Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/uLoCFNYhnAgD6DbCdHG1FK9rZn4.roa
File:                     uLoCFNYhnAgD6DbCdHG1FK9rZn4.roa (raw, json)
Hash identifier:          dAWlMqYkt/d1OQ25JleyGzDtYFMbD0IrL5Ubvrsp7gM=
Subject key identifier:   B8:BA:02:14:D6:21:9C:08:03:E8:36:C2:74:71:B5:14:AF:6B:66:7E
Certificate issuer:       /CN=288849f0134b1ab666961d8016f473d73dbb381e
Certificate serial:       0183137B7C99283103CE9F2026D262D8776F
Authority key identifier: 28:88:49:F0:13:4B:1A:B6:66:96:1D:80:16:F4:73:D7:3D:BB:38:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIhJ8BNLGrZmlh2AFvRz1z27OB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/uLoCFNYhnAgD6DbCdHG1FK9rZn4.roa
Signing time:             Tue 06 Sep 2022 15:46:43 +0000
ROA not before:           Tue 06 Sep 2022 15:46:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39522
IP address blocks:        194.26.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:13:7b:7c:99:28:31:03:ce:9f:20:26:d2:62:d8:77:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=288849f0134b1ab666961d8016f473d73dbb381e
        Validity
            Not Before: Sep  6 15:46:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8ba0214d6219c0803e836c27471b514af6b667e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:43:0d:c7:6d:04:2d:f9:51:67:6c:af:18:
                    53:cc:29:6e:f7:20:a1:45:f6:92:88:47:07:0d:17:
                    17:83:74:d8:70:19:ef:59:eb:de:2b:aa:9d:7e:10:
                    dc:4f:cb:30:14:7d:60:61:bd:32:ed:12:c5:14:3c:
                    56:c0:4a:af:8d:6a:bc:c6:e2:a9:5d:7a:8c:6d:e8:
                    f3:79:ea:ad:15:0e:7d:67:0a:fb:e7:83:60:61:a5:
                    3f:96:0b:d4:f5:ab:c3:5f:89:6d:72:dc:c3:ff:95:
                    3e:f3:3a:2c:da:5c:26:75:95:6d:57:3b:e5:eb:16:
                    8b:fa:5d:40:21:f3:d8:66:c4:dc:57:7e:10:92:2a:
                    d0:b2:8c:1b:10:1b:15:47:27:16:24:1b:e3:25:93:
                    67:75:82:0f:26:d1:cf:6a:7d:41:16:05:c1:04:1e:
                    3c:5f:41:17:df:ba:e1:47:fb:94:aa:57:bd:ad:3f:
                    67:9c:ff:51:20:3d:cb:0f:a5:98:7f:f3:0c:bc:1e:
                    c0:c5:3e:43:90:6a:c6:f2:d2:3b:11:15:91:f7:45:
                    8c:0f:4e:45:9a:c9:ae:0d:3b:d0:3d:64:77:18:1e:
                    94:4a:76:bf:20:54:3a:96:99:1c:47:1f:b3:44:ea:
                    80:3a:a3:cf:7e:c9:34:ec:39:ee:4f:88:68:c1:e3:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BA:02:14:D6:21:9C:08:03:E8:36:C2:74:71:B5:14:AF:6B:66:7E
            X509v3 Authority Key Identifier:
                keyid:28:88:49:F0:13:4B:1A:B6:66:96:1D:80:16:F4:73:D7:3D:BB:38:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIhJ8BNLGrZmlh2AFvRz1z27OB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/uLoCFNYhnAgD6DbCdHG1FK9rZn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/KIhJ8BNLGrZmlh2AFvRz1z27OB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:21:e5:5c:88:72:a7:d9:32:6a:c1:f0:bb:d5:61:0e:95:
         60:13:57:f5:f6:b9:5e:72:7b:e6:24:78:58:4a:64:cb:4e:d2:
         82:1d:1b:2f:ae:d0:31:db:fb:c2:7f:95:e1:49:2c:5c:69:33:
         ee:bc:65:88:89:1a:b5:3a:32:b7:13:ba:98:1e:b7:af:64:82:
         a0:85:8f:92:ab:35:22:d6:ff:b4:8d:55:fe:73:83:b0:99:85:
         96:4a:47:39:37:3d:c5:fc:5d:bf:3c:4a:ce:6c:7e:ff:de:35:
         27:1c:25:af:d2:47:c2:b6:e5:d9:14:49:c7:e7:9e:05:ba:8a:
         b2:8c:c9:9c:36:e1:98:63:0c:bc:e4:52:03:db:1b:e4:a6:19:
         ec:4a:61:6a:2e:75:20:f1:7c:d7:b6:c2:f3:5f:0f:9f:f0:99:
         16:90:8e:b0:22:ab:1f:e6:13:07:0b:82:86:b9:1a:1e:b3:80:
         de:7d:8f:a4:06:9f:84:37:ea:fe:e8:33:11:1b:b0:08:7d:0f:
         9d:a7:1b:7c:e5:ff:ef:35:2f:b1:08:9f:40:24:fa:c2:0e:42:
         94:12:df:ac:e2:4b:c9:bc:37:1d:37:23:37:f3:7b:ec:27:13:
         52:c4:9d:10:2d:1f:5e:89:1d:1c:18:c1:05:cc:c8:fd:8b:67:
         21:71:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org