Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/pQAt7-N7a2hN9J1wdKoxGsX5jBI.roa
File:                     pQAt7-N7a2hN9J1wdKoxGsX5jBI.roa (raw, json)
Hash identifier:          7CF3QNOfNYPoO81HQDtVQUyYp9FvHixVS1xRyYfnmZA=
Subject key identifier:   A5:00:2D:EF:E3:7B:6B:68:4D:F4:9D:70:74:AA:31:1A:C5:F9:8C:12
Certificate issuer:       /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial:       014AAEFA
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/pQAt7-N7a2hN9J1wdKoxGsX5jBI.roa
Signing time:             Thu 06 Jan 2022 18:57:05 +0000
ROA not before:           Thu 06 Jan 2022 18:57:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.36.132.0/24 maxlen: 24
                          31.41.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21671674 (0x14aaefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
        Validity
            Not Before: Jan  6 18:57:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5002defe37b6b684df49d7074aa311ac5f98c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:17:c6:38:9f:a9:b9:54:47:d9:39:03:10:
                    66:22:1f:99:f5:bc:ba:e3:71:92:e9:09:34:59:8d:
                    3e:5d:9a:bc:c4:64:78:95:f3:17:52:e6:02:33:35:
                    00:1d:8e:78:ed:d1:fd:63:4d:5b:29:84:8f:d4:9f:
                    d8:59:d8:9b:7a:26:03:82:f8:8d:38:8d:3a:3e:78:
                    78:70:dd:10:c1:4f:cd:38:37:68:a7:48:18:a8:ce:
                    56:51:9e:ed:68:40:80:bb:9a:a6:ab:59:fd:19:68:
                    d1:51:78:9d:6c:83:93:2d:35:98:cf:7b:97:fa:67:
                    4f:c7:98:3e:55:ea:66:79:00:2b:fb:7b:df:05:ac:
                    e5:89:28:cd:84:48:7b:5e:79:09:f6:38:ce:37:d9:
                    42:1f:d3:77:7e:00:15:c2:c6:07:85:52:de:6a:1c:
                    e2:b1:49:e6:cc:46:3b:10:99:88:92:61:29:fb:22:
                    e7:8f:cb:0e:6c:c5:42:ef:cd:c5:bb:ef:88:ad:f1:
                    81:f8:4a:37:35:7c:c9:2f:42:48:ff:04:b1:96:ab:
                    65:85:53:94:ec:8b:94:a3:76:d9:cd:27:0e:be:53:
                    64:0f:c8:40:e6:0d:bd:77:d5:4e:a9:2d:41:7e:ab:
                    78:0b:35:15:ac:5c:95:39:87:02:5d:60:b9:27:f6:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:2D:EF:E3:7B:6B:68:4D:F4:9D:70:74:AA:31:1A:C5:F9:8C:12
            X509v3 Authority Key Identifier:
                keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/pQAt7-N7a2hN9J1wdKoxGsX5jBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.248.0/24
                  193.36.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:37:aa:de:3d:22:db:10:42:02:28:36:8e:cf:1f:5d:40:
         8e:2d:f3:cb:4b:a2:5a:64:95:98:66:77:9e:6c:0e:c3:82:2c:
         18:87:70:bf:9d:ff:7f:77:4d:8c:f5:6d:41:81:40:21:f8:df:
         96:07:06:6a:b4:46:93:e1:b1:5a:44:fb:04:b1:02:97:b3:71:
         bf:09:a9:de:4c:13:32:22:c1:f3:2d:20:fa:3a:9d:2b:4d:2c:
         0d:14:42:12:3c:57:c1:d4:31:06:a8:0a:6c:80:d2:f1:12:fb:
         2e:34:d7:df:7d:9d:88:e5:b3:d1:75:a3:87:0f:9f:16:c0:53:
         c6:82:72:53:df:64:17:5e:68:d5:1d:fa:a1:90:b7:53:d1:7e:
         55:ae:36:b2:53:2f:3f:d7:9c:e2:39:50:0a:35:b9:a0:7d:a9:
         60:45:44:82:7a:a2:2e:fb:72:32:c2:ad:b2:52:c4:d8:6a:cb:
         36:0d:9a:13:d0:ae:d1:90:88:eb:5b:b8:3c:b3:df:f5:8e:2d:
         3d:20:de:f9:99:8d:19:27:ae:23:bd:a7:4e:73:d4:8e:a8:62:
         c2:94:29:9d:b8:31:8e:4c:03:b7:f4:34:05:41:04:ff:b7:a5:
         42:cb:e2:7d:56:b2:2c:ac:96:cd:5c:31:5a:e3:41:4c:af:35:
         d1:7a:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net