Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/7y94-ylWBzas4_wbCMpJFT4LZ50.roa
File:                     7y94-ylWBzas4_wbCMpJFT4LZ50.roa (raw, json)
Hash identifier:          RKmvWaobOhl2nWEIk3SWbUjNocfocFNSK9BVyhco1fY=
Subject key identifier:   EF:2F:78:FB:29:56:07:36:AC:E3:FC:1B:08:CA:49:15:3E:0B:67:9D
Certificate issuer:       /CN=7509f20e19fea6a79e68ad228bdb85cc9df93ab9
Certificate serial:       018CCA9A0862A44CB0829287B8BC6C31F09A
Authority key identifier: 75:09:F2:0E:19:FE:A6:A7:9E:68:AD:22:8B:DB:85:CC:9D:F9:3A:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQnyDhn-pqeeaK0ii9uFzJ35Ork.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/7y94-ylWBzas4_wbCMpJFT4LZ50.roa
Signing time:             Tue 02 Jan 2024 14:35:41 +0000
ROA not before:           Tue 02 Jan 2024 14:35:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35756
IP address blocks:        195.10.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:9a:08:62:a4:4c:b0:82:92:87:b8:bc:6c:31:f0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7509f20e19fea6a79e68ad228bdb85cc9df93ab9
        Validity
            Not Before: Jan  2 14:35:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef2f78fb29560736ace3fc1b08ca49153e0b679d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:2a:da:09:08:df:ab:6a:28:25:cc:10:49:
                    35:94:6c:9f:85:e6:e9:57:40:94:04:89:ae:fd:f0:
                    31:01:ec:07:78:86:a1:5f:b6:c2:ab:82:78:7d:97:
                    ed:cb:be:24:c8:b2:24:cb:ef:2d:37:a1:7c:18:66:
                    e6:0b:4e:06:2b:f0:4e:a1:5b:2c:8f:89:db:02:26:
                    8d:0c:4e:74:2d:4e:5a:2e:f9:09:f1:08:93:06:bc:
                    8d:ab:1b:7c:a5:79:5a:4b:0d:68:cb:76:b7:37:23:
                    a1:74:1f:03:ea:c6:4c:b3:5e:3f:81:3a:cd:8f:af:
                    48:0f:b0:b2:72:84:33:bf:3d:6e:a7:83:5a:ca:24:
                    90:4b:67:d6:3e:6d:dd:2e:3d:b8:bb:69:1d:f1:f9:
                    0d:97:03:1b:be:b1:74:fd:33:6a:e8:5d:d4:b5:04:
                    00:f6:57:c5:37:6f:85:d8:08:5d:21:0f:cc:84:7f:
                    ee:df:8b:93:1d:93:ec:47:3e:38:53:18:7b:fe:e1:
                    a8:87:0a:65:a5:b3:6c:bc:f5:6e:ec:f1:49:de:7e:
                    00:a2:fc:40:35:a6:27:7c:a5:8e:a8:ef:51:95:2d:
                    09:a5:d1:91:e3:54:c3:88:f9:d2:88:0a:91:58:d4:
                    7b:2b:49:39:df:26:9e:cc:d2:f2:56:86:a7:cc:f5:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:78:FB:29:56:07:36:AC:E3:FC:1B:08:CA:49:15:3E:0B:67:9D
            X509v3 Authority Key Identifier:
                keyid:75:09:F2:0E:19:FE:A6:A7:9E:68:AD:22:8B:DB:85:CC:9D:F9:3A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQnyDhn-pqeeaK0ii9uFzJ35Ork.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/7y94-ylWBzas4_wbCMpJFT4LZ50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/dQnyDhn-pqeeaK0ii9uFzJ35Ork.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.10.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:26:b6:46:76:19:db:f7:6b:49:cf:14:65:a3:4a:20:d8:b0:
         82:4f:4f:d4:e7:32:e8:06:56:d1:5b:70:83:29:4e:2a:1f:90:
         a2:7c:dd:d8:1c:ae:04:3a:2d:d9:be:9b:f6:a6:02:a7:e0:80:
         8a:b6:8b:41:26:19:90:73:94:b7:3b:8a:f9:19:a5:f4:e0:85:
         93:3a:f6:ff:c4:91:fd:58:b1:91:b0:21:bf:b7:5b:3c:7b:ea:
         4e:1d:cf:58:62:7b:27:81:0f:b9:77:13:4a:bb:4f:6f:db:19:
         6c:50:59:58:77:04:55:1a:73:22:5f:cc:19:63:77:94:d3:e6:
         af:63:9b:fa:88:d5:97:bd:91:40:e3:f1:9b:82:a3:f6:6a:1b:
         ce:df:57:ca:6c:b0:99:2f:50:3e:10:c6:dd:0b:a2:aa:87:5e:
         ca:b8:b8:0d:02:d9:38:3a:8d:a1:7f:8c:55:64:df:65:bd:6e:
         9d:31:3b:3e:2a:c6:88:72:a2:67:57:1f:4e:71:8b:49:ba:d0:
         e4:d9:67:fd:eb:fa:a6:dc:3a:08:2c:e1:b2:ac:c8:c4:ac:10:
         65:a7:98:4e:34:5f:0e:81:60:f4:51:71:7a:8b:48:3d:86:13:
         c3:ad:86:02:b5:8b:f5:9d:58:65:96:f6:7b:c6:98:47:85:57:
         a4:fa:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:14 2024 by rpki-client on console-ams.rpki-client.org