Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/uVcLVRzT_GvreA-xN7AOE7hOAE4.roa
File:                     uVcLVRzT_GvreA-xN7AOE7hOAE4.roa (raw, json)
Hash identifier:          +dnbeeqeBxwCiO6kpcOR2zQsFJNyn6upLefc9Ie1jfM=
Subject key identifier:   B9:57:0B:55:1C:D3:FC:6B:EB:78:0F:B1:37:B0:0E:13:B8:4E:00:4E
Certificate issuer:       /CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Certificate serial:       018571D7A324F54165317A99084E2687A388
Authority key identifier: 99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/uVcLVRzT_GvreA-xN7AOE7hOAE4.roa
Signing time:             Mon 02 Jan 2023 09:37:15 +0000
ROA not before:           Mon 02 Jan 2023 09:37:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49453
IP address blocks:        46.253.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:a3:24:f5:41:65:31:7a:99:08:4e:26:87:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
        Validity
            Not Before: Jan  2 09:37:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9570b551cd3fc6beb780fb137b00e13b84e004e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f9:da:19:4a:89:3d:1e:fa:70:b9:37:0a:5b:
                    df:66:14:2b:5e:ec:5e:43:18:6a:27:71:31:99:4b:
                    b0:b4:1c:7a:89:c7:1a:55:3b:14:c9:81:eb:e8:d0:
                    9c:7c:92:b9:3b:27:43:78:bf:fc:5b:b1:16:0d:02:
                    24:45:41:c4:9e:89:29:07:4b:5d:5b:a9:a5:02:8d:
                    f6:a6:53:fc:90:70:77:0e:81:df:d7:2e:b8:00:b7:
                    19:88:1e:ec:a4:c8:f4:c7:9b:6e:98:88:af:65:53:
                    fc:ab:8e:69:65:4a:3d:19:b6:88:09:df:44:8e:52:
                    94:e1:57:75:f4:87:b3:70:b0:a0:64:e4:33:8c:52:
                    de:fc:a5:31:8f:99:69:52:ce:23:e1:b7:1b:dd:d8:
                    19:c7:24:52:a4:b2:4e:16:80:4c:df:ee:fe:ad:3f:
                    38:f0:a7:3a:af:14:a2:12:6d:fe:ab:d5:1b:6d:4a:
                    aa:7f:e8:bc:57:79:f2:e1:b7:11:6f:e1:6b:f0:e5:
                    d7:61:d7:31:8d:08:36:ce:73:ff:98:34:2f:2e:b2:
                    0c:9e:bf:e0:61:9b:32:05:f4:44:3d:b5:08:56:1a:
                    3e:85:36:27:06:20:d8:89:c1:d9:d3:ee:c6:ae:1a:
                    1b:a1:97:88:4c:b3:bb:2a:46:80:39:79:fc:25:72:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:57:0B:55:1C:D3:FC:6B:EB:78:0F:B1:37:B0:0E:13:B8:4E:00:4E
            X509v3 Authority Key Identifier:
                keyid:99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/uVcLVRzT_GvreA-xN7AOE7hOAE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:31:97:c3:0a:71:b5:a5:2e:b4:56:e4:2e:9f:c9:8f:0d:
         47:80:b8:93:78:98:fb:a1:f1:22:44:3d:76:de:3a:d6:50:3a:
         cd:97:41:ae:2d:08:ff:04:f1:ee:8f:11:12:d1:1c:c2:f0:1c:
         56:91:47:d3:89:79:63:25:f7:72:2d:15:8a:d0:36:60:cc:83:
         38:c7:29:75:c5:ee:f6:70:a2:08:a7:61:44:5b:cb:9d:2c:6e:
         03:54:2a:f6:7b:7d:4d:44:cd:9f:0e:b0:c0:bc:2a:cb:aa:25:
         d7:a3:8d:29:1f:38:f9:98:a4:65:29:18:65:a8:98:ef:fd:71:
         f8:37:74:50:89:87:b3:1d:fc:1b:d7:c5:5c:7c:05:86:91:d5:
         05:c1:f4:a3:31:2b:36:e6:92:ee:98:80:99:b0:ae:1b:8d:ce:
         a9:3b:7a:5b:8a:31:78:01:e0:58:5d:a3:4f:1b:24:13:cb:b4:
         c1:27:a9:0c:93:89:ba:ce:f5:31:bf:78:6e:3a:0c:52:aa:1d:
         c2:22:ec:37:c8:b8:ac:5c:9c:d8:9b:c1:4f:1f:5f:aa:b0:8a:
         6b:0c:1c:f1:a2:bf:9f:c5:7f:f0:5e:69:22:51:0b:61:d0:f3:
         83:b3:78:92:5f:46:1a:dc:a6:6e:9e:87:26:0e:fa:65:1d:a0:
         57:2c:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org