Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/B1Wo0770Iu9HHZYocaGECmQeZas.roa
File:                     B1Wo0770Iu9HHZYocaGECmQeZas.roa (raw, json)
Hash identifier:          fYKkjs6OLLwbP/iHm4T4tDuj9bKmThkImrsyiNSha8M=
Subject key identifier:   07:55:A8:D3:BE:F4:22:EF:47:1D:96:28:71:A1:84:0A:64:1E:65:AB
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       02F497
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/B1Wo0770Iu9HHZYocaGECmQeZas.roa
Signing time:             Thu 03 Feb 2022 19:58:00 +0000
ROA not before:           Thu 03 Feb 2022 19:58:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     701
IP address blocks:        93.113.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193687 (0x2f497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Feb  3 19:58:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0755a8d3bef422ef471d962871a1840a641e65ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:5b:9e:e8:9d:50:2e:19:5a:fe:f6:09:07:
                    92:92:0a:25:a2:ea:af:49:c2:c6:2e:43:c5:97:1f:
                    0c:14:7b:26:e9:ca:c4:ed:30:6e:ed:e4:08:58:e7:
                    7b:80:d7:ae:78:52:da:5e:cc:14:f2:37:27:4f:35:
                    73:a8:3f:a8:79:38:e5:83:91:a6:46:9a:3d:4c:c0:
                    1a:19:d5:cf:79:0e:5d:f4:03:03:86:44:ea:7f:38:
                    bf:49:30:e0:79:49:4d:ae:9f:3d:dc:a0:aa:87:f2:
                    b4:21:74:61:1c:5c:22:48:94:a3:cb:71:8e:8d:7a:
                    49:57:0c:69:9e:d7:91:99:cc:eb:a0:38:8e:3f:51:
                    49:7a:e8:50:8d:94:50:1e:02:d7:b8:35:3e:6e:5f:
                    64:bf:ba:3d:fb:f3:a3:32:61:e3:34:a8:02:2a:1c:
                    01:8e:92:d0:b9:1e:31:d2:6d:1b:b2:ad:77:40:1e:
                    bf:a0:30:ab:3a:30:45:52:73:e9:d2:a7:a8:61:6b:
                    4f:75:c5:3c:ca:7e:b0:2c:93:8e:88:ba:80:a6:33:
                    32:9c:2a:38:5d:80:d4:23:ce:d4:af:72:60:93:ae:
                    36:37:a4:a2:3d:92:16:4f:d8:16:d6:1a:7a:1e:02:
                    80:4c:42:40:a7:a3:91:97:3c:2f:85:c5:57:a7:23:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:A8:D3:BE:F4:22:EF:47:1D:96:28:71:A1:84:0A:64:1E:65:AB
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/B1Wo0770Iu9HHZYocaGECmQeZas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:08:9c:70:d7:2e:a7:c7:1e:b2:8c:fc:a1:66:be:a4:fa:82:
         4e:1f:5b:34:fe:ac:cb:83:cb:eb:c6:b7:c7:a5:89:ae:f8:ff:
         ae:0d:c5:1b:d0:69:46:9d:94:e6:98:8d:f2:b0:15:4b:79:38:
         53:98:3b:53:d6:9f:10:1d:7b:3c:98:32:94:af:dc:63:3a:14:
         39:c1:09:05:4f:59:87:a4:44:ec:b6:73:79:15:33:a9:06:3f:
         70:64:01:69:bb:c3:63:5f:4c:3b:41:e5:60:3d:7b:6a:09:c6:
         93:a4:44:45:24:22:27:e8:d0:67:25:e5:d7:39:ba:ca:7d:db:
         e2:7c:01:a8:6e:2a:53:4d:f4:a5:09:7e:8b:d8:a6:53:ab:68:
         42:54:6f:2c:42:0d:fe:1d:79:ff:6d:a6:c2:7b:de:ce:8e:2a:
         1a:cf:72:ec:b4:04:53:7d:fb:33:2b:aa:08:c2:9a:07:db:42:
         12:32:a3:07:f9:24:0a:ba:24:e6:7a:03:1f:10:ec:9a:3a:a2:
         96:df:3c:1a:0a:af:8c:83:a4:a3:d7:be:86:c1:74:8c:83:79:
         b5:54:87:b0:49:ea:82:b1:d0:f5:aa:8e:2d:fc:c6:6c:e8:e6:
         e5:4a:46:b9:8c:49:f6:c1:11:6e:72:fe:70:5b:ea:d4:a3:07:
         2f:2e:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org