Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/4fhxMSbolBXhF6UDMe_j5OByfyg.roa
File:                     4fhxMSbolBXhF6UDMe_j5OByfyg.roa (raw, json)
Hash identifier:          OED11zht4nBvSt1/GSQdc0QVmfyVuS8aakR4Z7s3X8o=
Subject key identifier:   E1:F8:71:31:26:E8:94:15:E1:17:A5:03:31:EF:E3:E4:E0:72:7F:28
Certificate issuer:       /CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Certificate serial:       018A53B54A8BBDB122451309F3313AEA2373
Authority key identifier: 79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/4fhxMSbolBXhF6UDMe_j5OByfyg.roa
Signing time:             Sat 02 Sep 2023 02:25:04 +0000
ROA not before:           Sat 02 Sep 2023 02:25:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        193.246.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:53:b5:4a:8b:bd:b1:22:45:13:09:f3:31:3a:ea:23:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79069738c48f16f0144519b7f881ad0b6d3c930e
        Validity
            Not Before: Sep  2 02:25:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e1f8713126e89415e117a50331efe3e4e0727f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:2d:02:56:e5:d6:6b:78:59:76:84:bd:35:
                    84:5b:be:06:b0:06:7c:65:22:d4:2d:5c:e5:5e:8f:
                    d2:a6:c6:4b:25:58:a3:c9:31:87:d3:ab:2d:56:7a:
                    59:4c:27:e8:5f:31:52:7f:ad:79:b5:42:e5:08:15:
                    7b:db:80:ea:64:e6:50:0d:66:b3:1f:47:94:7d:55:
                    bb:ca:44:84:f4:c6:8c:d1:67:aa:53:67:a3:98:f9:
                    97:31:11:4e:84:dc:51:6a:72:2d:83:10:5c:2e:a6:
                    54:43:bb:9b:cf:0b:1e:51:be:04:08:83:cb:56:e9:
                    3d:27:25:21:a6:a2:08:da:67:db:c6:01:77:2b:c3:
                    32:da:48:33:d5:df:0c:2c:d4:e0:d6:75:79:d9:6f:
                    5b:60:7b:9b:37:9c:aa:4f:b4:13:42:08:87:13:71:
                    74:3d:31:ce:c9:db:b3:b8:50:d3:f9:72:49:8f:57:
                    79:3c:5e:c9:66:ee:30:fb:86:f4:b8:2b:45:09:1e:
                    6b:f6:25:fb:ff:bf:f3:96:4e:9b:0e:fa:a9:91:31:
                    a5:0c:5f:d4:0f:19:5f:1e:a2:1a:2b:57:37:be:f1:
                    1a:db:d2:c5:91:9c:fe:d8:7e:ae:fa:92:2d:ef:94:
                    e2:57:6b:87:d8:b7:2f:70:98:4b:f4:64:81:9b:b7:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F8:71:31:26:E8:94:15:E1:17:A5:03:31:EF:E3:E4:E0:72:7F:28
            X509v3 Authority Key Identifier:
                keyid:79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/4fhxMSbolBXhF6UDMe_j5OByfyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/eQaXOMSPFvAURRm3-IGtC208kw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:88:db:73:0c:cd:aa:d2:e3:5a:2a:d6:15:51:1c:99:05:20:
         02:25:d8:72:22:90:6b:6b:db:f3:de:e1:f5:8d:b6:7c:13:f6:
         19:ba:49:13:ab:43:a9:93:2d:84:6e:b6:6f:af:70:d8:06:9b:
         36:d6:3f:12:84:b7:10:3a:2f:89:1b:07:68:63:6c:28:69:d3:
         72:cc:f7:d0:31:d9:bd:0c:38:a0:0f:fa:d6:37:d4:ba:09:22:
         ac:d3:c0:e0:27:d2:97:cc:04:45:14:97:34:f1:30:be:11:c1:
         fa:c2:ff:31:e8:37:b1:46:bd:2d:dc:be:57:a1:c6:05:fe:1b:
         49:89:67:21:ff:a4:22:15:04:5d:35:0c:d7:e7:e9:0c:5c:f8:
         76:43:da:de:23:70:21:05:e1:51:31:e3:bf:52:8c:73:e9:51:
         5b:d0:df:dc:d8:dd:41:1d:ad:08:0b:48:99:2d:bd:e6:a3:9a:
         99:48:69:2a:49:c3:41:1c:78:e1:c6:b6:b5:b5:cb:bc:65:4a:
         c5:8f:b7:14:1a:a8:3a:3a:07:0a:12:3f:44:4e:b2:be:12:48:
         8e:e2:73:dd:89:4d:9d:50:06:04:99:d6:06:83:38:e1:f2:9a:
         2e:58:fe:7e:84:28:21:4f:19:c2:f4:4a:37:45:db:80:28:5b:
         e9:e7:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:20 2024 by rpki-client on console-ams.rpki-client.org