Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6fatS6cxSo0WuK9e2mYjSaa6SQc.roa
File:                     6fatS6cxSo0WuK9e2mYjSaa6SQc.roa (raw, json)
Hash identifier:          +wUKYNasyTxOUwhk6gj0MqLVvnWrkRlgnfCyVUOZoW4=
Subject key identifier:   E9:F6:AD:4B:A7:31:4A:8D:16:B8:AF:5E:DA:66:23:49:A6:BA:49:07
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018EFD92045CA82DB4DF8F453E8073EED1DC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6fatS6cxSo0WuK9e2mYjSaa6SQc.roa
Signing time:             Sat 20 Apr 2024 22:13:08 +0000
ROA not before:           Sat 20 Apr 2024 22:13:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fd:92:04:5c:a8:2d:b4:df:8f:45:3e:80:73:ee:d1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 20 22:13:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9f6ad4ba7314a8d16b8af5eda662349a6ba4907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:2a:1e:68:a6:a9:7c:d1:ac:01:cb:2e:94:
                    b1:f5:95:d1:e4:1c:f9:f4:99:ba:d9:55:1f:d7:ed:
                    1c:db:a1:9c:12:b0:31:d5:9a:24:5e:59:3b:c1:24:
                    f3:f5:c7:3e:b3:7f:e1:9c:e8:ca:a9:2a:ad:66:de:
                    da:c7:e2:93:e6:55:0b:fe:6b:38:15:33:94:08:02:
                    4f:be:c0:87:b2:51:b1:d3:31:eb:a8:d0:be:44:85:
                    b6:ac:d3:48:d4:c1:27:b3:df:d2:c6:cb:11:6a:6e:
                    38:9d:9d:f8:cf:30:5f:4c:1b:45:f9:95:bd:e3:ca:
                    af:97:d3:4c:e4:bb:c8:3d:29:79:46:f3:3d:83:64:
                    9b:93:da:93:86:00:3b:52:09:48:4e:6d:5d:0e:f3:
                    9f:37:07:10:45:ae:14:c1:a0:13:1a:12:de:b6:34:
                    75:f2:30:b5:64:55:25:eb:91:f5:4a:74:29:a4:b3:
                    22:96:18:84:a6:ad:28:f2:e7:f2:d8:ef:86:e3:ca:
                    9e:02:1a:92:d6:12:a9:3b:19:94:c7:be:2e:2d:3e:
                    0c:41:71:31:19:f4:e0:ac:f2:5f:e3:37:37:e5:ab:
                    7d:91:3d:06:9c:51:e7:12:72:c1:af:8e:21:1d:c5:
                    7c:0c:25:78:e6:4a:ef:ea:df:3b:82:07:72:d6:5e:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:AD:4B:A7:31:4A:8D:16:B8:AF:5E:DA:66:23:49:A6:BA:49:07
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6fatS6cxSo0WuK9e2mYjSaa6SQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:7e:f8:c9:0b:cd:de:13:43:59:3f:ad:85:7b:cb:1c:70:7e:
         db:3e:86:ca:68:13:4c:ce:b2:ce:da:d5:5f:88:ae:56:19:80:
         8e:07:6c:36:85:3f:d7:d6:d6:37:c8:3e:9f:ba:09:52:39:0a:
         1e:d2:13:56:b2:0f:90:8f:0a:db:74:ce:bb:40:b9:55:72:14:
         fd:3a:de:26:e1:c1:9f:f0:e7:a3:64:d2:8f:3f:51:8f:48:49:
         b0:60:55:e7:fd:97:63:71:2f:ab:a7:f6:d4:cc:23:e4:27:3b:
         6f:fb:68:f9:a1:01:54:d9:21:18:8d:b3:7a:3c:6d:c4:f3:7d:
         3d:1d:c2:e2:88:39:6a:29:3d:a3:4f:ca:9f:c1:54:66:0f:88:
         ad:23:9b:ae:df:c8:ce:95:be:fc:dc:1a:f4:be:7f:c5:b8:84:
         6b:53:33:67:67:26:28:2a:b6:23:3e:db:09:33:34:b2:67:aa:
         6d:a1:57:46:6a:a6:9b:31:87:40:a0:6f:15:7e:62:41:39:77:
         8e:e1:52:a1:0b:80:4c:b1:04:77:82:0a:d0:de:4c:8b:b2:84:
         f4:12:37:93:b4:96:ab:ab:f3:c5:6e:81:86:da:40:fa:7b:77:
         ef:0e:67:52:e1:66:bf:b4:a7:fe:68:f7:c7:a8:34:01:51:59:
         3e:6e:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:58 2024 by rpki-client on console-ams.rpki-client.org