Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/ToVpRNVodO5LA4eJxtOLwXv4oSc.roa
File:                     ToVpRNVodO5LA4eJxtOLwXv4oSc.roa (raw, json)
Hash identifier:          r0Wt4xXfzkXg0r5veagRfYCsf/Bs+fmvAVt1sJN0Z3U=
Subject key identifier:   4E:85:69:44:D5:68:74:EE:4B:03:87:89:C6:D3:8B:C1:7B:F8:A1:27
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       03FC59
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/ToVpRNVodO5LA4eJxtOLwXv4oSc.roa
Signing time:             Thu 03 Feb 2022 19:58:01 +0000
ROA not before:           Thu 03 Feb 2022 19:58:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3320
IP address blocks:        93.113.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261209 (0x3fc59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Feb  3 19:58:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e856944d56874ee4b038789c6d38bc17bf8a127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:17:2e:41:9f:b3:28:42:03:6e:9b:f0:40:
                    81:e6:8c:e8:5f:bf:cc:81:46:aa:10:79:83:12:d6:
                    f5:cc:3d:b3:d2:d1:d8:db:6b:f1:8f:52:0c:6a:3c:
                    a6:08:eb:ed:17:f1:c8:ac:f2:19:c9:20:65:a6:1f:
                    bb:4d:63:7d:5a:b1:04:f0:c2:25:50:aa:22:69:c3:
                    f9:89:2c:cd:17:2e:8f:34:42:60:9b:d9:0a:14:67:
                    9a:a8:d0:fb:d3:c2:9c:ce:bc:42:a8:a8:23:4a:40:
                    49:98:77:e9:b3:98:b5:07:92:20:b4:60:31:a7:b8:
                    0f:82:a4:60:56:af:d4:a0:94:04:22:45:8b:b3:a7:
                    86:f4:42:e5:f6:5e:63:b4:1d:d7:f5:f1:b7:32:77:
                    4b:ba:7e:bc:ed:25:d5:42:42:eb:b2:87:74:f6:6d:
                    d3:33:a2:15:fa:fa:9e:02:54:f8:16:37:7d:74:d6:
                    02:1c:e0:63:4a:6a:6e:1c:7c:06:4f:d1:f8:22:e9:
                    f2:b4:34:bc:0f:3e:c2:48:78:ec:0f:7e:50:57:ac:
                    62:b2:0a:2c:12:cd:c8:87:9f:d1:bd:85:9d:6f:5a:
                    d5:c1:3c:51:23:1f:14:44:80:18:a4:97:fd:f7:6d:
                    e9:da:0d:9d:fc:6d:6f:f9:db:50:17:56:c4:4b:74:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:85:69:44:D5:68:74:EE:4B:03:87:89:C6:D3:8B:C1:7B:F8:A1:27
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/ToVpRNVodO5LA4eJxtOLwXv4oSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:79:67:d4:57:d2:1d:b2:a0:e9:6b:41:11:30:ce:e1:a1:48:
         2b:da:0d:c7:79:35:d3:d6:3a:00:f1:b9:80:cb:bc:10:74:7b:
         d2:ea:f7:22:de:08:90:2e:cb:7d:41:d4:0c:b6:fa:ac:80:5c:
         97:61:29:41:3e:3e:9b:14:22:5b:0d:96:1e:de:d3:94:bc:48:
         9c:09:7f:f2:9c:f3:2f:05:67:39:fb:f9:f9:38:65:06:0e:3d:
         86:6f:ef:d1:ca:f7:6b:86:03:dd:13:32:b4:8e:c8:70:52:db:
         27:61:68:9e:38:cb:26:a7:28:2a:2d:32:53:2d:10:56:7e:79:
         51:52:b3:67:64:32:26:22:e5:3e:f6:0c:c9:cc:e7:4e:f6:7b:
         cb:90:f6:16:9a:a5:d0:b6:28:75:ac:e2:89:da:ee:9e:e6:c7:
         9e:43:eb:b0:f9:f9:f6:f1:20:68:94:ac:ad:9a:38:43:6f:17:
         2a:f6:4a:28:57:66:a4:11:d9:11:d0:20:d1:18:4d:47:35:e0:
         93:5a:97:a7:ba:4a:f2:80:79:19:cc:26:e7:42:67:3f:fd:df:
         a5:a1:51:79:2d:aa:8c:53:8d:60:26:b3:6b:02:c9:1a:e4:11:
         5c:56:21:d9:5c:0f:c3:34:4c:3a:fb:2b:af:aa:68:d0:1b:3e:
         e7:88:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org