Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/Ee81Urk23I8DSe4piAXhhUFNU9g.roa
File:                     Ee81Urk23I8DSe4piAXhhUFNU9g.roa (raw, json)
Hash identifier:          V3FltEwLe2hTuRzSVIJYqF9nySn6re6j2+AWI8Xvngo=
Subject key identifier:   11:EF:35:52:B9:36:DC:8F:03:49:EE:29:88:05:E1:85:41:4D:53:D8
Certificate issuer:       /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial:       03ED641F
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/Ee81Urk23I8DSe4piAXhhUFNU9g.roa
Signing time:             Tue 28 Jun 2022 12:26:02 +0000
ROA not before:           Tue 28 Jun 2022 12:26:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        193.30.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65889311 (0x3ed641f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
        Validity
            Not Before: Jun 28 12:26:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11ef3552b936dc8f0349ee298805e185414d53d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:01:25:72:2a:43:79:36:7e:24:97:98:0f:
                    e6:ef:4a:49:e0:93:9c:ef:2b:f0:1a:a5:4c:f4:6d:
                    a8:60:b2:d3:d8:21:ac:c1:05:38:9e:d2:47:8e:cd:
                    bf:24:97:e8:93:97:19:02:50:2f:d5:a7:c0:6f:a6:
                    ff:00:3c:b1:2d:b0:42:dd:94:3a:53:d0:52:01:aa:
                    a8:a3:c9:38:78:f5:6d:67:e2:96:40:ea:ac:66:00:
                    99:95:03:3e:b2:e1:34:ef:eb:b6:88:1e:af:41:55:
                    99:bb:9d:3b:75:bd:56:aa:63:1f:f4:aa:90:38:61:
                    89:a3:34:15:a0:c9:a2:cd:7b:40:46:a1:6b:32:b0:
                    f3:31:91:80:2b:39:1a:22:2f:8a:84:89:b1:57:80:
                    19:6c:d8:f0:e5:2e:71:3e:8c:11:23:ee:29:61:22:
                    ab:1b:30:fe:38:0f:76:ad:f7:d4:41:ab:f7:b7:c2:
                    b4:ab:91:81:65:53:61:60:7e:ce:a0:6e:6a:d6:46:
                    54:fd:81:e7:04:b3:94:75:30:51:d9:3f:b8:ad:cb:
                    90:17:cc:46:23:af:be:fe:a9:e1:fa:5a:37:40:da:
                    d8:11:3f:ae:d3:db:51:da:95:51:7c:80:c1:91:3d:
                    00:93:3f:3b:9a:f9:61:ee:7d:af:70:35:f5:24:c7:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EF:35:52:B9:36:DC:8F:03:49:EE:29:88:05:E1:85:41:4D:53:D8
            X509v3 Authority Key Identifier:
                keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/Ee81Urk23I8DSe4piAXhhUFNU9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:15:f5:ba:8c:ce:8a:7b:be:be:3d:1c:3b:7d:ae:b4:a9:2b:
         cb:07:08:20:54:42:ad:4b:a2:01:9d:50:26:4e:bb:d4:bc:5f:
         c6:52:53:d4:c8:59:63:20:29:42:12:7d:69:3b:f3:f4:7b:c5:
         61:f3:3b:ac:bf:f4:d0:d7:d6:e8:7d:aa:34:34:de:52:cb:37:
         d6:c3:c1:6e:d7:d6:19:17:c9:f8:d4:f8:fb:d5:4c:8c:6d:11:
         c8:4b:49:ea:11:6b:f2:ad:bc:c1:f3:75:30:a4:7c:fe:9e:71:
         b8:bc:cd:0d:7b:9b:62:bf:2d:8b:2c:c8:d0:e9:63:c1:f1:ba:
         d1:64:58:85:0d:91:90:a7:8e:8f:04:21:9e:cd:82:97:99:a7:
         ce:db:a9:4a:30:97:56:0b:28:5f:88:c6:82:1a:df:6e:26:73:
         60:60:13:54:6e:10:52:96:a7:24:70:a5:93:37:9f:fd:40:60:
         44:9e:ad:3e:84:de:18:f8:28:b5:e4:b7:42:e7:2d:6a:9d:3b:
         7d:0d:4f:3f:82:4f:f7:c0:a3:71:4e:54:30:df:f1:69:5d:b9:
         cb:78:56:03:a5:0a:1b:af:6a:09:ce:d4:39:63:a5:16:44:b9:
         b2:23:4c:40:35:34:bc:1d:cb:4d:e4:d3:2b:e4:88:60:b4:d9:
         2f:1f:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org