Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/fUpiurdDg5i4uPxQB0cfXpTNP-o.roa
File:                     fUpiurdDg5i4uPxQB0cfXpTNP-o.roa (raw, json)
Hash identifier:          PS+NRL7+ybZj9pZ2Me8k9RqqQlE+8U7nOCuLfaqLUMw=
Subject key identifier:   7D:4A:62:BA:B7:43:83:98:B8:B8:FC:50:07:47:1F:5E:94:CD:3F:EA
Certificate issuer:       /CN=aef667fa6caa11e06cc990cdcb349f9ab5784d8e
Certificate serial:       095E17D0
Authority key identifier: AE:F6:67:FA:6C:AA:11:E0:6C:C9:90:CD:CB:34:9F:9A:B5:78:4D:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvZn-myqEeBsyZDNyzSfmrV4TY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/fUpiurdDg5i4uPxQB0cfXpTNP-o.roa
Signing time:             Sat 01 Jan 2022 09:01:38 +0000
ROA not before:           Sat 01 Jan 2022 09:01:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47844
IP address blocks:        62.122.88.0/21 maxlen: 24
                          31.130.0.0/24 maxlen: 24
                          31.130.1.0/24 maxlen: 24
                          31.130.2.0/24 maxlen: 24
                          31.130.3.0/24 maxlen: 24
                          31.130.4.0/22 maxlen: 24
                          31.130.8.0/22 maxlen: 24
                          31.130.12.0/22 maxlen: 24
                          31.130.16.0/20 maxlen: 24
                          178.212.80.0/21 maxlen: 24
                          93.157.160.0/21 maxlen: 24
                          93.157.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157161424 (0x95e17d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef667fa6caa11e06cc990cdcb349f9ab5784d8e
        Validity
            Not Before: Jan  1 09:01:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d4a62bab7438398b8b8fc5007471f5e94cd3fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:ca:c2:80:44:aa:5d:75:50:e9:f6:cf:c8:
                    ea:36:21:64:87:74:58:ad:0a:a9:18:b5:03:f8:59:
                    8c:6a:0d:87:39:23:c2:55:fb:ce:8d:c5:e9:6c:85:
                    a6:8e:76:43:02:33:d9:23:83:a5:43:06:41:a1:58:
                    7e:d3:f0:87:35:3e:b6:b7:5c:f3:82:e7:6d:d8:7a:
                    92:d1:1b:16:b4:c9:ae:7b:3e:ec:e6:5d:b6:f7:16:
                    53:0a:4c:cb:0a:ab:cb:aa:71:4b:b3:82:03:86:9c:
                    63:d8:ba:58:51:41:d7:8b:81:a1:17:44:c9:fb:ed:
                    0f:fd:6b:cd:d8:d6:3f:91:ab:2f:46:4c:67:40:89:
                    69:bc:c7:6d:4d:c0:f9:f2:37:7b:dd:51:34:d5:cc:
                    db:43:55:20:f8:1b:ea:ce:73:f5:7e:da:83:fb:a8:
                    87:e8:a4:fc:91:70:4d:e3:c0:75:3c:d3:e9:a1:ed:
                    6b:fb:70:e0:00:47:23:9b:67:c3:44:45:43:95:27:
                    45:e1:4e:be:13:97:95:55:06:24:e9:04:1b:63:38:
                    6f:da:29:1b:cb:29:93:9c:b3:b5:a0:99:97:67:5d:
                    c4:bc:60:6e:f7:e6:fc:d2:05:e5:4d:93:2b:94:a2:
                    b7:c7:42:d2:c2:74:4a:e1:b2:68:58:54:8a:fd:99:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4A:62:BA:B7:43:83:98:B8:B8:FC:50:07:47:1F:5E:94:CD:3F:EA
            X509v3 Authority Key Identifier:
                keyid:AE:F6:67:FA:6C:AA:11:E0:6C:C9:90:CD:CB:34:9F:9A:B5:78:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvZn-myqEeBsyZDNyzSfmrV4TY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/fUpiurdDg5i4uPxQB0cfXpTNP-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/rvZn-myqEeBsyZDNyzSfmrV4TY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.130.0.0/19
                  62.122.88.0/21
                  93.157.160.0/21
                  178.212.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:f9:f4:72:5f:75:55:f6:08:82:d7:2c:74:68:16:5d:05:
         08:75:65:2b:d9:4e:68:d6:cc:b8:13:a6:ff:47:4d:5d:90:83:
         79:46:96:e3:e4:8c:e3:98:31:0d:97:77:f6:6c:0c:9b:91:bd:
         dc:d2:c4:81:25:7f:0d:a3:64:20:88:89:c5:d2:6b:5a:00:a7:
         97:d4:7e:92:40:49:95:f9:ed:13:e0:33:1f:d8:67:78:6b:36:
         89:1a:6b:32:a0:6e:2c:6b:6f:02:ac:5d:61:13:d9:42:bc:fb:
         9a:6c:5e:4d:d2:a2:2a:17:cf:9b:8c:e5:74:5c:c5:90:c1:4b:
         fe:87:fd:e1:a0:0f:72:58:b1:5e:6d:49:4f:ac:5b:6f:d3:98:
         70:86:b7:94:a3:68:4b:aa:08:c9:ba:03:b2:59:46:1a:59:ac:
         85:64:bb:8a:b4:aa:3d:8c:49:e9:d9:46:ab:9f:de:bc:8b:5b:
         cc:38:60:de:b6:b8:bb:44:d0:b8:1a:8b:c6:ac:e7:5b:fb:6f:
         76:fd:bc:08:99:10:1e:e6:0b:5b:ee:ae:4e:c5:bf:79:f9:60:
         92:73:27:88:2d:28:4c:82:b4:0b:37:ec:bb:67:ba:7a:a8:0c:
         7b:9f:e7:c6:b3:52:b0:7a:e0:d6:6e:33:cf:85:b8:ed:fc:75:
         8f:a9:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org