b7:d3:28:1f:dd:2d:
                    2f:08:e5:9d:00:df:d8:4e:90:ec:72:da:92:2e:10:
                    44:5a:4c:47:6e:38:16:bf:c3:5a:4e:1e:c7:5f:27:
                    30:0e:d7:5b:10:77:32:89:f7:53:c7:2c:ac:db:2d:
                    5e:a9:c9:b5:ec:c6:6a:bc:61:b2:68:19:ce:66:1d:
                    e6:11:14:32:fd:46:86:b3:c0:58:eb:69:c3:ce:8a:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C9:A8:2E:A7:C4:94:03:C8:08:AD:B2:3B:48:11:14:A1:46:9B:5C
            X509v3 Authority Key Identifier:
                keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/MMmoLqfElAPICK2yO0gRFKFGm1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:57:4c:03:2b:f9:74:f4:fe:0a:90:e6:f5:58:fb:ed:21:
         c3:77:46:d5:cb:c0:a0:30:8b:f8:74:24:91:dc:1b:4c:3c:e7:
         be:43:1e:4a:cf:1c:70:3b:ec:dd:b0:61:69:4a:98:1a:af:14:
         5b:71:ee:2c:60:aa:35:7d:11:5c:e9:32:ef:de:c7:09:64:e6:
         a1:4e:97:55:e2:76:47:e6:fa:63:fb:0c:62:d3:1d:7e:7e:54:
         99:e7:6b:d5:84:a8:5c:79:83:76:b3:c3:21:15:38:5f:00:c1:
         a2:63:34:89:6e:99:04:9b:8d:ca:74:bb:9c:c3:ed:34:99:64:
         77:21:3c:ec:f0:c9:dc:3c:c8:3d:86:cc:19:62:4d:10:b2:9d:
         f9:ad:8d:09:19:d1:b1:af:3f:83:f5:0f:46:dd:a3:67:ab:84:
         41:3e:ee:99:14:c3:9c:1d:4b:d5:88:d4:a8:2a:f5:cb:a1:41:
         48:89:73:90:a5:d7:38:8a:52:3a:a2:06:1b:b5:73:80:5a:7f:
         5c:da:ee:19:54:79:83:c5:74:22:fc:98:b4:e1:bc:0b:8f:43:
         23:aa:99:c8:1b:43:61:f3:a4:e0:69:15:5b:4a:30:0c:64:e7:
         3c:19:64:da:db:98:1b:d3:18:e9:e9:be:93:93:75:8d:88:53:
         7a:52:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org