Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa
File:                     bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa (raw, json)
Hash identifier:          HwAcy9XKFJjbKfD21YhLxx3hLUg9ZZj4184iox5ai44=
Subject key identifier:   6D:9D:68:31:86:69:49:02:B9:FF:27:52:AD:71:13:F0:82:50:9B:49
Certificate issuer:       /CN=e80a19bb3522df73fee1fe22a8955429931c9756
Certificate serial:       F8CCCA
Authority key identifier: E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa
Signing time:             Sat 01 Jan 2022 11:01:24 +0000
ROA not before:           Sat 01 Jan 2022 11:01:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        193.201.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16305354 (0xf8ccca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80a19bb3522df73fee1fe22a8955429931c9756
        Validity
            Not Before: Jan  1 11:01:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d9d683186694902b9ff2752ad7113f082509b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:39:9f:c8:ec:d5:e6:e5:69:ab:9c:c3:55:
                    85:ac:1b:60:66:fc:50:f3:07:fc:98:df:46:0f:71:
                    9e:9d:91:d7:de:7c:f2:a2:ba:f7:cc:51:2c:a1:46:
                    b1:c7:9b:9d:cd:2a:7e:09:c9:d2:3d:e4:27:79:ac:
                    a8:e8:ae:51:4a:a3:8b:49:11:96:7d:7f:6a:e3:ff:
                    6f:85:be:47:6e:18:63:d2:6a:4b:12:d4:1f:ab:03:
                    4b:ef:07:5d:3e:49:64:46:71:6f:39:06:0e:6a:59:
                    a4:e3:f6:5d:04:c1:76:dd:1c:c4:7c:2d:3b:12:e1:
                    29:4e:3f:9a:48:a0:fb:ae:74:d4:ee:70:99:ad:82:
                    3a:e4:96:e9:41:ca:50:e1:67:3f:b6:69:1b:06:fd:
                    3a:a6:b6:30:02:e7:3e:d4:11:cf:c4:6f:3c:13:51:
                    86:0f:87:5f:7e:ef:c2:b7:10:f4:d2:d1:4b:20:c5:
                    65:65:54:08:d4:ad:44:34:d6:4a:47:18:34:e2:38:
                    93:73:c0:79:36:51:72:02:d9:3e:f1:89:e4:f1:9b:
                    dc:0c:7a:0f:3c:c6:bb:f8:62:37:91:bc:1d:49:d9:
                    e8:a5:b7:e5:0d:ed:2a:fd:90:d9:82:77:12:8e:26:
                    0e:d6:02:f5:ba:bd:ca:09:14:1f:3b:3a:c9:37:52:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:68:31:86:69:49:02:B9:FF:27:52:AD:71:13:F0:82:50:9B:49
            X509v3 Authority Key Identifier:
                keyid:E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:5f:2f:7e:a2:bc:be:94:7b:73:56:52:b9:15:64:1a:c2:dc:
         17:63:38:ba:d9:7e:d1:06:94:4f:19:da:64:b4:db:c7:23:77:
         55:87:4c:33:5a:09:1a:7c:a0:23:b9:60:5d:f5:95:c6:07:ca:
         2c:f3:31:9c:9b:79:42:4a:04:35:34:d6:24:bf:3c:77:fc:7a:
         fe:40:96:43:62:70:4e:15:ab:ef:ca:ea:f4:6a:72:e4:7e:ee:
         90:4b:a9:56:b9:d6:70:cd:52:f5:60:aa:31:3b:93:b2:ce:fb:
         42:cd:0c:0e:bc:dc:38:e7:ce:27:e3:cd:c0:d3:85:1c:6e:88:
         99:5a:f0:9e:77:33:06:e0:46:cc:01:e6:7e:14:53:11:ee:96:
         7a:99:7c:45:83:4c:e1:ba:1f:8a:2a:10:2e:e2:b5:a8:ba:a1:
         46:d0:34:df:cc:71:bd:ad:c8:e3:5c:ec:f9:87:51:be:5d:6a:
         ba:00:71:2b:d1:f4:09:06:15:f1:01:4c:2a:93:54:6f:0d:23:
         64:c6:8f:c5:86:56:da:a8:ad:b6:5e:a0:5c:0c:66:f8:74:4b:
         a0:73:8e:79:b5:0a:24:69:6d:c8:7c:91:25:2e:a0:b2:e2:78:
         92:ae:cf:6c:13:a2:c2:00:9b:9b:f7:b8:5c:d2:d1:8d:be:d1:
         b2:d1:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:45 2024 by rpki-client on console-fra.rpki-client.org