Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a423f9-c707-489d-92e7-286d5444762c/1/yzTPelML1RR__OsEO6y4SdnndWo.roa
File:                     yzTPelML1RR__OsEO6y4SdnndWo.roa (raw, json)
Hash identifier:          TnEVZJ50+ciB0u1k6pWlYw/3jfq8b4Ht1HmttyJ/io8=
Subject key identifier:   CB:34:CF:7A:53:0B:D5:14:7F:FC:EB:04:3B:AC:B8:49:D9:E7:75:6A
Certificate issuer:       /CN=1835822240016b08fe2c0b4b320140b8a2fbf4b7
Certificate serial:       01856C783708F56568604BE34BC123540887
Authority key identifier: 18:35:82:22:40:01:6B:08:FE:2C:0B:4B:32:01:40:B8:A2:FB:F4:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDWCIkABawj-LAtLMgFAuKL79Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a423f9-c707-489d-92e7-286d5444762c/1/yzTPelML1RR__OsEO6y4SdnndWo.roa
Signing time:             Sun 01 Jan 2023 08:34:55 +0000
ROA not before:           Sun 01 Jan 2023 08:34:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48334
IP address blocks:        195.60.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:37:08:f5:65:68:60:4b:e3:4b:c1:23:54:08:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1835822240016b08fe2c0b4b320140b8a2fbf4b7
        Validity
            Not Before: Jan  1 08:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cb34cf7a530bd5147ffceb043bacb849d9e7756a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:38:0a:d4:58:7e:e0:96:ac:1e:72:c9:84:d6:
                    fc:11:5f:b6:86:ae:fd:44:e0:c8:17:6c:32:f9:29:
                    83:68:4a:8a:ee:80:b7:7b:a4:6a:9c:f6:e3:e1:f4:
                    35:19:e8:4e:1c:37:5f:15:c0:d9:2f:2e:7c:cb:c9:
                    eb:06:5e:58:03:61:79:b8:04:99:7a:76:6e:5d:96:
                    f8:a4:f8:5f:c5:f1:fb:56:c1:ab:86:a0:93:0f:59:
                    e9:6d:6b:b9:c3:e0:3c:9c:16:f5:d3:73:38:9a:d5:
                    b9:e3:61:66:e2:cd:ab:fc:59:a5:4b:54:2b:09:d4:
                    f6:c1:e7:c5:a7:1d:95:a2:71:1d:55:6c:82:b7:a9:
                    9e:51:fb:60:4a:53:4d:1a:6b:b3:f4:c3:d0:4a:5f:
                    c7:17:52:5b:8e:64:76:c9:5f:07:58:6d:82:84:b6:
                    d6:82:8c:1f:7d:8a:ac:22:e7:2d:f4:ca:0a:da:ab:
                    ee:45:b0:7a:97:d6:53:d8:40:ac:0a:9b:64:c2:bf:
                    f4:65:df:25:2f:b8:6f:1d:b7:08:1e:ee:0e:81:d3:
                    75:d8:62:c8:58:fd:e6:ec:fb:45:91:c0:60:c9:50:
                    3a:eb:e6:75:c5:29:06:22:3a:44:d5:1b:14:7c:30:
                    0e:2c:7e:1d:9c:87:7a:7c:48:ea:18:4b:5b:37:07:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:34:CF:7A:53:0B:D5:14:7F:FC:EB:04:3B:AC:B8:49:D9:E7:75:6A
            X509v3 Authority Key Identifier:
                keyid:18:35:82:22:40:01:6B:08:FE:2C:0B:4B:32:01:40:B8:A2:FB:F4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDWCIkABawj-LAtLMgFAuKL79Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a423f9-c707-489d-92e7-286d5444762c/1/yzTPelML1RR__OsEO6y4SdnndWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a423f9-c707-489d-92e7-286d5444762c/1/GDWCIkABawj-LAtLMgFAuKL79Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:e9:53:ba:65:0f:e8:bd:f4:24:96:9c:06:0c:98:39:44:
         6c:46:e0:76:47:af:64:ab:ac:6e:ba:3e:f8:e8:7f:85:2d:00:
         c9:c4:7d:c7:da:55:bf:8b:2d:d5:8c:98:db:f3:6d:77:12:0b:
         52:73:03:a3:f2:e4:2e:76:0f:b4:14:c0:14:59:37:4b:06:18:
         ef:b3:2e:f8:43:98:fc:e2:de:7a:59:8c:c7:2b:58:e2:ff:42:
         93:b9:c4:1f:9d:7d:a1:3c:29:dd:07:5a:02:f1:9e:30:09:ec:
         b9:b6:0f:30:71:eb:a9:59:0b:d9:35:73:f0:30:ba:01:2d:43:
         77:e4:d0:c5:12:1c:20:8d:02:e6:3c:e5:0b:97:87:04:fa:85:
         44:2d:fa:87:d1:9f:6b:32:e3:18:1e:8e:91:9c:c8:4d:2c:7d:
         8d:8e:ba:4c:f2:12:cc:4f:9c:d0:de:76:47:31:cc:4a:97:49:
         aa:26:4b:b9:ef:e2:40:3c:dc:75:53:3a:45:4d:9a:91:ff:da:
         e0:13:f7:64:86:25:d5:21:b9:17:d3:97:30:3d:00:e9:69:5a:
         36:01:7d:26:53:8f:2d:ab:43:85:1f:26:3a:49:d2:6e:49:e4:
         86:58:3a:2c:f7:98:5a:87:f1:db:f2:ee:58:92:a6:d9:4a:48:
         23:00:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:29 2024 by rpki-client on console-ams.rpki-client.org