Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/jeqz2OtjvfCSP-zDk-GAbQo76N4.roa
File:                     jeqz2OtjvfCSP-zDk-GAbQo76N4.roa (raw, json)
Hash identifier:          4TMKjnJWtBoWBy5nir0WHkFyJK05aPA/0QLHsYY1Grg=
Subject key identifier:   8D:EA:B3:D8:EB:63:BD:F0:92:3F:EC:C3:93:E1:80:6D:0A:3B:E8:DE
Certificate issuer:       /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial:       024EAC1F
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/jeqz2OtjvfCSP-zDk-GAbQo76N4.roa
Signing time:             Sat 01 Jan 2022 07:54:49 +0000
ROA not before:           Sat 01 Jan 2022 07:54:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.30.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38710303 (0x24eac1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
        Validity
            Not Before: Jan  1 07:54:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8deab3d8eb63bdf0923fecc393e1806d0a3be8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:e3:5c:ca:80:02:38:b6:f7:22:9a:b0:29:
                    31:4d:f9:79:8f:b5:ff:3d:c1:09:5e:c2:bd:ab:4a:
                    1c:42:e4:a8:0c:a4:f1:2b:d3:6b:21:9f:ca:02:d5:
                    4a:a1:16:5c:63:ef:0d:4f:dd:14:62:d9:2f:4a:8f:
                    41:14:cd:f5:55:03:85:17:29:ea:69:e1:af:b8:9e:
                    21:63:4f:9e:eb:64:02:6b:0e:f9:8c:17:8f:57:1c:
                    fd:e2:f2:aa:04:60:72:df:25:70:f5:7a:65:ba:cf:
                    52:8c:c7:10:0f:9c:d9:da:13:e0:43:b9:df:d3:11:
                    f1:71:1a:c2:1e:01:d4:6e:c3:5c:3c:a5:f8:f1:fd:
                    0a:4d:cf:67:07:01:d4:32:20:33:9a:ea:0e:81:5f:
                    01:b5:b6:60:3e:16:e2:9d:e4:72:38:8d:54:67:1e:
                    bc:90:d5:ed:24:32:13:7c:f1:d7:11:15:62:50:e5:
                    25:e6:4c:1e:2d:6b:1e:0e:f9:93:99:00:18:f9:cf:
                    6f:c0:dc:9b:d5:7a:a1:7a:e2:5c:e1:f2:24:15:6f:
                    a2:5b:6c:9f:1e:94:df:05:6b:86:d7:15:37:72:17:
                    54:e5:dc:d0:0d:25:4c:2a:ad:e9:a3:78:1a:c9:e9:
                    c3:06:fc:cf:f5:1e:f1:f6:68:be:69:1a:96:3c:68:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:B3:D8:EB:63:BD:F0:92:3F:EC:C3:93:E1:80:6D:0A:3B:E8:DE
            X509v3 Authority Key Identifier:
                keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/jeqz2OtjvfCSP-zDk-GAbQo76N4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:79:09:28:4e:cf:95:fd:6b:12:cc:62:ea:ee:85:08:0c:e4:
         36:80:e5:e4:31:a0:52:75:ad:ed:d2:bc:de:77:a2:ce:10:3a:
         e6:4d:b5:ac:42:28:06:8a:84:45:5f:73:18:72:1a:2c:ee:fc:
         31:2e:84:1e:7e:c7:13:66:19:ef:d9:81:37:93:5e:2e:cd:6d:
         d9:00:f4:9e:fa:36:75:f7:da:f7:dc:2a:8e:c9:27:f2:75:d2:
         da:c2:d4:df:8d:45:ad:29:13:a3:7d:8a:87:94:cd:19:0d:56:
         1d:4e:7e:fe:4a:4d:95:87:df:98:5e:a8:fd:8c:df:a6:2a:df:
         16:8f:16:46:b0:22:ff:14:1d:3e:37:d3:4d:8a:c6:80:0a:5e:
         4f:6c:6a:d4:85:c2:7f:82:17:08:1a:d1:f9:1a:18:4c:57:66:
         db:4c:db:2e:bb:45:13:39:8b:be:b6:43:f5:d5:6f:95:10:37:
         ae:10:e5:3e:fc:81:07:71:1d:53:8e:2f:f9:98:b9:3f:6c:28:
         70:47:fa:48:49:99:81:22:01:7a:39:4d:96:9c:b0:75:f4:ed:
         a7:7b:dd:88:10:5f:bb:24:5c:22:da:62:02:36:14:85:a3:dc:
         c0:f2:30:b8:4c:30:42:96:28:dc:5c:d1:18:1e:3b:8d:0d:0e:
         ca:d1:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org