Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/D50WGS-pMCcTVQ4oNPgPEdAdv1U.roa
File:                     D50WGS-pMCcTVQ4oNPgPEdAdv1U.roa (raw, json)
Hash identifier:          0CpTYAudyFB1oCbmNI2aeZ8fwOqnSX6C11RhRZyCplg=
Subject key identifier:   0F:9D:16:19:2F:A9:30:27:13:55:0E:28:34:F8:0F:11:D0:1D:BF:55
Certificate issuer:       /CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Certificate serial:       0183F9E2776DF884EB304A0981D543A7A148
Authority key identifier: C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/D50WGS-pMCcTVQ4oNPgPEdAdv1U.roa
Signing time:             Fri 21 Oct 2022 09:31:51 +0000
ROA not before:           Fri 21 Oct 2022 09:31:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48108
IP address blocks:        194.176.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f9:e2:77:6d:f8:84:eb:30:4a:09:81:d5:43:a7:a1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
        Validity
            Not Before: Oct 21 09:31:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f9d16192fa9302713550e2834f80f11d01dbf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:b8:97:91:db:8b:3a:48:99:bb:cd:4c:45:
                    59:65:af:44:0a:6d:5f:78:d7:0d:55:12:18:93:f1:
                    64:ed:bd:0b:e7:44:23:f0:db:44:e2:33:d0:3f:38:
                    7b:e0:b3:1c:64:4f:59:2e:a4:5c:5e:44:cc:25:ed:
                    3e:18:21:64:df:9a:07:f2:a1:74:7b:d3:ff:dc:a1:
                    3b:2e:8c:ca:e7:ff:51:7b:4b:56:bb:bc:bb:f3:6a:
                    3f:80:9b:51:a7:ca:db:72:e1:11:66:7b:e7:fc:41:
                    51:85:6d:f0:17:79:0d:85:70:82:69:e2:6a:85:5e:
                    be:80:fc:c2:d0:ab:ed:c8:ad:9e:79:99:e4:62:37:
                    5c:d9:08:8b:d8:7d:6a:7b:08:78:df:a3:92:c3:43:
                    14:34:d5:6b:e4:51:33:7c:16:66:5a:01:3e:0c:63:
                    1d:1b:60:2a:26:cd:6e:be:10:fe:0a:c6:99:d1:b6:
                    a0:34:ca:ac:3e:a3:78:d1:13:1a:3f:71:7f:4e:cc:
                    cb:5c:45:80:36:6c:d0:87:40:89:7a:50:cc:6e:05:
                    5e:8c:af:ce:f5:f5:7e:84:37:3a:ec:31:db:c2:8b:
                    24:05:59:0e:36:75:f6:c6:04:07:66:7c:0f:d5:d2:
                    d1:50:a0:cb:dc:db:7e:4f:45:3d:ba:6b:5f:ec:a4:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:16:19:2F:A9:30:27:13:55:0E:28:34:F8:0F:11:D0:1D:BF:55
            X509v3 Authority Key Identifier:
                keyid:C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/D50WGS-pMCcTVQ4oNPgPEdAdv1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.176.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:3c:71:51:2f:f2:bb:6b:cf:81:80:ce:d8:4b:fc:b5:5f:
         12:69:6e:2b:48:ed:b5:6f:5c:56:63:5f:c4:8d:c6:1a:e4:24:
         97:33:40:e8:17:15:13:50:52:cb:e7:6e:ac:59:c0:0d:ac:bc:
         cb:c3:ec:e0:3a:ca:b9:65:d7:a3:14:c0:a6:97:7f:4b:2c:ed:
         00:bc:ef:de:9a:ca:c4:e5:42:70:dd:48:af:16:bd:ac:12:37:
         10:8c:c4:a5:74:ae:a4:9f:81:c9:ee:c1:e8:26:01:d4:fd:a6:
         9c:c8:87:20:00:24:e3:90:98:ec:04:7e:ac:0b:fe:bb:5b:cb:
         97:9e:f5:90:e4:7c:68:9c:09:5d:2f:b9:bf:a6:82:83:04:8e:
         5c:3e:1f:78:13:39:78:b7:99:6b:c9:78:09:d8:4c:18:6d:88:
         93:3a:16:97:6e:3b:c6:ec:a8:18:b6:80:7b:de:10:66:0e:e9:
         2c:a9:75:44:78:68:3f:33:47:c8:ed:4a:f3:6c:81:06:04:5c:
         77:e1:a9:45:0b:f9:73:80:40:f9:f5:28:a7:76:23:b8:b1:52:
         ba:aa:85:a7:52:c9:b1:13:e1:1d:11:28:57:24:36:f2:ff:ba:
         5f:69:d3:3f:b3:12:28:95:12:5d:1c:f3:da:10:ba:e1:96:b2:
         64:e3:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net