Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/95BabZ0LOw4DijJomDvByLmSdas.roa
File:                     95BabZ0LOw4DijJomDvByLmSdas.roa (raw, json)
Hash identifier:          jncQKVimd41yyN0z3/n4b7BnlGbuebmzjCIszVFy9h4=
Subject key identifier:   F7:90:5A:6D:9D:0B:3B:0E:03:8A:32:68:98:3B:C1:C8:B9:92:75:AB
Certificate issuer:       /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial:       019BFE6F
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/95BabZ0LOw4DijJomDvByLmSdas.roa
Signing time:             Sat 05 Feb 2022 20:22:01 +0000
ROA not before:           Sat 05 Feb 2022 20:22:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141677
IP address blocks:        193.36.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27000431 (0x19bfe6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
        Validity
            Not Before: Feb  5 20:22:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7905a6d9d0b3b0e038a3268983bc1c8b99275ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:25:32:f1:09:76:1e:77:e2:e0:a0:25:ff:
                    dc:cb:78:a9:15:73:d8:5e:7a:ac:c6:34:12:bc:ca:
                    85:ed:65:95:93:72:4b:8d:a1:cf:e1:d5:de:2d:c6:
                    63:29:ce:39:46:e6:b9:6e:76:8f:1d:4b:76:5c:7d:
                    ae:4b:db:7d:02:be:cc:29:8f:d3:e4:dc:12:71:23:
                    37:43:5a:1a:ae:79:cb:9a:cf:ae:40:b8:0b:81:6b:
                    19:b9:e1:89:32:5f:a7:66:66:14:7d:6b:ec:80:78:
                    f6:3d:c7:72:09:f0:1d:ac:02:2e:e3:4e:03:4f:8a:
                    35:b3:67:80:ef:7a:17:3f:b0:4c:1c:cd:32:55:d1:
                    47:79:fe:7d:d4:8a:28:36:c7:be:43:7d:98:cb:86:
                    54:d9:95:89:78:2e:46:7f:14:63:1e:11:68:f3:dd:
                    a2:b1:a3:50:45:98:cb:3b:7e:78:50:a0:37:19:37:
                    3a:a8:9f:51:2b:75:a8:ad:da:cb:e8:49:38:1e:c5:
                    98:79:99:35:4f:40:be:e5:8c:75:37:b5:a3:bb:29:
                    87:f0:6f:af:a7:9f:61:9c:fc:17:7c:e2:73:04:ab:
                    01:7d:4b:56:c5:c2:03:38:35:85:b8:24:81:a4:83:
                    fc:d2:28:87:1b:46:41:97:ab:32:19:0f:af:32:16:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:90:5A:6D:9D:0B:3B:0E:03:8A:32:68:98:3B:C1:C8:B9:92:75:AB
            X509v3 Authority Key Identifier:
                keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/95BabZ0LOw4DijJomDvByLmSdas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:56:37:ba:a0:e2:23:c3:5b:55:51:7c:a4:d3:fc:e5:73:35:
         69:e1:d5:b9:ed:64:15:7a:e1:26:c8:9a:28:5f:d5:85:b5:c4:
         4f:3a:77:29:7a:46:4b:d2:07:26:59:11:43:dd:27:5e:17:6b:
         14:11:8e:4d:26:91:0c:36:6b:77:25:1c:77:0c:9e:bd:1d:61:
         a6:19:db:3d:0c:69:a2:eb:ac:ef:01:9d:d1:a6:e3:73:f0:15:
         bb:6e:e8:92:e9:e5:de:42:c5:6e:5a:0b:6c:5d:f3:6a:d0:33:
         ed:92:30:e3:e5:26:04:12:9e:88:98:34:e0:b7:92:a1:db:c7:
         ba:73:d7:5e:c5:fa:51:28:83:7a:df:be:8f:4e:f6:b4:1b:5e:
         94:97:82:65:bb:5d:51:76:d0:2c:3b:ed:e4:e7:0b:ff:31:3d:
         9e:e8:7f:32:6e:2f:ce:e8:8f:78:a4:61:51:3e:5f:c3:c5:54:
         30:13:2d:4f:50:74:96:f6:56:ac:dd:ed:96:df:33:35:78:12:
         4f:a0:1c:e1:ad:c8:14:fa:01:dd:e6:d8:27:77:41:25:9d:a5:
         00:e5:f2:64:74:91:73:21:f9:67:45:d5:2e:99:72:10:86:1f:
         b4:d0:dc:9d:d8:09:bd:05:b4:70:60:a6:18:99:04:27:0b:0f:
         63:e4:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net