Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/jhzx3eg8RijWn_Fv0jwPIa7Lrzo.roa
File:                     jhzx3eg8RijWn_Fv0jwPIa7Lrzo.roa (raw, json)
Hash identifier:          I0a1mQoAlhwfckzwNCetd4xcv+1k7OxjC3xMuejxop4=
Subject key identifier:   8E:1C:F1:DD:E8:3C:46:28:D6:9F:F1:6F:D2:3C:0F:21:AE:CB:AF:3A
Certificate issuer:       /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial:       F699BF
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/jhzx3eg8RijWn_Fv0jwPIa7Lrzo.roa
Signing time:             Sat 01 Jan 2022 09:55:01 +0000
ROA not before:           Sat 01 Jan 2022 09:55:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        188.93.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16161215 (0xf699bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
        Validity
            Not Before: Jan  1 09:55:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e1cf1dde83c4628d69ff16fd23c0f21aecbaf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:1e:c9:a6:8b:c6:31:5c:6b:f2:40:e1:c8:
                    8d:8a:52:a3:12:78:8c:b6:96:37:dd:df:eb:03:7d:
                    75:bb:6c:f0:c0:73:18:96:a4:4c:d1:05:ae:99:f6:
                    33:fd:4f:87:ed:e4:18:bc:cd:53:2e:05:05:0d:e9:
                    ab:a9:07:6c:de:5b:66:e8:a5:6d:dc:fa:ac:c0:50:
                    a8:c4:b2:28:a9:eb:4e:0c:cd:6d:4b:57:bd:52:04:
                    08:76:b4:d7:cd:1f:e4:40:6f:9e:d2:8d:31:4b:c4:
                    ac:d7:cc:77:91:99:7c:e8:c9:9e:fa:24:20:9f:26:
                    6b:da:32:5a:da:24:8b:af:4a:de:04:96:b8:68:cf:
                    96:19:ea:b2:82:bb:81:bd:3d:df:0e:c6:57:5c:14:
                    6e:cc:48:77:31:cc:88:53:1e:fb:bb:a0:98:51:c8:
                    e1:fc:15:72:31:5c:ba:e1:cd:0a:42:23:e4:b1:4b:
                    88:34:b3:24:fa:72:d7:46:a3:5a:bc:91:ce:ff:1b:
                    e2:28:53:dc:8b:3e:bf:dd:87:d4:6c:42:90:40:e6:
                    f1:af:ba:b2:94:ea:8c:83:51:23:dc:28:98:46:11:
                    86:e6:ea:32:c2:80:9a:a8:c1:f9:1a:9f:c4:fd:cd:
                    87:84:e7:c0:89:8f:32:08:b1:56:4b:20:06:88:52:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:F1:DD:E8:3C:46:28:D6:9F:F1:6F:D2:3C:0F:21:AE:CB:AF:3A
            X509v3 Authority Key Identifier:
                keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/jhzx3eg8RijWn_Fv0jwPIa7Lrzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:f9:a2:33:25:a7:5e:df:6c:a9:b4:4e:c0:d5:6e:99:cf:
         15:5f:3b:8c:6f:4f:e1:ca:7b:61:7a:97:ea:72:ee:15:4a:ed:
         30:8b:72:49:d7:ec:51:74:6e:af:b6:45:c4:ee:53:2e:13:f7:
         0a:e5:b6:42:d9:3d:23:21:3e:72:8a:e6:d5:56:4f:59:c1:a6:
         1a:97:03:7c:3f:ca:1a:f0:15:73:59:b6:1f:c8:9c:22:08:79:
         b2:a4:90:70:47:6c:ea:9e:db:fd:0f:ca:13:3a:ff:44:0b:58:
         ee:d1:d8:ef:a1:4e:d4:9b:d8:fb:55:29:58:1f:c3:44:b7:72:
         63:dc:73:65:07:29:f9:03:0c:ca:ca:27:99:71:2a:9f:d0:16:
         1f:30:53:1e:a3:b3:44:26:ef:d7:0f:a5:f3:65:60:5c:6f:26:
         96:d8:5c:61:00:3a:0d:bb:bf:ba:7a:4c:68:9d:af:3b:a6:fb:
         f7:97:88:6f:01:ee:4d:60:d7:ce:21:0b:5a:24:09:6d:76:bf:
         6f:64:00:50:d5:28:02:21:47:e7:74:74:d3:a6:c8:88:0d:f6:
         3f:b5:5f:8a:ce:37:9e:05:3b:e1:52:e1:0f:f8:0c:99:dd:6f:
         81:d5:97:0e:54:c6:a0:fa:e4:0c:81:07:f9:71:cd:ac:23:b4:
         ce:f1:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:55 2024 by rpki-client on console-fra.rpki-client.org