Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/zeG-mlHW9HAyzCSzTX40OZFHb_4.roa
File:                     zeG-mlHW9HAyzCSzTX40OZFHb_4.roa (raw, json)
Hash identifier:          u76PQFXixvbKfwSeq+0HCV60jgdikcZW5rW05tn7FWA=
Subject key identifier:   CD:E1:BE:9A:51:D6:F4:70:32:CC:24:B3:4D:7E:34:39:91:47:6F:FE
Certificate issuer:       /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial:       01E7EC08
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/zeG-mlHW9HAyzCSzTX40OZFHb_4.roa
Signing time:             Mon 21 Mar 2022 15:07:20 +0000
ROA not before:           Mon 21 Mar 2022 15:07:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        130.193.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31976456 (0x1e7ec08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
        Validity
            Not Before: Mar 21 15:07:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cde1be9a51d6f47032cc24b34d7e343991476ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:57:28:51:a3:94:e9:9e:df:59:7f:8c:7d:
                    f7:c6:ed:44:a6:ad:d3:4f:e1:2e:50:60:13:cb:6e:
                    e5:17:af:ec:dc:99:8c:cd:58:71:1c:a0:36:c7:de:
                    90:94:24:30:a5:cf:e9:4b:42:d6:37:45:61:26:11:
                    a3:44:ea:69:07:e7:d0:eb:fc:35:d5:f2:1f:a1:b8:
                    ea:5a:d8:33:10:e6:48:61:b0:b9:29:d5:1f:4f:a8:
                    48:8a:77:aa:ab:5a:85:e7:bb:46:bd:8b:50:e1:7c:
                    bc:98:b2:54:90:e6:5e:9a:34:5e:1c:10:d7:ca:e5:
                    ba:2f:8f:87:10:24:dd:3b:58:e6:19:5d:e9:f8:c9:
                    7b:97:99:cb:3a:a4:4a:6f:f7:8a:d2:05:48:12:9f:
                    60:19:0d:68:99:31:9e:18:b6:db:89:73:a2:55:66:
                    fe:c7:e2:f9:6f:c7:e2:ab:65:e9:7b:4a:f1:c9:b3:
                    28:8c:7c:78:e5:80:0a:17:27:78:b4:72:ad:34:a3:
                    6c:ff:a5:1e:59:04:76:99:43:d1:bf:0c:33:30:c2:
                    4a:92:2f:dd:af:32:6e:a5:bb:ee:59:fe:aa:8a:57:
                    f6:f6:e3:db:5e:95:d5:16:49:cb:19:65:26:c4:7b:
                    2b:b4:f5:83:4c:83:d6:df:f6:07:53:43:5b:56:a2:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E1:BE:9A:51:D6:F4:70:32:CC:24:B3:4D:7E:34:39:91:47:6F:FE
            X509v3 Authority Key Identifier:
                keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/zeG-mlHW9HAyzCSzTX40OZFHb_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:ee:ab:bf:ca:12:8e:fa:bc:1e:d8:85:3c:6a:91:c9:3f:
         a4:e5:c0:30:9a:95:c3:0c:8d:ec:0e:50:6c:ec:dc:36:b1:2b:
         fb:69:1d:1f:22:f5:96:31:63:48:8b:d4:df:1e:2b:c9:85:44:
         8e:a8:db:a7:61:de:bc:1f:28:0a:8b:11:46:5e:f6:c7:37:b6:
         4c:87:20:8b:c5:a2:b7:d5:0e:2b:00:35:11:d7:ef:15:bb:52:
         cf:12:52:0a:83:86:a5:a1:1e:d0:3d:e6:d4:f5:01:c1:39:bc:
         d3:f2:33:02:ac:78:f1:c1:9d:fd:77:65:5f:4d:a4:8d:12:9e:
         36:bb:54:22:c8:ac:d8:5d:5f:b4:a6:6b:49:b3:71:78:5e:16:
         81:61:0f:19:09:f4:78:6d:a9:2c:3f:8e:dd:21:a9:df:bd:f5:
         25:7f:29:74:5e:b8:8d:79:fd:7e:58:0f:77:42:07:3e:71:9e:
         f9:ad:e8:41:8a:28:17:fe:3e:30:5c:80:15:1b:49:bb:ab:91:
         e4:88:90:02:fd:cd:c0:51:90:af:bc:c6:11:89:27:e8:b9:12:
         84:58:ea:3e:91:eb:41:f7:b6:8d:ca:6e:1a:9c:86:85:cc:18:
         99:a1:14:fe:b7:ce:04:9e:b7:85:9f:74:c7:68:70:71:49:0c:
         85:bd:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:15 2024 by rpki-client on console-ams.rpki-client.org