Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/5OBTpyZceA0stCk6XzTV6iyWrjw.roa
File:                     5OBTpyZceA0stCk6XzTV6iyWrjw.roa (raw, json)
Hash identifier:          F8lqTM0bwUORJ6Bn91StwxUGnqbSGw461y3ViFHKNQA=
Subject key identifier:   E4:E0:53:A7:26:5C:78:0D:2C:B4:29:3A:5F:34:D5:EA:2C:96:AE:3C
Certificate issuer:       /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial:       0193B1
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/5OBTpyZceA0stCk6XzTV6iyWrjw.roa
Signing time:             Thu 03 Feb 2022 16:40:52 +0000
ROA not before:           Thu 03 Feb 2022 16:40:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.163.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103345 (0x193b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
        Validity
            Not Before: Feb  3 16:40:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4e053a7265c780d2cb4293a5f34d5ea2c96ae3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:50:f1:49:e2:32:69:fb:50:7a:9e:90:bc:46:
                    49:d5:d0:2e:77:57:44:7d:06:48:c8:c3:ff:11:3e:
                    0c:71:de:ee:ef:92:9a:43:03:61:6b:b8:dd:d4:13:
                    fa:b3:c3:d6:93:0a:96:7c:72:13:f3:ad:ea:10:e6:
                    bc:80:3e:cb:64:58:d6:9d:3d:a0:dd:24:73:0d:0f:
                    37:90:7c:54:5b:9f:87:7e:49:19:c3:14:14:1d:c9:
                    9e:8e:36:17:85:70:62:69:07:86:a9:9f:0a:20:bc:
                    ba:fb:72:de:b6:32:6a:82:18:4f:d3:78:71:39:3e:
                    4e:19:05:9e:2b:81:22:80:58:40:f2:bc:af:9d:5b:
                    75:64:de:35:ba:dd:4a:2b:df:10:e1:9d:92:9f:b5:
                    17:75:02:c3:ec:05:53:0d:2e:3d:b2:e4:2a:1b:cb:
                    2e:3c:60:b6:1a:52:09:a1:fa:e8:e4:02:7d:7d:db:
                    a5:4a:3c:33:06:20:ac:9f:59:60:03:63:94:81:26:
                    93:05:91:dc:a0:c2:9f:8d:e6:92:93:91:4d:36:d6:
                    51:1f:0c:10:01:8c:c7:28:db:0c:8a:b5:51:e2:a7:
                    59:da:a0:c1:95:87:e0:8c:93:86:f3:ce:90:4e:2c:
                    eb:f2:a6:4b:d4:2f:6a:13:f1:63:6f:2f:d2:72:1c:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E0:53:A7:26:5C:78:0D:2C:B4:29:3A:5F:34:D5:EA:2C:96:AE:3C
            X509v3 Authority Key Identifier:
                keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/5OBTpyZceA0stCk6XzTV6iyWrjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:51:ae:cf:c1:e1:03:fa:e9:e8:89:aa:37:74:ba:ae:a2:1a:
         c8:96:b9:36:dd:f8:e2:dc:41:30:86:c9:a5:05:7e:43:b0:fc:
         fe:70:96:21:1d:11:60:db:02:e9:19:e7:69:bf:f5:13:e9:57:
         60:59:28:11:19:c7:f6:a4:f2:fb:4a:5f:92:08:42:7c:3b:8f:
         81:5d:dc:c4:00:3c:56:1c:06:f7:c6:24:2a:42:91:4a:25:47:
         c9:9f:1c:fa:c8:ce:b6:36:e5:58:03:4c:3e:b9:22:a3:e6:10:
         d1:97:44:0b:48:b0:59:a1:bb:59:d9:e2:95:07:b3:cb:65:e5:
         11:03:0e:96:a8:45:6a:8c:e2:2c:c0:93:8b:d7:d9:44:1b:a2:
         d7:45:50:33:9e:79:15:6a:1f:45:96:0e:26:a9:df:d2:ca:dd:
         65:da:2e:75:ac:66:fb:f4:ae:4a:2c:73:95:8d:fd:dd:59:c5:
         1d:06:b8:ca:9a:c0:cc:50:ed:d9:82:6e:b3:f5:8b:76:a5:86:
         d5:67:6d:79:b2:63:1a:af:4d:a3:0d:7d:b8:aa:ae:06:0d:22:
         33:a1:45:84:3c:e6:12:40:f8:65:45:3a:dd:7d:c2:af:3b:8c:
         10:a6:c0:02:94:d5:66:5f:b9:3a:7e:d1:cb:6d:5d:6f:4b:93:
         01:20:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org