Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/feOXfwdMPQgRtGfIZvJtZ4EX_FQ.roa
File:                     feOXfwdMPQgRtGfIZvJtZ4EX_FQ.roa (raw, json)
Hash identifier:          O4af5PlmjbUgAO5LpgfDkU+X65GhU8kBRFeTEehApjU=
Subject key identifier:   7D:E3:97:7F:07:4C:3D:08:11:B4:67:C8:66:F2:6D:67:81:17:FC:54
Certificate issuer:       /CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
Certificate serial:       02103373
Authority key identifier: FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/feOXfwdMPQgRtGfIZvJtZ4EX_FQ.roa
Signing time:             Sat 01 Jan 2022 11:01:35 +0000
ROA not before:           Sat 01 Jan 2022 11:01:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201942
IP address blocks:        193.56.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34616179 (0x2103373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
        Validity
            Not Before: Jan  1 11:01:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7de3977f074c3d0811b467c866f26d678117fc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:d2:9a:5f:78:7d:39:b5:31:3a:e2:be:12:
                    40:81:5c:39:ca:29:5a:24:ac:3c:33:43:9e:7d:8e:
                    7f:99:56:1f:0a:74:15:16:dd:8a:6a:d0:66:9d:52:
                    4c:ce:5e:5c:f5:49:2a:8a:dc:9e:ad:cf:df:04:67:
                    42:ec:d4:da:44:14:58:47:77:73:3c:b9:67:f6:85:
                    07:77:f4:d9:65:39:6a:9e:3f:f5:b6:c0:9c:8b:cb:
                    c6:f1:be:12:80:a6:e7:20:12:7d:e9:ed:6a:f0:77:
                    26:34:19:93:3c:06:79:2b:d4:5a:49:69:2c:8b:8f:
                    df:10:52:bf:75:39:06:b1:e3:94:25:37:52:6a:2f:
                    b5:34:82:f0:08:0f:72:63:b9:ef:3f:32:f6:aa:10:
                    a0:f2:ff:61:60:13:ef:5a:76:1e:6d:6e:bd:9b:47:
                    39:65:54:64:df:1f:8e:b6:55:2b:95:b2:94:c8:29:
                    9c:c3:99:ab:00:64:19:09:38:66:b5:e0:de:cb:5d:
                    34:57:1c:48:0d:ec:87:79:d0:66:22:ec:cf:18:7e:
                    9b:1f:f5:42:08:37:e7:cc:22:b3:f2:f3:d7:d2:94:
                    b9:54:80:49:4c:33:56:be:ca:57:aa:fb:eb:bc:cd:
                    0b:01:74:86:9c:0a:a4:83:22:d0:c5:92:60:5e:22:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:97:7F:07:4C:3D:08:11:B4:67:C8:66:F2:6D:67:81:17:FC:54
            X509v3 Authority Key Identifier:
                keyid:FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/feOXfwdMPQgRtGfIZvJtZ4EX_FQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:aa:e3:b0:97:56:aa:8a:51:56:cd:90:27:a9:30:ba:7f:
         8c:0c:23:33:7f:4f:87:05:a2:db:d8:01:27:2d:28:f0:56:99:
         db:a0:42:b8:8e:fe:e6:99:38:44:71:9a:e0:6e:9f:82:bd:da:
         1a:3d:14:36:c5:78:d4:72:9a:4b:4d:8e:d3:a2:25:84:40:97:
         17:2d:b2:f9:f2:50:10:be:27:06:b9:a0:92:5a:28:29:0c:62:
         87:f7:06:84:4c:ae:4f:19:b8:62:d3:35:7c:05:11:79:3f:48:
         f6:f7:b4:6e:10:5c:71:04:bb:17:47:e5:0b:a3:98:5a:cd:87:
         48:34:75:54:a0:74:71:a7:5d:e0:a7:7b:cd:d8:e5:fc:74:e8:
         cd:af:41:a0:71:96:c6:bc:61:1d:c0:39:65:b3:d4:ae:a3:5c:
         41:c6:9c:84:31:43:b5:70:76:ef:bf:87:44:7d:0a:b5:bb:4b:
         ac:a4:0d:b7:5f:46:4e:20:db:75:1d:3f:35:37:50:59:15:6e:
         b3:10:4d:44:f9:71:ae:a1:69:e5:4f:62:fe:a0:0c:2f:a5:00:
         2d:45:f4:99:e1:36:48:69:7b:2d:3d:f2:07:39:35:99:80:50:
         4f:95:b9:8b:7b:6c:3b:2e:ee:27:ff:c9:dc:da:0b:ed:28:10:
         b8:f2:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:24 2024 by rpki-client on console-fra.rpki-client.org