Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/RmDo4JtOz_JDyB5V-ik_gmoNQbg.roa
File:                     RmDo4JtOz_JDyB5V-ik_gmoNQbg.roa (raw, json)
Hash identifier:          EGb6jy7o/C+ZNtaczbLQJTLmDLHpIjPaJE+lCN6g1ek=
Subject key identifier:   46:60:E8:E0:9B:4E:CF:F2:43:C8:1E:55:FA:29:3F:82:6A:0D:41:B8
Certificate issuer:       /CN=a367dbfaa842b787816f41ca2dcbddb4c0589758
Certificate serial:       074AABFC
Authority key identifier: A3:67:DB:FA:A8:42:B7:87:81:6F:41:CA:2D:CB:DD:B4:C0:58:97:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2fb-qhCt4eBb0HKLcvdtMBYl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/RmDo4JtOz_JDyB5V-ik_gmoNQbg.roa
Signing time:             Sat 01 Jan 2022 14:07:53 +0000
ROA not before:           Sat 01 Jan 2022 14:07:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34345
IP address blocks:        193.242.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122334204 (0x74aabfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a367dbfaa842b787816f41ca2dcbddb4c0589758
        Validity
            Not Before: Jan  1 14:07:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4660e8e09b4ecff243c81e55fa293f826a0d41b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:42:aa:91:b0:1d:06:37:7d:31:ab:48:88:
                    f4:37:e4:89:6e:1e:a2:e0:1e:65:b6:cc:9f:55:e5:
                    2a:88:51:60:c2:52:79:f6:ea:b8:ca:43:28:1d:e9:
                    75:e7:7c:30:a8:85:a8:88:f9:db:53:2a:8d:9f:de:
                    51:54:c9:a2:e0:8b:18:cc:fc:fe:b1:b2:4e:2f:3e:
                    70:79:30:bc:39:9d:44:98:93:d4:b6:64:90:57:c0:
                    c3:22:b4:01:64:21:09:7f:3f:48:48:ad:f9:b4:ea:
                    de:1b:11:ca:fe:e3:d2:b0:15:70:3e:9d:60:2a:b3:
                    57:21:21:31:6d:07:b0:2a:2a:2c:86:51:d7:88:c9:
                    f7:f3:f7:a5:4b:b3:b6:90:fe:84:ba:76:f5:c2:3e:
                    ac:79:1b:30:b0:e6:2d:5f:fc:13:fb:c9:0b:68:74:
                    60:26:47:07:a6:df:ef:75:64:fa:8e:6a:5d:59:0d:
                    9f:c9:0b:33:2b:b4:4b:70:bb:b5:f1:3f:a2:5d:1d:
                    73:98:bb:1f:6d:00:d7:05:3e:5b:4a:26:7f:a5:68:
                    f1:e1:85:93:1f:0e:59:a5:3f:50:40:a7:b5:24:ab:
                    d8:6c:e4:6d:f6:e7:fb:be:c3:a8:c0:aa:69:0d:9c:
                    18:52:37:46:21:99:73:fd:c2:6d:73:6b:0d:75:00:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:E8:E0:9B:4E:CF:F2:43:C8:1E:55:FA:29:3F:82:6A:0D:41:B8
            X509v3 Authority Key Identifier:
                keyid:A3:67:DB:FA:A8:42:B7:87:81:6F:41:CA:2D:CB:DD:B4:C0:58:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2fb-qhCt4eBb0HKLcvdtMBYl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/RmDo4JtOz_JDyB5V-ik_gmoNQbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/o2fb-qhCt4eBb0HKLcvdtMBYl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:47:94:99:b9:7d:cc:0b:55:dc:b8:0a:b9:43:a2:3f:32:16:
         f6:10:af:1f:ac:36:30:e5:f1:cc:f6:c7:02:33:6f:6c:e8:d9:
         d7:04:f5:27:c0:6e:fc:81:b9:e6:7c:f6:12:e7:7f:d7:16:3a:
         7b:0b:07:0d:9e:fb:23:ee:68:30:fe:0c:30:64:16:20:56:ae:
         eb:fe:65:b4:40:66:26:ea:1d:bd:26:5a:7c:76:79:76:2b:33:
         75:75:6c:50:42:96:03:78:eb:39:c3:e4:e1:3d:4d:bc:80:fd:
         00:65:a0:00:3d:9d:a5:14:be:a5:16:b8:dc:8b:72:75:75:c1:
         02:17:9e:6b:93:98:89:00:b5:fc:28:1e:d4:10:cf:15:17:a9:
         5d:11:24:ca:b8:e6:4a:62:1d:d4:f1:85:fd:13:b6:c5:93:bb:
         f1:ca:d7:41:95:9d:76:78:d1:db:89:04:c7:a7:2a:0e:00:71:
         2d:0b:41:3b:d1:4b:f8:77:38:1e:28:bc:73:3f:45:e1:90:79:
         2a:ec:18:82:7c:75:57:a8:a3:3e:48:fe:ea:b9:7f:7a:b3:50:
         3e:af:4d:4a:e8:99:a3:96:01:ff:3a:ec:34:71:ce:c0:3d:35:
         24:7e:3a:0a:44:e4:9a:2f:46:ad:48:0f:25:6b:4f:2a:89:74:
         04:be:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org