Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/3139332e332e3136352e302f32342d3234203d3e20323130353631.roa
File:                     3139332e332e3136352e302f32342d3234203d3e20323130353631.roa (raw, json)
Hash identifier:          rFgZEVL2PIVkBzwtKxfa5ZJlFFvnAG6BzN+O/Glou4s=
Subject key identifier:   18:A1:91:B3:E0:5B:61:A5:A5:65:04:C2:D3:3A:03:54:79:87:B3:F9
Certificate issuer:       /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial:       2BDD0BBF208B1F47EC8352734292DFA456E2E16E
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/3139332e332e3136352e302f32342d3234203d3e20323130353631.roa
Signing time:             Tue 06 Dec 2022 14:47:15 +0000
ROA not before:           Tue 06 Dec 2022 14:42:15 +0000
ROA not after:            Tue 05 Dec 2023 14:47:15 +0000
asID:                     210561
IP address blocks:        193.3.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dd:0b:bf:20:8b:1f:47:ec:83:52:73:42:92:df:a4:56:e2:e1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
        Validity
            Not Before: Dec  6 14:42:15 2022 GMT
            Not After : Dec  5 14:47:15 2023 GMT
        Subject: CN=18A191B3E05B61A5A56504C2D33A03547987B3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:0b:b2:85:07:56:37:16:5d:03:64:51:a2:
                    09:9f:08:c1:ba:2c:1c:e3:42:cc:83:29:1e:40:c9:
                    4c:6e:e0:10:0e:27:4a:f1:5a:d6:c2:83:98:5c:a2:
                    00:d3:eb:c3:7e:db:5a:37:74:09:93:d0:76:6c:ba:
                    5d:f0:fc:30:1e:84:42:1e:6b:90:1f:27:c4:00:27:
                    ff:4b:07:49:3a:b2:11:05:9e:ba:f7:52:c5:90:36:
                    88:78:6a:e0:a7:37:60:a8:0f:35:71:0f:f6:1d:24:
                    7e:65:10:bd:ef:5d:2a:e9:89:4a:78:b7:aa:5c:af:
                    59:6b:e9:2d:be:ef:99:85:cb:b1:ef:13:f0:55:3f:
                    93:21:22:50:5f:99:6d:89:39:cb:40:60:aa:41:a7:
                    ee:27:cb:9c:05:b6:81:ec:04:6d:75:cc:ed:ae:89:
                    06:c4:63:7f:fe:70:c3:79:a5:ac:5c:13:b7:c8:4b:
                    63:0a:b9:a7:70:b0:2f:49:f8:55:e1:4a:24:10:3f:
                    ef:d9:37:51:8b:b1:56:ac:22:0e:80:62:33:63:59:
                    31:08:6a:f5:48:92:6f:68:b4:2d:91:ce:fe:ff:3c:
                    65:2f:65:6d:20:1a:ea:45:51:52:06:9c:85:8e:d1:
                    72:05:33:2b:e1:32:10:74:8f:9d:e3:78:6e:48:e9:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:91:B3:E0:5B:61:A5:A5:65:04:C2:D3:3A:03:54:79:87:B3:F9
            X509v3 Authority Key Identifier:
                keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/3139332e332e3136352e302f32342d3234203d3e20323130353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:21:34:68:0e:b9:c9:35:ab:c7:55:5b:cf:c7:c3:a6:17:4d:
         31:6c:a5:bf:35:e8:83:53:05:4e:db:de:ab:ff:a1:7d:04:19:
         46:37:71:8d:c3:c2:4b:d8:85:53:f7:5e:2d:75:a0:b3:c1:72:
         56:83:58:8f:c6:40:83:a1:48:10:c6:80:4d:7c:6d:45:e6:71:
         41:27:b3:d2:95:f3:26:ec:b0:28:85:1d:dc:4a:92:85:39:78:
         69:cf:6f:24:37:59:b2:58:d8:a4:01:d2:cb:ee:0c:37:a0:72:
         22:21:14:f1:f8:e3:ca:25:74:17:2e:25:ce:0a:a7:53:1f:4f:
         77:c5:e2:b1:9b:37:b7:5a:68:65:2b:81:f1:fc:0c:ee:86:65:
         5c:9e:ad:38:7b:b1:2b:99:62:bf:c5:87:d7:0e:94:3c:df:fa:
         16:7f:bf:2d:c9:85:13:be:66:9b:81:87:76:78:64:5c:99:64:
         2d:4c:b0:2b:e1:aa:90:c6:bd:f4:24:60:9a:32:93:d7:5f:50:
         d2:e6:07:5e:a8:af:77:a2:71:80:a7:fa:c9:00:b7:e3:c9:98:
         ca:ec:56:26:84:af:44:67:9e:3b:77:f2:aa:aa:1d:be:25:8b:
         0d:7d:ef:87:10:b8:0e:26:f1:1d:13:a8:02:59:5a:63:54:1f:
         53:6b:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org