Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/ax7JREe5GWT0Rtift__A5NauIlM.roa
File:                     ax7JREe5GWT0Rtift__A5NauIlM.roa (raw, json)
Hash identifier:          3Iu/lAytRjTFD2HRlDfTdspveu7ZFWxA+xw05XocdnE=
Subject key identifier:   6B:1E:C9:44:47:B9:19:64:F4:46:D8:9F:B7:FF:C0:E4:D6:AE:22:53
Certificate issuer:       /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial:       0183F4D21302D778C1C73C5A4F50C16FE323
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/ax7JREe5GWT0Rtift__A5NauIlM.roa
Signing time:             Thu 20 Oct 2022 09:55:51 +0000
ROA not before:           Thu 20 Oct 2022 09:55:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212335
IP address blocks:        94.103.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f4:d2:13:02:d7:78:c1:c7:3c:5a:4f:50:c1:6f:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33980d41e32a5616382e906840264945af02d67e
        Validity
            Not Before: Oct 20 09:55:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b1ec94447b91964f446d89fb7ffc0e4d6ae2253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:f7:dc:c7:0e:1e:6e:81:2a:09:94:f5:a1:
                    74:18:6c:45:4a:13:31:e1:6d:11:86:a5:f1:5f:cc:
                    f5:54:6e:cb:8d:e1:83:4a:17:9c:01:4a:47:26:79:
                    4b:e9:dc:95:3f:57:8b:4a:83:9d:b1:6a:d4:43:0c:
                    3b:f7:10:f7:bf:80:c7:9b:2a:b2:35:f7:0a:ee:33:
                    bd:0f:4a:ee:98:11:6f:6b:b1:32:13:9d:11:bb:e4:
                    f3:4b:a8:2c:9f:d3:f9:9a:a2:ec:65:28:10:dd:09:
                    d7:67:bf:63:72:59:d3:1c:30:ce:a8:4f:39:ab:f1:
                    68:d7:47:a8:0e:41:ff:13:4e:6d:a7:d4:08:42:5c:
                    db:40:cf:b2:81:a6:3d:27:f3:76:ed:3a:f4:fa:5f:
                    af:db:99:4c:e6:b1:06:f5:37:e3:2a:81:ee:60:e8:
                    f1:90:2f:50:f2:9e:9d:72:1c:01:cf:08:66:af:97:
                    d1:12:4b:ac:56:e0:a6:52:fe:0c:95:38:ec:3a:87:
                    d8:7c:2b:0b:0f:2d:ff:58:6a:7a:30:6f:93:43:0c:
                    ef:2e:6c:07:56:db:4c:f6:a2:ff:cb:5b:ab:85:3e:
                    3b:b0:0f:d4:be:b4:7c:38:29:15:00:83:e8:37:40:
                    a9:1c:2b:da:f4:cd:5e:2d:76:40:c3:d0:93:e5:d6:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1E:C9:44:47:B9:19:64:F4:46:D8:9F:B7:FF:C0:E4:D6:AE:22:53
            X509v3 Authority Key Identifier:
                keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/ax7JREe5GWT0Rtift__A5NauIlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:01:56:7a:f8:94:a8:f5:ff:90:2d:8e:fc:ac:8c:e7:41:
         ef:b6:03:0e:f6:e6:56:26:63:b0:a1:7b:dd:ef:e4:ed:bf:39:
         b4:c4:41:8a:54:00:7c:b2:f2:8a:aa:cc:10:3c:8e:2b:10:b4:
         46:93:bc:80:65:56:5a:b0:d2:16:3f:cf:bb:32:ae:8a:06:1d:
         ba:69:5c:ea:da:cd:5a:25:55:72:00:b7:8f:a0:3c:88:5c:05:
         fc:6c:f2:14:ad:0d:2e:1f:f7:70:b1:89:3a:dd:30:be:16:81:
         18:01:38:a7:b8:84:b3:31:20:62:46:7b:0c:6d:56:09:7c:e4:
         3f:86:66:00:f3:f1:7d:40:a5:00:05:8b:a6:ab:89:1b:c9:51:
         3f:0c:05:0d:51:be:79:f2:33:87:9f:e6:48:9c:48:62:fd:7f:
         49:2d:d9:a8:ba:bc:b5:9e:e9:06:f1:56:ff:5a:06:79:bb:e0:
         2e:92:72:d4:fa:1f:c1:a8:10:dd:50:be:b0:00:dc:0b:27:ff:
         2f:e0:e2:a6:1f:d0:b6:11:3f:a1:59:9e:2a:8f:9f:06:f6:ba:
         c4:3b:e1:63:32:7e:34:37:f7:74:24:20:91:f9:21:7d:95:6b:
         a6:61:fc:72:5e:d6:7c:a0:53:4e:5d:c0:da:2b:21:a6:18:fb:
         3c:4c:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org