Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/Trm4-a6peW2aLh-atQyTa7IVkpI.roa
File:                     Trm4-a6peW2aLh-atQyTa7IVkpI.roa (raw, json)
Hash identifier:          9j2N6HMLD/cork43aVDnuG4wYr/MGxDEDiE+MCj3BkM=
Subject key identifier:   4E:B9:B8:F9:AE:A9:79:6D:9A:2E:1F:9A:B5:0C:93:6B:B2:15:92:92
Certificate issuer:       /CN=1347bf8fb701286463bfab8c299e91350504ab48
Certificate serial:       01F9B066
Authority key identifier: 13:47:BF:8F:B7:01:28:64:63:BF:AB:8C:29:9E:91:35:05:04:AB:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0e_j7cBKGRjv6uMKZ6RNQUEq0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/Trm4-a6peW2aLh-atQyTa7IVkpI.roa
Signing time:             Sat 01 Jan 2022 09:01:16 +0000
ROA not before:           Sat 01 Jan 2022 09:01:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58057
IP address blocks:        193.163.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33140838 (0x1f9b066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347bf8fb701286463bfab8c299e91350504ab48
        Validity
            Not Before: Jan  1 09:01:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4eb9b8f9aea9796d9a2e1f9ab50c936bb2159292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:c8:8f:ef:4c:f3:88:ba:0c:88:6b:c8:79:
                    8e:0a:ad:30:cf:ba:fd:85:05:b4:f7:70:3b:8b:ca:
                    19:16:de:ef:00:fc:39:14:c0:f0:4a:5c:18:6d:15:
                    e8:4b:bb:9d:50:25:fc:b7:a6:c5:98:92:2a:59:64:
                    95:01:60:84:6e:89:eb:7d:d9:45:75:d3:67:24:f9:
                    33:0b:12:39:86:29:60:46:d9:c3:18:d6:f6:40:1e:
                    da:27:b0:90:1e:cc:d5:78:ec:24:cd:74:8a:95:11:
                    bb:c6:13:4b:44:04:4b:e0:73:fa:da:43:ad:16:6a:
                    43:3d:3d:d3:c7:7d:01:b3:e4:bf:9f:ec:95:e7:39:
                    a5:c5:9f:51:ed:2e:63:27:78:e8:e6:47:cf:7c:6a:
                    e8:34:ca:00:de:7d:15:1e:25:5c:c1:dc:fd:85:81:
                    17:0e:fa:2d:0f:03:ba:3d:e9:f6:0d:5e:67:db:c9:
                    94:35:6e:29:af:cb:27:29:d2:03:16:02:cf:da:08:
                    66:54:93:b9:50:7e:c2:74:c0:09:a5:d4:0c:fa:73:
                    74:89:08:32:40:f2:14:cf:2c:9a:42:87:54:4b:68:
                    f0:68:d2:53:63:70:c3:77:ea:cd:e4:ba:a5:21:05:
                    94:d5:a8:b8:75:31:9a:c5:47:93:40:8b:41:af:84:
                    8a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:B8:F9:AE:A9:79:6D:9A:2E:1F:9A:B5:0C:93:6B:B2:15:92:92
            X509v3 Authority Key Identifier:
                keyid:13:47:BF:8F:B7:01:28:64:63:BF:AB:8C:29:9E:91:35:05:04:AB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0e_j7cBKGRjv6uMKZ6RNQUEq0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/Trm4-a6peW2aLh-atQyTa7IVkpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/E0e_j7cBKGRjv6uMKZ6RNQUEq0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:99:b6:33:ec:0d:41:66:42:1c:d8:77:26:6f:0c:e9:32:df:
         9b:3a:e0:03:35:bf:d6:73:e4:fa:c5:db:8f:c9:61:f8:14:5a:
         ac:59:7c:46:49:48:0b:4c:26:f2:8e:23:c3:8f:c6:99:f4:56:
         68:eb:b3:9d:d4:84:e5:9a:b3:bc:50:28:d1:49:f7:5b:4e:23:
         0a:b4:19:40:44:b0:3c:37:aa:ee:98:aa:37:1e:d2:17:99:a1:
         40:25:60:92:e3:ba:b5:74:02:8c:f4:90:e0:ba:14:98:8f:73:
         00:6e:77:64:49:f3:29:e1:f1:dc:8c:f0:fc:d8:e2:72:d2:0e:
         28:d7:74:e4:ac:b4:38:07:c0:46:46:79:61:bc:fd:3f:26:6e:
         9e:1f:73:5b:16:fc:34:a1:de:d5:59:0e:97:48:79:88:ea:03:
         d0:68:a0:e9:4b:ef:55:32:6e:d2:43:30:62:97:d1:93:2f:1b:
         76:02:57:f7:39:e5:20:09:1d:30:99:40:4e:87:77:25:f1:4b:
         dd:44:fc:89:60:89:69:af:b4:24:41:5c:cc:a2:19:fd:4c:60:
         d2:8d:be:8b:62:e8:5f:80:d8:6d:2d:21:52:54:0e:e3:e0:e4:
         0d:7d:06:ae:e9:a6:d7:37:c1:01:e8:4a:91:34:a4:3e:dc:37:
         b3:06:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org