Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/xj73gop0nXzrZ0nteEm8_9Gl0_o.roa
File:                     xj73gop0nXzrZ0nteEm8_9Gl0_o.roa (raw, json)
Hash identifier:          i3rpnxykw4VTLM3brCLfbs66ov5O98pIiuthEHguD5U=
Subject key identifier:   C6:3E:F7:82:8A:74:9D:7C:EB:67:49:ED:78:49:BC:FF:D1:A5:D3:FA
Certificate issuer:       /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial:       041C69
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/xj73gop0nXzrZ0nteEm8_9Gl0_o.roa
Signing time:             Thu 03 Feb 2022 16:40:53 +0000
ROA not before:           Thu 03 Feb 2022 16:40:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209982
IP address blocks:        193.163.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269417 (0x41c69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
        Validity
            Not Before: Feb  3 16:40:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c63ef7828a749d7ceb6749ed7849bcffd1a5d3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:a9:37:5b:55:52:bc:51:03:f4:19:9c:f6:
                    01:85:4b:3d:30:38:9d:fe:3f:7f:db:93:ea:2b:fa:
                    af:18:83:7c:54:da:2e:32:ea:2b:96:2f:ab:5a:d0:
                    57:cf:38:b3:9f:4a:b5:32:65:74:11:bc:34:68:10:
                    61:f0:12:ad:f9:88:c2:c4:ca:87:22:bf:ea:71:56:
                    a3:d0:be:99:de:bb:bd:78:88:d1:82:ec:13:c5:f9:
                    ca:6a:2d:39:41:28:b0:c7:a3:af:8b:57:48:39:e6:
                    38:94:af:8d:d6:7a:f4:5d:58:4c:06:69:a4:8c:bb:
                    47:77:18:45:a0:35:c3:97:6e:bb:24:b0:72:c9:cc:
                    25:af:e6:c5:cf:7e:60:48:33:61:f2:41:ae:e3:46:
                    83:2e:6f:f5:9a:97:dd:ad:1f:ab:32:47:0b:1a:7a:
                    36:ec:69:a0:67:1f:04:9d:7b:29:0d:23:aa:3f:f4:
                    9c:fe:44:9a:fd:21:41:d8:db:9c:21:a0:87:91:37:
                    fd:38:0d:e5:6e:e7:ce:cf:46:06:31:19:dc:54:0c:
                    c3:28:c2:23:39:08:88:d0:05:f7:f9:d0:33:df:c1:
                    26:a9:7f:79:04:dc:da:46:ff:1e:e5:28:eb:c9:c2:
                    61:23:21:60:d8:bf:f1:a5:21:33:8d:20:34:3b:0f:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:F7:82:8A:74:9D:7C:EB:67:49:ED:78:49:BC:FF:D1:A5:D3:FA
            X509v3 Authority Key Identifier:
                keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/xj73gop0nXzrZ0nteEm8_9Gl0_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:43:06:1b:f8:13:2c:bd:92:b0:8b:36:5e:aa:58:e0:27:97:
         be:4d:cc:b6:2d:04:96:8e:65:3e:f9:0c:01:c0:d4:49:af:8d:
         d2:3a:a1:f5:12:d3:40:ed:07:ec:07:78:be:fe:39:81:c2:96:
         59:8c:8f:aa:01:79:dc:3d:0b:7b:8f:9c:95:90:cc:65:13:eb:
         28:ad:1e:e2:89:5e:c1:e1:01:2f:b6:69:74:f2:05:22:2a:98:
         05:f0:8d:f5:97:f3:90:2a:c8:fa:0a:cf:a8:ca:9d:e9:2a:cd:
         0b:d3:32:01:4c:1b:da:2d:ee:1a:32:39:9d:4c:84:fb:79:91:
         d9:a6:8b:4c:9f:17:e1:2b:05:2e:15:fd:6f:93:66:31:0e:a1:
         64:d8:a4:72:0f:f2:6c:6b:be:c2:3b:e5:51:54:9b:2a:74:b3:
         54:1c:14:b3:b5:3e:ec:3e:26:47:84:c7:12:73:44:79:8f:9d:
         aa:80:1c:89:8f:a0:b8:38:20:7d:05:b7:3e:71:75:4b:c5:fa:
         e6:d8:85:00:fb:89:81:9a:43:2f:67:2d:31:f5:a9:76:9a:ac:
         51:f8:f9:f1:de:0a:76:fc:25:4b:b8:d7:84:1e:aa:57:bd:e7:
         35:27:31:f3:d3:9a:c4:76:d6:6c:73:0b:60:71:3e:3a:f0:b7:
         df:b5:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org