Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1b3e7e-8dec-4595-8d49-a67325a3f306/1/TStsByTIld2C4MuUiWXkQbJr6ew.roa
File:                     TStsByTIld2C4MuUiWXkQbJr6ew.roa (raw, json)
Hash identifier:          74dASpNadCiRxuVNJLQQoGXZyfRuNmV7xbt0oc3g1a4=
Subject key identifier:   4D:2B:6C:07:24:C8:95:DD:82:E0:CB:94:89:65:E4:41:B2:6B:E9:EC
Certificate issuer:       /CN=7862d43c612fe0689dbf4b296231dd15463866dd
Certificate serial:       01856D6F8490FFA384CACD7FCE854C800072
Authority key identifier: 78:62:D4:3C:61:2F:E0:68:9D:BF:4B:29:62:31:DD:15:46:38:66:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGLUPGEv4Gidv0spYjHdFUY4Zt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1b3e7e-8dec-4595-8d49-a67325a3f306/1/TStsByTIld2C4MuUiWXkQbJr6ew.roa
Signing time:             Sun 01 Jan 2023 13:05:02 +0000
ROA not before:           Sun 01 Jan 2023 13:05:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24989
IP address blocks:        195.158.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:6f:84:90:ff:a3:84:ca:cd:7f:ce:85:4c:80:00:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7862d43c612fe0689dbf4b296231dd15463866dd
        Validity
            Not Before: Jan  1 13:05:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d2b6c0724c895dd82e0cb948965e441b26be9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:ff:61:27:c0:37:3a:00:37:45:4f:96:9f:
                    07:4c:cb:b7:47:e5:d1:fb:7c:ba:1d:99:9d:45:0f:
                    f7:6c:9f:40:8f:1c:b9:70:fa:8b:82:e4:d5:63:99:
                    1c:07:04:3b:29:dc:7e:6d:8a:14:e8:b7:04:f0:02:
                    49:f1:11:5e:fe:81:40:9c:67:94:21:c2:d9:77:2d:
                    4c:12:6f:fe:91:57:85:51:0e:57:34:35:97:f0:92:
                    a7:6a:30:28:3d:eb:5a:e3:f6:84:e4:aa:94:8f:a0:
                    e7:7c:af:bc:5c:f0:55:d6:1c:a5:2b:d3:be:23:33:
                    22:4b:75:fb:47:03:df:d2:b6:5c:94:a4:c3:05:7d:
                    8f:e2:8d:c5:5c:a4:39:4e:04:0b:04:8b:05:da:6c:
                    26:65:49:66:d6:6f:6b:a8:0d:16:42:bb:40:dc:2b:
                    01:32:c9:4a:e2:18:a5:2d:aa:9a:ac:3f:98:2e:e3:
                    fb:5f:c4:e5:72:a5:61:9c:cd:06:fa:62:48:70:8f:
                    e2:48:b7:68:41:ec:d5:1f:f2:ad:0a:c1:6f:65:e3:
                    e5:dc:5a:46:79:94:50:53:d5:08:e4:19:2e:19:b7:
                    b5:ba:7e:3f:ad:34:b8:36:e7:91:86:50:a2:ae:4a:
                    8e:55:30:d9:b0:cb:95:a9:bd:62:47:db:c1:29:f5:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:6C:07:24:C8:95:DD:82:E0:CB:94:89:65:E4:41:B2:6B:E9:EC
            X509v3 Authority Key Identifier:
                keyid:78:62:D4:3C:61:2F:E0:68:9D:BF:4B:29:62:31:DD:15:46:38:66:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGLUPGEv4Gidv0spYjHdFUY4Zt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1b3e7e-8dec-4595-8d49-a67325a3f306/1/TStsByTIld2C4MuUiWXkQbJr6ew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1b3e7e-8dec-4595-8d49-a67325a3f306/1/eGLUPGEv4Gidv0spYjHdFUY4Zt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.158.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:8e:39:d7:6c:9c:f4:4a:fd:95:8f:91:b4:27:33:c3:a0:
         01:90:e6:8d:b3:cc:1c:e6:8e:4e:fd:8f:92:96:d5:39:f6:6d:
         e6:58:a3:da:98:3c:4b:37:1d:2e:bc:32:24:6c:d9:7f:0b:c2:
         1a:01:4f:b5:b8:87:4e:62:1c:5a:cb:7f:1e:68:f2:c4:b1:e1:
         dc:91:07:1a:e2:92:07:bc:de:2c:ed:8e:cf:d4:58:a5:08:d5:
         a3:69:65:20:16:ad:a4:a2:4f:7b:b1:f2:7f:c0:b3:30:a0:69:
         1c:8f:9f:75:fb:d9:5f:a4:3f:cc:0e:88:a4:1d:19:9d:f7:67:
         51:fc:86:da:d8:eb:28:90:bb:58:e5:44:92:98:46:0d:3b:6a:
         97:ba:54:9b:da:f7:90:85:c4:c4:1b:78:69:cf:58:0a:18:ea:
         30:65:cc:6a:6f:ff:eb:a7:1d:59:f9:64:ec:61:50:ff:b2:cb:
         61:57:7c:f9:85:4f:32:cd:f1:f9:3d:d6:df:c1:03:87:bc:bf:
         2f:f7:16:c3:f3:e8:ab:cf:9c:04:22:00:3d:44:d4:94:d9:3a:
         99:4f:e3:79:3c:29:f2:e7:5f:e1:ed:6f:77:17:22:1f:67:4e:
         96:f4:c8:f9:7b:e1:3c:16:8a:a1:1b:d6:ec:e1:81:33:50:aa:
         11:ed:92:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org