Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/o53Asxejm11sb8YF2NlsCql1ybY.roa
File:                     o53Asxejm11sb8YF2NlsCql1ybY.roa (raw, json)
Hash identifier:          F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=
Subject key identifier:   A3:9D:C0:B3:17:A3:9B:5D:6C:6F:C6:05:D8:D9:6C:0A:A9:75:C9:B6
Certificate issuer:       /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial:       0194266B4A5FE63AE3EB25273E900F88427E
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/o53Asxejm11sb8YF2NlsCql1ybY.roa
Signing time:             Thu 02 Jan 2025 09:49:13 +0000
ROA not before:           Thu 02 Jan 2025 09:49:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204169
IP address blocks:        213.59.184.0/24 maxlen: 24
                          2a03:aa00:1001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:4a:5f:e6:3a:e3:eb:25:27:3e:90:0f:88:42:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
        Validity
            Not Before: Jan  2 09:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a39dc0b317a39b5d6c6fc605d8d96c0aa975c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:03:41:3e:c2:eb:42:0b:81:23:10:be:82:8d:
                    35:39:79:d5:c2:96:8d:b2:85:85:cd:6f:8e:99:d4:
                    51:5c:ee:19:77:96:2c:81:07:79:9b:5c:79:26:d1:
                    14:92:55:6e:d6:9e:ca:a0:d2:1a:13:03:df:6a:02:
                    50:59:04:e2:df:b0:7b:a8:2c:a0:6d:df:04:89:dc:
                    cb:c2:48:e7:9d:28:26:a9:6c:b7:99:7e:8d:f4:72:
                    36:d0:c8:2d:a7:46:3a:ee:3b:66:02:5b:1f:6b:67:
                    91:ae:84:b2:05:cd:28:23:aa:a0:15:77:c0:16:34:
                    b0:1b:5b:dc:92:c7:d4:98:74:9b:ee:a3:f6:b7:17:
                    4f:f1:a9:15:cc:e9:79:3f:61:9b:33:45:ad:cf:8a:
                    f2:9c:c9:f8:17:72:c2:1c:ab:e0:5d:b2:17:9c:ce:
                    d9:e6:f0:95:39:b1:7b:73:5f:a0:4f:76:06:70:05:
                    f4:2b:bf:a1:e7:f1:d3:2b:ff:c2:27:db:8c:47:67:
                    ea:ed:73:a4:6c:bf:ab:f7:c5:0b:df:c0:15:e6:72:
                    f2:42:a3:b9:c0:d2:97:24:6d:68:df:a0:32:ae:a5:
                    a6:74:1c:67:1d:a2:d0:4d:5f:30:69:fa:24:7c:1f:
                    20:bc:a3:51:00:08:20:b8:1e:1c:78:59:9a:98:29:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9D:C0:B3:17:A3:9B:5D:6C:6F:C6:05:D8:D9:6C:0A:A9:75:C9:B6
            X509v3 Authority Key Identifier:
                keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/o53Asxejm11sb8YF2NlsCql1ybY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.59.184.0/24
                IPv6:
                  2a03:aa00:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:32:60:48:44:96:9c:41:31:a4:56:49:9d:ca:b8:03:fc:
         ca:f3:45:3f:04:4f:1d:b7:70:34:63:f8:83:a2:f8:7e:5c:ec:
         9f:dd:48:19:5c:fa:09:57:11:fc:2e:93:21:1a:12:f2:f9:6b:
         6c:9e:ed:9c:04:33:c1:2a:cc:c3:79:8d:dc:4f:69:df:7d:b3:
         7e:95:6f:61:ae:c8:3b:49:10:d1:9d:dc:75:bc:b5:74:63:57:
         86:9b:9a:61:41:80:d8:39:ed:6f:fe:73:e6:66:9e:d8:94:8c:
         9b:b3:38:06:c5:13:e0:19:39:ca:0b:dd:10:ce:b7:aa:2e:e3:
         69:7a:0b:ee:65:d6:ec:47:19:c9:39:a6:84:f0:e1:9f:98:dd:
         96:50:9b:04:c2:f8:46:a3:85:96:56:2e:17:16:4b:ad:95:fb:
         d8:d7:29:b4:25:43:61:2d:ac:7e:48:31:86:dc:e3:68:62:72:
         c7:92:89:b4:c8:61:a7:b8:3a:b1:e4:02:a1:eb:90:0c:6e:69:
         b4:e6:70:ef:db:b4:2f:ec:85:80:f6:f2:82:4a:0d:49:7e:f0:
         ba:af:9c:c3:c2:84:e9:5e:0c:18:fd:21:7f:4b:9d:34:00:c0:
         f0:e1:91:87:5b:52:c9:ef:1a:b7:1e:6f:94:aa:b1:6c:2c:d6:
         cd:ec:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----