Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa
File:                     HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa (raw, json)
Hash identifier:          8hPRF1kSkaqVUmPVilq+o++ih9QWxDQj5I1rzqFV9dA=
Subject key identifier:   1D:B4:A1:E2:2A:81:E6:52:EE:1A:00:38:D9:90:2A:84:24:C0:18:46
Certificate issuer:       /CN=93f84606257f2ddbdfa983b62cefbc1037cd73c4
Certificate serial:       1893BDAB
Authority key identifier: 93:F8:46:06:25:7F:2D:DB:DF:A9:83:B6:2C:EF:BC:10:37:CD:73:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_hGBiV_LdvfqYO2LO-8EDfNc8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa
Signing time:             Sat 01 Jan 2022 10:01:36 +0000
ROA not before:           Sat 01 Jan 2022 10:01:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1103
IP address blocks:        194.53.89.0/24 maxlen: 24
                          194.53.88.0/24 maxlen: 24
                          194.53.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412335531 (0x1893bdab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f84606257f2ddbdfa983b62cefbc1037cd73c4
        Validity
            Not Before: Jan  1 10:01:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1db4a1e22a81e652ee1a0038d9902a8424c01846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:99:86:7a:a3:a8:c3:e8:5c:88:04:94:69:
                    5b:9d:48:fc:6b:01:56:da:6c:85:57:3b:f5:ba:8a:
                    78:c8:fe:7f:bf:b9:25:8a:5b:ac:03:d4:4d:bc:08:
                    6d:c8:f2:ee:d1:6a:0a:74:1a:37:03:a7:ce:64:6c:
                    82:37:e5:2d:a7:05:d9:43:7a:61:09:19:e2:62:34:
                    67:6d:3f:92:fa:2d:7f:54:9c:ad:96:50:b3:83:a8:
                    a1:7e:6b:11:fa:00:ec:a9:2d:b9:f4:90:90:3f:c9:
                    4c:14:7b:af:17:62:79:54:38:ee:61:4f:6b:ad:8c:
                    dc:fc:f6:8d:ba:77:74:c1:0a:ea:c7:08:03:9a:f7:
                    7b:48:0f:d7:df:2f:a1:0e:96:35:96:f7:5c:83:95:
                    6a:61:0b:7a:ce:9e:c2:7a:c2:6f:4d:ff:73:d8:52:
                    87:3b:3b:f1:20:60:74:19:61:d2:ac:dc:e9:2c:78:
                    e8:ae:0e:d2:df:6c:92:be:d0:47:b7:6a:e5:78:a1:
                    e8:13:68:31:0d:bf:3b:6c:7d:83:2a:a3:18:e7:77:
                    1e:e8:f7:82:dc:e8:9d:1c:9a:e3:64:ce:8e:87:5d:
                    59:a4:65:d8:ab:57:06:ca:34:9c:76:17:8f:ed:f7:
                    ce:49:48:89:cf:a6:b3:3a:50:2e:d0:b0:03:7a:5b:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B4:A1:E2:2A:81:E6:52:EE:1A:00:38:D9:90:2A:84:24:C0:18:46
            X509v3 Authority Key Identifier:
                keyid:93:F8:46:06:25:7F:2D:DB:DF:A9:83:B6:2C:EF:BC:10:37:CD:73:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_hGBiV_LdvfqYO2LO-8EDfNc8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/k_hGBiV_LdvfqYO2LO-8EDfNc8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.88.0/23
                  194.53.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:5a:14:3f:72:7b:da:7d:ec:bf:70:90:40:ec:2b:ff:9f:
         d8:a8:68:56:5d:58:2a:57:26:88:5a:03:6b:64:7a:37:82:5a:
         0f:ef:e1:ea:44:38:f4:ea:9a:5f:55:6e:b4:f8:e3:82:04:a2:
         26:90:a3:89:e3:29:73:95:54:eb:cf:b2:ce:92:71:66:9d:12:
         9e:f4:22:2b:5d:8a:f6:83:74:96:07:5a:02:5a:8c:e5:3f:d2:
         97:47:27:4f:08:8a:6c:51:38:9a:19:b2:9a:51:bf:22:13:8e:
         0e:6e:8b:0f:72:8e:f0:78:d0:c6:4e:4d:94:bf:3a:50:02:0b:
         9e:20:0a:9d:72:5c:54:6a:44:72:36:af:c8:99:be:c4:6c:d7:
         35:a0:3d:74:64:63:36:b7:bd:d5:82:99:12:fc:55:52:97:2f:
         11:e8:23:11:dc:fb:ad:56:a8:eb:e7:57:36:34:1d:1a:33:aa:
         7b:46:fd:49:61:16:35:fb:68:37:ae:a7:96:4c:31:86:58:0d:
         d4:29:8a:ba:ba:ec:46:ae:28:6d:a1:74:9a:ec:04:52:9f:52:
         d9:63:49:c8:14:d4:e7:f5:ad:95:b7:ce:31:88:2e:46:62:2f:
         99:44:e6:ba:ab:86:84:ef:7f:23:30:c9:7b:b5:87:2e:71:e2:
         58:6c:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:26 2024 by rpki-client on console-ams.rpki-client.org