Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/XKq-RsUXXPOSSUFhNtn0wmxn2tk.roa
File:                     XKq-RsUXXPOSSUFhNtn0wmxn2tk.roa (raw, json)
Hash identifier:          Yucb88I1CNuDAF3sseIxKGV7Jmt76kxAl8JqZ+15OPQ=
Subject key identifier:   5C:AA:BE:46:C5:17:5C:F3:92:49:41:61:36:D9:F4:C2:6C:67:DA:D9
Certificate issuer:       /CN=782668f3ba477de2052acc110b19ed4b611309db
Certificate serial:       EA829F
Authority key identifier: 78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/XKq-RsUXXPOSSUFhNtn0wmxn2tk.roa
Signing time:             Tue 17 May 2022 06:32:29 +0000
ROA not before:           Tue 17 May 2022 06:32:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6453
IP address blocks:        193.105.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15368863 (0xea829f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782668f3ba477de2052acc110b19ed4b611309db
        Validity
            Not Before: May 17 06:32:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5caabe46c5175cf39249416136d9f4c26c67dad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:0f:10:62:8c:de:60:0f:7f:81:9f:13:f5:
                    2c:b7:b3:67:b7:11:24:0f:2f:b5:61:e8:af:4b:8d:
                    41:62:29:42:c3:ca:32:05:94:67:2a:d3:aa:52:15:
                    2d:fe:99:39:dd:33:59:35:ae:ad:91:1d:42:93:eb:
                    51:3d:c9:89:6d:40:28:1b:9a:30:3f:2a:96:5a:7b:
                    d6:df:16:a7:ed:04:df:75:30:db:2b:51:3c:7e:ee:
                    39:dd:74:4a:f5:81:e1:d3:41:fb:e8:16:c3:51:36:
                    bc:cc:0e:82:a8:45:94:88:6d:a5:a0:8f:d9:08:e3:
                    15:85:95:f2:ba:aa:29:73:bb:da:6d:fa:3e:d7:d5:
                    a1:ca:ad:37:b3:c3:54:af:d9:7b:41:05:4f:80:e9:
                    1e:b2:69:92:27:45:ed:29:ea:0a:09:0a:72:68:fa:
                    61:53:d6:59:c9:e7:c5:5c:59:6c:4e:77:80:ec:15:
                    ae:ed:bc:7e:08:21:66:61:0a:b1:6d:5e:e6:71:8e:
                    c8:3b:40:35:e6:60:f6:13:1d:c2:de:c9:88:05:09:
                    d7:9e:e4:91:d1:31:f8:b9:e5:05:c5:de:01:1d:22:
                    79:ac:2f:d0:68:33:36:d2:f0:c9:cd:cf:3f:75:40:
                    63:a7:4c:9a:c2:dd:37:75:7b:e0:9a:08:94:d3:c2:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AA:BE:46:C5:17:5C:F3:92:49:41:61:36:D9:F4:C2:6C:67:DA:D9
            X509v3 Authority Key Identifier:
                keyid:78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/XKq-RsUXXPOSSUFhNtn0wmxn2tk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:3e:6d:6e:f0:27:45:42:52:1d:ed:af:29:d3:a6:46:3d:
         a8:60:62:51:83:e4:16:6f:58:53:33:8a:5a:f1:6c:79:c4:df:
         55:57:32:0c:c3:db:7a:02:70:a7:6b:78:2c:f8:3b:bf:77:a9:
         49:4d:a1:04:0d:29:99:15:ce:65:46:bd:5c:04:bd:e6:01:bc:
         ba:35:d6:3d:2d:80:4f:e4:8d:0b:14:7a:ee:3b:25:37:14:8f:
         53:d4:f9:0d:e1:04:24:4c:a5:3c:15:3a:4e:bd:a1:1d:8c:da:
         f5:12:a6:64:d0:02:9c:9c:a7:e9:b3:2f:51:49:4f:a3:ca:f6:
         ee:73:5b:a5:50:57:cc:43:2b:dc:99:8f:10:bc:a1:8d:98:dd:
         0a:18:10:a5:df:fc:c0:81:f8:bb:be:f4:55:c7:d6:e6:9a:44:
         08:80:25:cd:d0:f6:f1:10:0e:c1:d1:da:4a:79:3a:52:1c:34:
         2e:a5:e6:02:85:8a:17:3d:9c:bb:48:a2:0d:bc:4e:e9:d2:a1:
         87:2e:fb:0c:79:00:3d:d4:74:a7:d2:99:e2:f4:ba:73:05:ad:
         ff:fe:78:ee:b6:18:b5:33:34:a4:e7:8c:e5:a2:d1:06:70:12:
         27:71:39:38:75:05:e5:6c:99:fb:f2:d5:70:a6:92:01:e3:a7:
         07:cb:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org