Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/pYiohw8hhZfvZ1R0GnLi4MF60y4.roa
File:                     pYiohw8hhZfvZ1R0GnLi4MF60y4.roa (raw, json)
Hash identifier:          wtMu1Ti8uWAFV4gLAOQaXohESekdMHzHM62YIrHABPI=
Subject key identifier:   A5:88:A8:87:0F:21:85:97:EF:67:54:74:1A:72:E2:E0:C1:7A:D3:2E
Certificate issuer:       /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial:       01260AE9
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/pYiohw8hhZfvZ1R0GnLi4MF60y4.roa
Signing time:             Sat 01 Jan 2022 08:03:11 +0000
ROA not before:           Sat 01 Jan 2022 08:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        130.193.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19270377 (0x1260ae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
        Validity
            Not Before: Jan  1 08:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a588a8870f218597ef6754741a72e2e0c17ad32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:ea:2a:42:00:e0:02:b5:34:12:98:76:f1:
                    61:c4:63:cc:0d:e7:e3:3f:78:b0:ab:2e:95:9b:ac:
                    23:7d:a1:94:0f:be:ac:1a:86:61:7f:c1:cd:05:60:
                    dd:22:b5:f6:b8:60:4c:8e:ff:09:ad:59:5b:a8:fe:
                    3b:a9:a2:2e:02:16:27:ad:b3:f7:7e:9a:7b:08:84:
                    6e:f1:10:48:8c:22:3e:da:1f:b9:28:1f:15:a9:1d:
                    ca:61:44:2a:96:e1:1d:ff:72:ee:a0:bd:6d:92:ef:
                    63:8d:e2:f3:45:b3:14:c1:a5:5e:7a:fb:57:da:16:
                    37:c5:b5:69:6a:b7:55:5d:55:95:55:60:ad:62:d6:
                    5d:5f:e3:26:c2:70:3c:88:30:00:1c:49:9e:80:9e:
                    d7:a4:84:f6:1c:eb:70:64:b0:63:7b:2d:62:c4:16:
                    82:19:7d:a0:12:49:ce:b7:95:8e:f3:ba:09:1e:75:
                    ea:87:b9:7d:3f:fc:da:a1:5e:31:d0:ef:f9:46:44:
                    66:e3:43:9f:48:2b:78:86:84:ab:89:3f:ee:63:26:
                    44:65:9e:02:68:bb:fd:4a:bb:e6:71:d9:ad:d8:83:
                    e2:97:36:d1:62:85:16:34:5a:22:50:d7:5b:61:e2:
                    0b:69:40:09:65:e7:80:55:6a:75:b1:f2:91:49:c0:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:88:A8:87:0F:21:85:97:EF:67:54:74:1A:72:E2:E0:C1:7A:D3:2E
            X509v3 Authority Key Identifier:
                keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/pYiohw8hhZfvZ1R0GnLi4MF60y4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:70:54:50:af:2b:bd:70:ab:75:51:ac:28:b2:f7:83:a7:89:
         0f:a9:87:4c:3b:5c:f9:f0:18:82:93:b8:0b:0f:b6:b5:11:c6:
         a8:25:f7:40:bd:ee:69:42:1e:d8:f1:bd:02:05:2b:60:34:61:
         a6:ff:74:70:05:76:26:d3:13:37:20:24:61:79:e2:e8:62:26:
         50:2d:83:fd:4d:bd:52:59:f0:1d:8b:9a:9d:db:9d:7a:bb:f9:
         98:e7:ae:88:6d:37:b5:f1:e6:2a:3e:b4:6a:78:ed:45:5d:41:
         80:61:91:f9:ab:95:7b:eb:8d:d9:13:38:9c:50:e0:77:29:c2:
         72:af:17:e0:b8:46:22:9b:20:f2:af:13:32:f3:ce:36:7e:11:
         f1:00:bf:ec:4e:b1:f9:b4:75:22:c2:8f:a1:7c:65:fd:af:f9:
         e2:ed:50:b0:f9:ce:af:88:a4:e8:f2:a8:88:f4:83:5d:14:31:
         68:1c:98:ac:34:26:29:02:f5:52:27:1d:3e:d1:48:b2:10:34:
         07:c4:f9:14:f0:ec:48:24:46:3e:33:6e:ed:df:d3:54:9d:0c:
         23:80:d4:e3:df:a4:7c:1a:71:5b:01:3b:36:27:f7:5b:3a:fe:
         d8:13:f2:3c:03:63:59:80:87:1b:6d:40:d5:ee:12:30:99:d5:
         e7:12:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org